What is Session?

HTTP communicates with lot of TCP connections, Server should create unique identifer for each Connection.

A Session is a unique identifier that is generated and sent to the client from a server in order to identify the Current Interaction Session.

Whenever you visit a webpage or login to website, the server will store the data about you in your system as a cookie. This cookies will help to identify you.

For example , you are login to Facebook.com. when you login to your account, a cookie will be generated and stored in your local system. if you click the logout, cookies will be destroyed.

Software Implementation:
TCP sessions are implemented using Multi threading concept. Whenever session is generated , a new thread will be created.

HTTP sessions are typically not implemented using one thread per session, but by means of a database with information about the state of each session.

Server side web sessions:
The sessions are stored in Server Machine.

Client side web sessions:
Client-side sessions use cookies . This will reduce the server side storage.

This is best method but there is one drawback. Sessions stored in client is vulnerable to tampering by the hackers. This can be overcome by encrypting the session(but hackers are able to decrypt it also).

HTTP session token

The client usually stores and sends the token as an HTTP cookie and/or sends it as a parameter in GET or POST queries.

The reason to use session tokens is that the client only has to handle the identifier. All session data is stored on the server (usually in a database, to which the client does not have direct access) linked to that identifier.

Magic cookie is simply a cookie that is used to authenticate the user on remote server or simply computer. In general, cookies are used to maintain the sessions on the websites and store the remote address of the website. 

©2013 H[+]Tips Zone.

© Legal-Privacy Policy page.

Read More

CLOUD COMPUTING

Cloud computing is the technology of computing which is totally based on the internet media. With the help of this ethnology many servers can offer softwao.re applications and resources and information to the computer and devices attached on request with the control of electricity grid. It can be called as the service architectures or virtualization for improving the utility of the computational techniques. Whole system is service oriented and customer focused. Complete detail is taken from the customer and delivers the service according to the need. The main idea of cloud computing is based on the cloud that is specifically designed for the processing each related device is present in this cloud of network. Could computing remains invisible to the customers’ .They only have to pay for their resource that they use in cloud computing services.

How cloud computing works :-

Cloud computing involves the multiple cloud components that communicate with each other wit the help of application interfaces mostly web services. UNIX operating system follows the same theoretical techniques for its tasks. The task complexity is divided into all the components making balanced and manageable results. The two most important components of the back end and front end .the front end is the interfaces or the main screen that is visible to the customers and users through which they interact with the system. This interface can be browsed with the help of web browsers and all the applications can be used with this interface. Usually this interface is GUI based.


The back end involves all the components and the complete architecture and programming technique of cloud computing that is totally remains hidden from the users. Only system known what is going one at the back of very user request. The back end device involves, cloud server, Assistant computers, Data storage media and many connectors.

Historical background

The very first concept for the cloud computing was given by the John McCathy in 1960s.he first gave the statement for the future use of computational techniques as a public utility. With the arrival of the Virtual private networks this concept which was modernized in 1966 took implementation shape .in year 2007 the most famous organization such as Google ,IBM and may universities world wide started research program on cloud computing and finally in 2008 the first cloud computing system was introduced.


Advantages of the cloud computing :-

1)Agile functionalities :- Cloud computing enables user to frequently use the technological resource at inexpensive price.


2)Application interface fro users :- Another great feature plus advantage of cloud computing system is the accessible and reliable interface for its users API technology make it more interesting for the users to interact with the human beings.
3)Cost effective :- This computing techniques greatly reduce the total cost and capital expenses that come sin arranging the infrastructure .integrated resources are available at almost no cost to the third party users.

4)Geographical independence of system and devices :- The most exciting feature of the cloud computing is its total geographical independence. Its users can access the system from the web browsers any where in the world at any time.

5)Multi and large application pool :- Large application pool is available for the users.

6)Reliability :- improved design versions of many redundant website have efficiently increase the performance and suitability of cloud computing more useful.

7)Security :- Security is at the one level above as compared to the other networks because of the centralization of data and increased security feature of very individual component.

8)Maintenance :- Cloud computing systems are flexible and easy to maintain because components can be added and deleted from the infrastructure.

Read More

How To Control Your Computer with Your Cell Phone

Remotely Control Your PC from Anywhere with Your Cell Phone!

Have you ever been away from your desktop and needed some information that was on it? Have you ever needed to shutdown your computer or do something underhanded while away? In this post I am going to show you how to control your PC from your Cell Phone.

