Monthly Archives: March 2013

Hulk DDOSer (Updated)

Hulk DDOSer is a php script for those who are running on very slow internet speed but want to DOS website. Hulk Hulk DDOSer is coded by Manish Tanwar from Team Indishell.

Just download it from the link given below and upload it to hacked website and use bandwidth to DOS target.

Reverse Engineering camera firmware ip

In this tutorial we are going to understand the ip camera firmware software like what actually running inside ip camera by doing some reverse engineering on the firmware of ip camera.

For reverse engineering we need to have camera firmware image you can get from you camera vendor website for flush or upgrade the camera firmware.
Camera firmware is nothing but the complied or compressed .bin file for flashing the camera or upgrades the firmware.
Here the interface of the ip camera so that we can browse the .bin firmware file and upgrade the camera firmware.
But here are not going to upgrade the firmware but reverse engineer it for fun and profit.
Now we need to get the camera firmware from the vendor.
Here the required the bin camera file or firmware.
First we need to analyze that what this file is all about (using Linux file utility)
 
So using file utility we did not find any interesting thing. Let move further
Now we are going to use hexdump and string utility against the firmware for more information.
 
So first we need to look at the strings output and analyze it.
 
Here we can see that firmware is based on LINUX OPERATING SYSTEM for embedded devices. So let also see the hexdump may be it can reveal more interesting things for us.
But looking at the hexdump we didn’t figure out any new interesting things only we can see html and other commands cgi scripts callings.
Now we are going to use binwalk against the firmware image it may give some false result.
 
It give very useful information like the compressesion method used is gzip and the file system is squashfs little endian version 3 and more interesting information.
Now we know that firmware is based on Linux and the file system is squashfs and the compressed data format is gzip now we are going to use another utility so that we can extract and decompress the data.
 
Here the firmware has been extracted using the firmware mod kit utility.

 

Now we can also decompress the data and we find very interesting things inside it (decompression can be done using decompression utility for squashfs system included in firmware mod kit)
Here we can see that the camera firmware is from sercommn (vendor)
 
Now we can see all the file system inside the firmware image and everything
 
Here we can see each n every cgi and other files and folder inside the camera’s webserver.

 

Here is the index html file which is running inside the camera, model is 8061.
So finally you reverse engineered the camera image or firmware hack it according to your own wish (make required manipulation according to need).

[PHP] Download config File Killer and Mannu Shell (updated Version) Coded By Team Indishell

[PHP] Download config File Killer and Mannu Shell (updated Version) Coded By Team Indishell

Configration File Killer 
Latest Fuctions :
  • Genrate php.ini
  • Mannual Symlinking
  • Automated Mass Symlink
  • perl Based Symlink
Mannu Shell 
New Features :
  • command execution
  • CGI Telnet
  • CMS based symlink,
  • VBulletin,wordpress and Joomla admin panel password changer
  • PERL Back connect
  • Python Back connect
  • Can’t read /etc/named.conf” bypasser+auto symlink public_html directory
  • username (ls /etc/valiases)

3 Reasons Not to Use Free URL Shorteners (protect your shorturls)

Here’s are 3 reasons why should never use a free URL shortener or link cloaking service:

1) A lot of ISPs block them because they often collect your data and share it with other sites. ISPs don’t like that! And what happens if they get hacked and/or blacklisted? Don’t take a chance in letting your links get blocked.

2) You don’t control the service, so if they go out of business all your links quit working. Think about it. Do you keep a record of all your short links you use by a 3rd party?

3) Those URLs you shorten are impossible to remember and/or edit later. One of my pet peeves is I can’t go back and edit where it goes on some of the services out there.

So what’s the solution? Use an affiliate cloaking/redirect script on your own domain that protects you from all these things and more.

My friend Christine Cobb recommended a tool to me and I’ve been using it for about a month now. I love it! It’s super easy to use, only takes seconds to create a shorturl, tracks clicks, and even makes QR Codes!

I set mine up on a separate domain (reginahelp.me) and use that domain only for my shorturls.

Check out Easy Redirect Script at http://reginahelp.me/easyredirectscript/ <–that’s my affiliate link ;)

Since I am using WordPress for my website, I am trying to decide if I want to convert my Pretty Link Pro links or continue to use the plugin. I love the way Pretty Links works, tracks, and it’s right inside my Dashboard.