The Hackers World

A Blog About Cyber Technology news updates, Tricks, Tips and Ethical Hacking Tutorials, Gadget Reviews and many more.

5/24/2020

300+ Powerful Termux Hacking Tools For Hackers

300+ Powerful Termux Hacking Tools For Hackers
Hacking made easy with termux android app, nowadays there are so many Pentesters, Security Researchers And Hackers are using termux android app to perform some pentesting stuff.

If you're looking for Best hacking tool for termux then this post is for you
 
                   Termux Hacking Tools

In this post am going to present you the best hacking tools for termux, by using these best termux tools you can do some pentesting stuff

 the Amazing thing is that some of these tools consist of many other hacking tools which can be installed in one click.


In our recent post i have already told you about termux and how to install hacking tools in termux,


If you have missed out that then don't worry You can read the Ultimate Guide To : Ethical Hacking With Termux

Top 10 Termux Hacking Tools

Before we are going to present you the tools, let me know you what exactly we are going to tell you,


  • Best Hacking Tools For Termux
  • How to install these hacking tools in termux
  • How to use these hacking tools in termux
  • What are the benifits of each tool

Now its time to Know what are the Top 10 Hacking Tools for Termux and how to install them

Nmap for Termux :

Nmap is the no.1 Hacking Tool, it is widely used by Hackers, Pentesters, Security Researchers,


It is mainly used to scan for open ports on any server, it consists of some powerful scripts that makes our work much easy

How to install Nmap in Termux


You can install Nmap in Termux just by typing a few commands
If you have already installed Termux from play store then open Termux and type below command

termux-setup-storage

You will be asked to give permission to Termux for storage access

After that type below command

apt update && apt upgrade
After that you will be asked to update packages to newer packages, so simply type y for yes and hit enter

To install Nmap you have to type below command

pkg install nmap

That's all you have successfully installed nmap in Termux

Hydra for Termux

As you know hydra is a powerful brute force tool to guess and crack valid passwords, let's see how we can install it on Termux

How to install and use hydra in Termux

Hydra can be installed in Termux just by typing below command

pkg install hydra

After installing hydra, you can use hyrda by typing hydra in Termux

Metasploit For Termux



Metasploit is an advanced hacking tool, which is now available for Termux, let's see how to install Metasploit in Termux

We can install Metasploit in Termux by various methods but i recommend you to install it by one automatic

How to install and use Metasploit in Termux


To install Metasploit in Termux just type below commands

cd $HOME

Then type

pkg install wget

Then type

wget https://Auxilus.github.io/metasploit.sh

Finally type

bash metasploit.sh

That's all you have successfully installed Metasploit in Termux
To use Metasploit just type below command

 ./msfconsole
Read more »
By at No comments:

How to use Telegram Scraper in Termux

Android , Hacking Tutorial
How to use Telegram Scraper in Termux
Hello guys,

Today in this post, am back with another Termux tutorial

In this post, I am going to tell you how to install and use Telegram Scraper Tool in Termux

As you know Telegram is a popular social messaging platform with millions of active users worldwide
Read more »
By at No comments:
Labels: ,

5/22/2020

Five best phones under Rs 20,000 for video calling and that sweet selfie

Android , Tech News
Five best phones under Rs 20,000 for video calling and that sweet selfie

Around 85 per cent of the Indian consumers make their purchase in the sub-Rs 30,000 price segment out of which 79 per cent believe that image quality is not dependent on the number of megapixels, according to the CMR Insights on the Go Survey. The report also highlights that the consumers in the age group 18-30 are more concerned about the quality of the front camera as compared to the rest of the camera specs.
The CMR report also says that one in every three users have stated the poor quality of the front camera as a dissatisfaction factor with their smartphone and more than half of those who take selfies in low light condition are not satisfied with the results.
“In the Rs 20,000-30,000 price band, 72 per cent of smartphone users agree that smartphone brands should bring innovations that make the selfie picture-perfect, under all conditions,” the report says. In the light of these findings and the fact that we are relying more and more on video calls to stay connected to our friends and family, we are listing smartphones from Realme, Xiaomi (Redmi), Vivo, Poco, and Samsung that are priced under Rs 20,000 and come with a good quality selfie camera.