There is a program called CellPC that allows you to perform operations on your home/work PC via your cell phone or wireless device quickly and easily. Imagine being able to shutdown, restart, or logoff your PC remotely... search files on your computer and then send them to your cell phone... view a realtime screenshot of your computer at anytime... lockdown your computer... send a message/note/reminder to your computer... and much more!

CellPC Top Features:

• Perform Shutdowns, Restarts, Logoffs
• View a Screenshot of your Computer
• Search for and Retrieve Files
• View and Close Open Windows
• Customizable Commands Editing
• Be Alerted when your Computer is Used View and Close Open Applications
• Send Messages to your Computer
• Lock and Unlock your Computer
• Secure Command Execution
• Log all Access Attempts and Commands
• Disable/Enable Commands at will

How does CellPC Work? 



Will CellPC Work for Me?

CellPC can work with any Windows computer as long as it has a steady internet connection while the software is running.

If you want to verify that CellPC will work with your device, contact the CellPC support team so you can send them a test message from your phone.

Click Here To Download CellPC

©2013 H[+]Tips Zone.
© Legal-Privacy Policy page.

Read More

Get a Free Serial License Key for Avira Premium Security 10

Avira is one of the leading Antivirus Company. Avira Premium Security 10 provides a complete protection from viruses, spywares, intrusions and other online threats. It also has a backup system to protect your important data. The license key of Avira Premium Security is of $31.59 for 1 year. Now you can get it free for six months by using a special promotional offer. 



Avira Premium Security Suite is essential if you: 

1. Rely on the internet for everything
2. Regularly shop and buy from online retailers, or bid on auction sites
3. Ever access your bank or financial accounts online
4. Chat, communicate and social network constantly
5. Share your computer with your partner or other family members
6. Worry about keeping your precious family memories safe – all those photos and movies stored on your PC
7. Are concerned about what your children might see and do online 

How To Download Avira Premium Security 10 with 6 Months Serial License Key 

• Download Avira Premium Security 10 ( Click on Try Button)
• Open Avira Premium Security 10 Promotional Page
• Fill in all the details in the form with valid email address 

• Click on Request License Now button
• Now Click on License Overview button and on the next page click on the yellow keys to download you Serial key (HBEDV.KEY) for Avira Premium Security 10 

Now install this key and your Avira Premium Security 10 will get activated for 6 months. 

©2013 H[+]Tips Zone.
© Legal-Privacy Policy page.

Read More

SUPERAntiSpyware - Free Spyware Removal Software

If you’re looking for free software that will remove Spyware, Adware, Malware, Trojans, KeyLoggers, Dialers, Hi-Jackers, and Worms, then you should try SUPERAntiSpyware Free Edition.



SUPERAntiSpyware scans your computer for known Spyware, Adware, Malware, Trojans, Dialers, Worms, KeyLoggers, HiJackers and many other types of threats, and allows you to remove or quarantine them. It offers daily (manual) definition updates, as well as home page hijack protection and customizable scan options. Furthermore, the program includes a Repair feature that allows you to restore various settings which are often changed by malware programs, but usually not corrected by simply removing the parasite.

                                                                      Download SUPERAntiSpyware - Free Edition 

©2013 H[+]Tips Zone.
© Legal-Privacy Policy page.

Read More

Trace Email Address or Fake Emails

Tracing email ids must be known by every one as one must know who is sending them emails or fake emails. So what to do? Here Hackerspositive presents Tutoiral for u all fanz to trace any incomming mail's email ID.

Tutorial:~

Hi friends, today i am going to teach you how to how to trace an email received in Gmail. Using this hack you can trace the source from which you have received the email. 

Hackers do a lot of stuff to hack into your email account so you should always be aware of such things like how to check the authenticity of the email that it has arrived from genuine user or its a fake email. 

here are two ways to check the authenticity of the email address:

1. Open the Email and Click on Show details.

2. For more deeper look Click on the triangle and then select show original.

Great, but i know 99% of you guys already know these but never tried to trace or somebody have tried but never got success. What is the reason behind that? Yup i know the reason.. All previous tricks to trace an email in Gmail are incomplete so you never received success in doing that. As i always focus on manual things as tools are for noobs and script kiddes. So guys lets learn how totrace email address manually.

How to Trace Email received in Gmail:

1. Basic Method(if sent through some website)

This method is applicable for tracing the email that is sent through the anonymous email or email forging websites. 

What is the main motive behind the fake emails, Have you guys ever tried to understand. If no, then here is three four basic things why Fake emails or anonymous emails are sent.