Poco X2: 20MP+2MP selfie camera

       Poco X2 Price in India, Specifications, Comparison (22nd May 2020)

Poco started its second innings in India with the launch of the Poco X2— a rebranded Redmi K30 smartphone from China. In our review, we found the device to be power-packed mid-range offering. It sports a 20MP+2MP dual punch-hole front cameras and other features of the device include a 6.67-inch 120Hz FHD+ display, Snapdragon 730G processor, 64MP quad-rear camera setup, 4500mAh battery, and 27W fast charging support. The phone is available for a starting price of Rs 16,999 for the base model of 6GB RAM and 64GB internal storage.

Realme 6 Pro: 16MP+8MP selfie camera

                                                           Realme 6 Pro ( 64 GB GB Storage, 6 GB RAM ) Online at Best Price ...
Realme 6 Pro is the successor to the Realme X and not the successor to the Realme 5 Pro as many expected. (Image: Sneha Saha/Indian Express)
We found the Realme 6 Pro to be more bang for the buck in our review. The device sports 16MP+8MP dual punch-hole front cameras and other highlights include 6.6-inch 90Hz
FHD+ display, Snapdragon 720G processor, 64MP quad-rear camera setup, 4300mAh battery, and 30W fast charging support. The phone starts at Rs 17,999 for the base model of 6GB RAM and 64GB internal storage.

Xiaomi Redmi Note 9 Pro Max: 32MP selfie camera


Image of Redmi Note 9 Pro for representational purpose. (Express photo: Shruti Dhapola)
The Redmi Note 9 Pro Max comes with a 32MP selfie camera and the other highlights of the device include a 6.67-inch display, Snapdragon 720G processor, 64MP quad-rear camera setup, 5020mAh battery, and 33W fast charging. The Redmi Note 9 Pro Max starts at Rs 16,499 for the base model of 6GB RAM and 64GB internal storage.

Samsung Galaxy M31: 32MP selfie camera

Samsung Galaxy M31 has a waterdrop-style notch, like the original Galaxy M30s. (Image: Anuj Bhatia/Indian Express)
In our review, we found Samsung’s Galaxy M31 smartphone to be “Paisa Vasool (value for money)”. The device sports a 32MP selfie camera and other highlights include a 6.4-inch Super AMOLED screen, Exynos 9611 processor, 64MP quad-rear camera setup, 6000mAh battery, and 15W fast charging. The device now retails at a starting price of Rs 15,999 for the base model of 6GB RAM and 64GB internal storage.

Vivo Z1X: 32MP selfie camera

       Vivo Z1x - Specifications, Price in India, Launch Date
In our review, we found the Vivo Z1X to be a good mashup of style and performance. The device sports a 32MP front camera for taking selfies and the other highlights of the device include 6.38-inch FHD+ Super AMOLED display, Qualcomm Snapdragon 712 processor, 48MP quad-rear camera setup, 4500mAh battery, and 22.5W fast charging support. The device is available at a starting price of Rs 16,990 for the base model of 6GB RAM and 64GB internal storage.
Read more »
By at No comments:
Labels: ,

5/18/2020

Top 10 SQL Injection Tools : A Hacker Must Try

Hacking Tutorial ,
Top 10 SQL Injection Tools : A Hacker Must Try
Top 10 SQL injection tools
SQL injection is a type of code injection that an attacker can access the database by sending malicious SQL statements in the login fields or by requesting some sort of data in the GET and POST Methods

SQL injection is the most common web vulnerability that allows an attacker to enter into databases, this vulnerability allows the attacker to modifying and dumping the database,

This vulnerability is the most critical web vulnerability at all, it is listed in the Top 10 vulnerabilities by The OWASP,

According to the recently released report by Shodan there some large Organizations are vulnerable to this attack

Shodan report


Most of the Companies paying higher bug bounties for finding this vulnerability, if you're a Hacker, Pentester or a Security Researcher then you might probably know about What SQL injection is,

But the most challenging part as a Hacker or as a Bug Hunter is finding those Sql injection vulnerability in multiple targets in a certain time, sometimes we feel its a though part, for that we have to use sql injection testing tools

So today in this post we are presenting the top 10 SQL injection tools, which are the best tools for finding sql injection vulnerabilities

Top 10 SQL injection tools

Here is the best sql injection tools list
  • Sqlmap
  • Burp Suite
  • SQL Dumper
  • Owasp
  • Netsparker
  • Acunitex
  • Arachni
  • Hackbar Firefox Extension
  • Havij
  • Nesus