1. For Phishing purposes: Fake page links that are used to hack your email account.

2. For Spreading Botnets: Fake emails with attachments(.php,.jpg,.bmp etc) contains bots means self spreading Trojans that steals your email contacts and email that to hackers.

3. For Stealing your personal information or to cheat you.(mails like you won 10000000$ please send us your details to claim).

4. For promoting or virul a product. Most sellers use this trick to promote their companies products online on the name of email marketing but thats all fake they are in need of customers who can buy them and some already has bots attached in them to the mail has been automatically sent to all emails that are in your friend list.

Steps to trace Email received in Gmail (very basic method):

1. Login into your Gmail account.

2. Open the email whose sender details you want to see.

3. Click on Show details.

4 That's all it will show you all basic information about the email. Below snapshot will explain you better.

2. Advanced Method:

The above trick hardly helps you to trace the email address. Now let's discuss advanced way to trace email.

Have you guys ever tried to under how emails are sent and received. Ahhahah Computer geeks you might have read in books about How email works that how its sent and how its received. If yes, then you surely haven't implemented that in practical life.

Emails are basically received in form of HTML headers. HTML headers consist of several things like Message delivered to or from, Subject, Received to or from, Date, Mime version,Content Type, X-mailer client etc.

How to trace email Advanced trick:

1. Go to the email and open it.

2. Now click on the triangle at top right end corner of the email screen as shown below and select show original email.

Now See the second received: from SecretMythPC [71.142.245.186] . Its the source IP address ( IP address of system) from which email has been sent.

Now open Any IP address tracing website: Example i opened http://whatismyipaddress.com/

Now Trace the IP addess 71.142.245.186 to get his details and location of the sender. You will see something like this in the output:

                                                                                                     ©H[+]Tips Zone & HackerZpositive

Read More

top 10 free keyloggers

10 FREE KEYLOGGERS TO MONITOR YOUR LOCAL PC OR LAPTOP!

HERE IS AN EXCLUSIVE LIST OF TOP 10 FREE LOCAL KEYLOGGERS. HOWEVER IF YOU ARE PLANNING TO MONITOR ONLY YOUR PC OR ANY PC WHICH YOU HAVE CONTROL OF, THEN YOU CAN BLINDLY GO FOR “HARDWARE KEYLOGGERS” AS THEY ARE THE SAFESTKEYLOGGERS AND OPERATE IN A COMPLETE STEALTH. IF YOU STILL WANNA PREFERFREE KEYLOGGERS THEN BELOW IS THE LIST OF FREE KEYLOGGERS THAT WILL REALLY HELP YOU MONITOR YOUR PC.



1) REFOG FREE EDITION

Refog Free Keylogger beats competition in two respects: it’s simple to use and it’s free. REFOG Free Keylogger can look after your children without them even noticing. Even technically minded children won’t detect the key logger when it runs in a stealth mode. The program removes all the shortcuts and can be accessed only through a hot key combination. Running unobtrusively from the moment the system boots, REFOG Free Keylogger keeps track of all typed or pasted text.

->Download It From HERE


2) Black box express

Simple to use monitoring of one local computer; Monitor Screen recordings, Programs, Keystrokes typed, Websites, Web Searches, Emails/Webmails/ Instant Messenger Chat sent and received. Alerts and Warnings instantly or as a summary on your e-mail or cell phone. everything for 100% Free. No strings attached.

->Download It From HERE


3) PERSONAL KEYLOGGER

The Personal Keylogger application was designed to be a small tool that will allow you to secretly record all keystrokes and other input. All specific instructions are explained in the application. To exit it and receive your logs, you will need to enter in your keycode. If you have forgotten your keycode, you will need to restart the computer. Keycode is like password. To stop Personal keylogger, you can enter your keycode anywhere on the screen. Once you type-in your keycode, the keylogger will stop monitoring and the log.txt file will be created in your selected destination folder.

->Download It From HERE


4) PY KEYLOGGER

PyKeylogger is an easy-to-use and simple keylogger written in python. It is primarily designed for backup purposes, but can be used as a stealth keylogger, too. It does not raise any trust issues, since it is a short python script that you can easily examine. It is primarily designed for personal backup purposes, rather than stealth keylogging. Thus, it does not make explicit attempts to hide its presence from the operating system or the user. That said, the only way it is visible is that the process name shows up in the task list, so it is not immediately apparent that there is a keylogger on the system.
#Tip: Press and hold ‘left-CTRL + Right-CTRL + F12′ keys simultaneously to bring up the Control Panel (default password is blank).

->Download It From HERE


5) HERETIC MACRO

Heretic is a powerful tool that is able to record user events, such as mouse clicks and keys, into a C/Java-like script, and play that script either once or repeatedly. It has many commands for dynamic pixel-based botting, window based botting, and static botting/macro-ing (i.e. key presses, mouse clicks, mouse moves, and pauses).

->Download It From HERE


6) Ultimate Keylogger

Ultimate Keylogger Free is a free popular all-round monitoring solution. It runs in the background and monitors all typed keystrokes, applications, passwords, clipboard, email, and visited websites’ URLs. You can view the reports as HTML files. Ultimate Keylogger Free will help you to find out, what exactly took place in the system.

->Download It From HERE


7) Actual keylogger

It runs hidden in the background and automatically records all keystrokes (including Alt, Ctrl and other functional buttons). The interface can be password protected and the log files are encrypted. You can view the reports as HTML or plain text. In the hidden mode it is invisible in all operating systems.

->Download It From HERE


8) Revealer Keylogger Free Edition

Revealer Keylogger is surely the easiest and faster way to record keyboard inputs. There is almost nothing to configure, in fact everything is configured internally with the best settings. Free keylogger monitoring tool that logs every keystroke even passwords behind asterisks and conversations in common instant messengers. Its interface is password protected, the software does not appear in Add/Remove programs or in the taskbar.

->Download It From HERE


9) Romaco Keylogger

Romaco Keylogger is a small and easy to use tool that can log all key-presses that are made while it is running, and display them to you in its window. It automatically exports the logged text to a text file every 5 minutes, or manually. It can be hidden at the click of a button, and recalled by vigorously pressing one of the least used keys on the keyboard, the break key.

->Download It From HERE


10) KidLogger

KidLogger collects user activity journal on the Computer and creates detailed Analysis of the user activity available online. Creates the list of most used web sites. Record the text was typed on the keyboard in any application


->Download It From HERE

Note: This tutorial is only for Educational Purposes, I did not take any responsibility of any misuse, you will be solely responsible for any misuse that you do. Hacking email accounts is criminal activity and is punishable under cyber crime.

Read More

FAQ FUD Crypter

What is FUD Crypter and how to use it to Bypass antivirus detection for RATs and viruses?

I have already written about Keyloggers in my previous articles, like Azure AIO Keylogger, Star Tools, Ref Stealer and many other keyloggers previously to hack e-mail account passwords. I have mentioned about antiviruses detecting keyloggers as hacking softwares (viruses) and hence, hacker has to use Crypters to avoid antivirus detection for keyloggers. Here i'll tell you something more about Crypters - hacking software for bypassing antivirus detections.

What is Crypter?

As said above, Crypter is free software used to hide our viruses, keyloggers or any RAT tool fromantiviruses so that they are not detected and deleted by antiviruses. Thus, a crypter is a program that allow users to crypt the source code of their program. Generally, antivirus work by splitting source code of application and then search for certain string within source code. If antivirus detects any certain malicious strings, it either stops scan or deletes the file as virus from system.

What does Crypter do?

Crypter simply assigns hidden values to each individual code within source code. Thus, the source code becomes hidden. Hence, our sent crypted trojan and virus bypass antivirus detection and our purpose of hacking them is fulfilled without any AV hindrance. Not only does this crypter hide source code, it will unpack the encryption once the program is executed.

What is FUD?

FUD is acronym for Fully UnDetectable. With increased use of Crypters to bypass antiviruses, AV became more advanced and started including crypter definitions to even detect crypter strings within code. So, use of crypter to hide Ardamax keylogger and RATs became more complicated as nowadays, no publicly available crypter is FUD.

So, if you crypt RATs with publicly available crypters, they are bound to be detected by antiviruses. This is because most FUD crypters remain "FUD" for maximum of one or two days after their public release. To obtain FUD crypters, you have to either search for it in hacking forums or make one (which is somewhat tedius.. I am working on this).

How Does FUD Crypter Work?

The Basic Working Of FUD Crypter is explained below
The Crypter takes the original binary file of you exe and applies many encryption on it and stores on the end of file(EOF).So a new crypted executable file is created.
Original Exe Crypted Exe

001————- 010                            101————-110
100|Original File|000->  Cryptor  ->  010|Original File|110
010————- 111                            110————-010

The new exe is not detected by antiviruses because its code is scrambled by the crypter.When executed the new .exe file decrypts the binary file into small the data small pieces at a time and injects them into another already existing process or a new empty one, OR it drops the code into multiple chunks in alternative data streams(not scanned by most a/v) then executes it as a .txt or .mp3 file.