Most of the tools are available for Kali Linux, if you want to use them in windows then there is a possibility that you can

If you're completely newbies to these tools, then let me explain them one by one

Sqlmap:

Sqlmap is the most powerful sql injection tool for finding SQL injection and database takeover, the tool was written in Python 2.7, it is also a best automated sql injection tool with multi thread support
It's a Open Source Project available at github

Burp suite:

Burp Suite is one of the best automated sql injection tool, but its a Paid tool, its also available for Windows, Linux and Mac, if you're looking for a sql injection tools for windows than you can choose it

Recommended Reading: Burp Suite Tutorial For Beginners

SQL Dumper

SQL Dumper is also a powerful SQL injection tool, this tool is similar to havij, this tool also available for Windows 10, if you're looking for Windows tools then its a good choice.

OWASP ZAP

OWASP Zed Attack Proxy is one of the popular sql injection tools, it's a good tool for both Automatic Scanning and Manual Testing, Its a Open Source Project by OWASP, this a good tool to scan web application vulnerabilities

Netsparker

Netsparker is one of the best automated sql injection tool, its a good tool for finding web app vulnerabilities and automating scans

Acunitex

This tool is one of the most powerful sql injection tool, this tool is a all in one web vulnerability scanning tool, this tool is helpful for detecting different types of web vulnerability in any web apps

Arachni

Its a Powerful Web application Scanning Framework in Ruby, this tool is compatible for Windows, Linux and Mac

This is a Open Source Tool, you can Download it on their official site

Havij Tool:

Havij is one of the popular sql injection tools, it is a GUI tool, if you're looking for best sql injection tools for windows then this one is good for you, its a advanced tool and it is widely used by crackers

Hackbar Firefox Extension

This is one of the advanced sql injection tools, its a good tool for manual SQL injection testing, but its a Browser Extension that comes with handly tools such as string Encoding, Decoding, WAF Bypassing, and many other handly SQL injection exploits

Recently some people reported that this tool is not working properly for the Firefox version higher than 40
You can try this extension Hackbar Tool for SQL injection testing

Nessus

This tool is also a best automated sql injection tool for Windows, that supports modern technology web app, you can get a free demo of this tool on their website

Conclusion

Hope you guys found this article useful, we tried our best to present the best tools for finding sql injection vulnerabilities,

These are the most popular SQL injection tool, still there are lot of best tools, so don't limit yourself keep testing them,

If you think anything is missed then feel free to leave your feedback
Read more »
By at No comments:
Labels:

How to hack a website using Termux

Hacking Tutorial ,
How to hack a website using Termux
Hello friends, in this post am going to teach you how to hack websites using termux app, I know guys most of you're interested in website hacking using termux but there is no proper guide on the internet for Noobs but don't worry this Noob made a Tutorial for you,

This tutorial is not for everyone but for them who wish to learn website hacking using termux,

If you know How to use Sqlmap then this is not a big deal for you, so that you can simply install Sqlmap in termux then start hacking websites (Sqlmap alone is not a website hacking tool but its a great tool for beginners, if you wish you can use many other popular hacking tools in termux)
Anyway our aim is not to destroy someone's website instead we will try to educate you,

If you don't have at least basic knowledge of website hacking then this tutorial is for you

So let's learn.


how to hack a website using termux

This will be the simple tutorial because using termux to hack websites is requires some patience plus we have to spend lot of time with our mobile, that's not possible for everyone but if you wish then you can try


In this tutorial am going to teach you how to install Lazy Sqlmap in termux and hack a website

So just follow below steps get started

Step 1: Download and Install Termux From Playstore

Step 2: Now Open Termux and type below command

 apt update && apt upgrade

Step 3: Now Install Python2 in termux by typing below command

 pkg install python2

Step4: Now We have to install Lazy sqlmal (We can install sqlmap but Lazysqlmap makes our task more easy rather than typing bounch of commands frequently)
Type below commands

 pkg install git

Now type this command to install Lazysalmap

 git clone https://github.com/verluchie/termux-lazysqlmap

After that open the directory by typing this command

 cd termux-lazysqlmap
After that type below command

 chmod 777 install.sh

Step 5:
Now you can set up Lazysqlmap by typing this common on termux

 ./install.sh

Step 6:

Now we need some google dorks, if you don't know about dorks then you can learn here, I have found a website using a dork and let's test how to hack this site

Now type lazysqlmap in termux

You will see like this

Hack a website with termux



Now I will type the website taken from Google Dorking

Then, if the site vulnerable to SQLi then you can hack, this site vulnerable so I got databases

  • site_db
  • information_schema

Getting Databases


Now I will type sitedb

So that it will return the tables in the database

Getting Tables


Now you have to choose the desired table, we usually choose admin table
So I will type userlogin

Now it will return some columns in the table

Getting columns


Now we have to choose the desired columns to dump

So I selected all of them

Dumping column


You will Get the Admin Login Details..
Just Decrypt the hash and find the Admin Login Panel of the website then login with the details, that's all now you have hacked the site,
Read more »
By at No comments:
Labels:

5/16/2020

How to use Xploitspy To Hack Android Phones (Using Termux)

Android , Hacking Tutorial
How to use Xploitspy To Hack Android Phones (Using Termux)
Hello guys, today in this tutorial am going to tell you how to use Xploitspy an advanced Tool to Hack Someone's Android Smartphone.


     Xploitspy on Termux
Now Xploitspy is Updated and Working Fine, that's why we decided to post an article on it

In our previous posts, we have already shared how to hack using Metasploit and many other methods,

Most of the people hate to type a lot of commands for each operation, for that they want simple and neat User Interface, Xploitspy Tool makes it easy for us

So let's see how you can use this Xploitspy Tool to create payloads and spy on any Android phone

How to use Xploitspy Tool


Before we dive into deep, let's see what this tool can able to do

You can Remotely do the following

  • View Call Logs
  • View/Send Messages
  • View Contacts
  • Get Location of Device
  • File Explorer & Downloader
  • Microphone Recording
  • View WiFi Networks
  • Live Clipboard Logging
  • View Installed Apps
  • Monitor Skype/Telegram
  • App Auto Hide
  • See Whatsapp Chat, Instagram and other apps
And many other features


How to setup Xploitspy Using Termux


To use Xploitspy Tool we are going to use Termux Application, this is one-time use only, after that there is no use of Termux, you can do all the monitoring stuff on the web


Carefully follow these steps to get started


Firstly We Need

  • Heroku Account (Free)
  • Termux App

Create a Heroku Account


Heroku is a Cloud Hosting Platform, which we are taking advantage of its free hosting to host our Apps

Firstly goto https://heroku.com

And Create for a free account
After that, you have to create an app,

Goto https://dashboard.heroku.com
Then click on New then click on Create app

                                         Heroku dashboard
Now you have to give a name to the app and proceed by clicking Create

                                              Create new app heroku
Now you're done, Remember the app name

Installing Xploitspy Tool in Termux



Now it's time to use Termux,
Firstly Download Termux App from Playstore if not downloaded


Open Termux and Type the Commands one by one
 apt update && apt upgrade


Then type
 pkg install git


Then Type
 pkg install nodejs


Now type
 npm install -g heroku


Then
 git clone https://github.com/XploitWizer/XploitSPY.git


Then
 cd XploitSPY


Then
 heroku login -i

Now you have to provide your heroku login details

In the username type your email
And it will ask for the password, so type your heroku password and hit enter

 Necessary Commands

 Now type these commands one by one
 heroku git:remote -a App-Name


Here put App-Name
which you have chosen during app creation at heroku.com


Now type
 heroku buildpacks:add heroku/jvm


Then
 heroku buildpacks:add heroku/nodejs


And Final command
 git push heroku master


After some time it will show this successful message

        Deployment Successful

 Now you're ready to use Xploitspy Tool
Just open yourappname.herokuapp.com on any web browser


eg: I have choosen my app name as basuxxx


So I will open basuxxx.herokuapp.com

     Xploitspy Tool
Click on Login


The default username Password is

Username: admin
Password: password


After login, you will get the dashboard,
To create an apk payload just click on ApK Builder and Download the Apk

                                       Xploitspy Apk Builder

After that install that apk in your victim device and give device admin access

After clicking on devices, and select the device, you will see the following options that are it

 Xploitspy Dashboard

Now you're able to spy on that device
Hope you like this tutorial, if you have any questions feel free to comment below
Read more »
By at No comments:
Labels: ,