Why Most FUD Crypters Donot Work?

As a FUD crypter becomes popular it also get the eyes of antivirus companies.The antiviruscompanies update their software and employ detection mechanism that detect the encryption’s by the crypter.So, most of the popular FUD crypter are easily detected by antiviruses.

Common terms related to crypters:

For understanding and designing crypters, hackers must be aware of certain terms, most of you already know these terms, but as i am writing this tutorial starting from novice level and take it to elite level at the end. So if you know these terms just read them one more time, as that might help you to clear some of your doubts.

1. FUD or UD : 

Fully undetectable(FUD) means that your virus is not detected by any of the existing antiviruses while undetectable(UD) means detectable by few antiviruses. FUD is our only goal and elite hackers always rely on that. 

Note: Crypter will remain FUD until you have openly shared on internet. Public crypters remains FUD up to maximum 2 to 3 days then they become UD. So if you want to use crypter for long time so never publish and share that on internet. Use it anonymously.

2. STUB : 

A stub is a small piece of code which contains certain basic functionality which is used again and again. It is similar to package in Java or simply like header files in C ( which already has certain standard functions defined in it). A stub basically simulates the functionality of existing codes similarly like procedures on remote machines or simply PC's. In crypters, client side server is validated using stubs, so never delete stub file from your crypter. Stubs adds portability to crypter code, so that it can be used on any machine without requiring much procedures and resources on other machines.

Example:

Suppose you are writing a code that converts bytes to bits, so we know formula or method for converting bytes to bits will remain same and it will be independent of machine. So our stub (or method stub or procedure) will contain something like this:

BEGIN 
totalBits = calculateBits(inputBytes)
Compute totalBits = inputBytes * 8END

Now what we will pass is only number of bytes to this stub. And it will return the resulting bits. Similarly, we include some common machine independent checks and functions in our stub, and in main code we only passes linkage and inputs to these stubs, which in return provides suitable results.

Note: Most of times it happens, suppose you downloaded some keylogger and you complain to provider its not working, only reason for that is stub. Also always kept in your mind, if you are downloading any keylogger or crypter  always check stub is present in it. If not, don't download it, its just a piece of waste and for sure hacker is spreading his virus using that. I recommend that never download any hacking tool on your real machine, always use virtual machine or sandbox to test hack tools.

3. USV: 

Unique stub version or simply USV is a part of crypter that generates a unique version of stub which differentiates it from its previous stub, thus makes it more undetectable against antiviruses. For detecting this antivirus companies has to reverse engineer your crypter stub, that is not that easy to do, so it will remain undetectable for long time. This consist of one most important component USG ( unique stub generation) which is the actual part of crypter that encrypts and decrypts the original file means its the heart of your algorithm and i will recommend never write this part in stub, rather include this part in main code. Why i am saying this, stub is part of code which is shared with victim, so it will become public and hence your Crypter will not remain FUD for much long time.

Different types of crypters:

1. External Stub based crypters : 

This category consists of public crypters (those you have downloaded till date :P (noobish one's) and you complains to provider that its detectable by antiviruses. That really foolish complaint, if crypter is public then it can never remain FUD. So don't ever complain to me also after my next article for such noobish things. Ahahah.. i got deviated for real thing.

External Stub based crypters are those crypters in which most of the functionality of the crypter depends of external stub, if your delete that stub file, your crypter is useless. :P Most antivirus only do that. These type of crypters contains two files one is client.exe and other is stub.exe . Stub contains the main procedures and client contains the global functions that call those procedures.

2. Internal or Inbuilt stub based crypters:

 The crypters that contains only one exe file (i.e client) fall under this category. This client file has inbuilt stub in it. You can separate stub and client part here too using RCE (reverse code engineering) but it is not recommended.

Note: External or Internal stub doesn't make much difference as antivirus detects files on the basis of strings related to offsets. Whenever you reverse engineer any application or program, the program execution flow will gonna remain the same but offsets may change. USV will come into picture at this point. If you include your encryption algorithm separately then it will be more harder for antivirus to detect your crypter.

3. Run time crypters:

 Run time crypters are those crypters which remain undetected in memory during their execution. We are looking for these type of crypters only. :P These can any of the two above.

4. Scan time crypters: 

Those crypters which will remain undetected while encrypting the files but will become detectable when resultant file is generated. :P Fking one's that wastes all effort we have put. This really annoys everything is working fine and at last you get your file being detected by noob antiviruses.

Happy HAckeing..!!!

Read More