Anarchy Angel's Blog - House of Hackers

HH XSS email proxy service now available!

The XSS email proxy is just that, it gets cookie data or what ever data you like via a XSS payload and sends it right to your inbox! You can use your own payload or get one from us! No logs are kept, and its completely anonymous. Here is how it works. We give you a XSS payload that trys to get cookie data, you inject it into your target site. Then depending on the type of XSS vulnerability… Continue

Added by Anarchy Angel on November 18, 2009 at 5:04pm — No Comments

New HH Release: pycrawler

New HH release from Nightstalker, his first with HH, called pycrawler. it scans a list of urls for LFI vuln. Get more info and download here: http://www.hackers-hideaway.com/our_stuff.php#pycrawl Continue

Added by Anarchy Angel on November 16, 2009 at 2:26am — No Comments

Get more out of your PPCs sniffer.

So i have a windows mobile pocket pc. Its an old one, i got it before smart phones got big. Still its a nice little toy, one of my favourite things to do with it is scout out a network before i set up my laptop on untrusted LANs and one of the more powerful functions is the packet sniffer. However that isnt a free app and you only get 14 days to use it, after which you can no longer operat… Continue

Added by Anarchy Angel on November 5, 2009 at 4:46pm — No Comments

WIN life time access to a fast anonymous proxy!

My site Hacker's Hideaway is running a contest for life time access to our own private anonymous proxy server! Participation is the ONLY way to win. Start a thread on Hacker's Hideaway forums that sparks lots of interest; share thoughts and experiences; help a newbie... quality is more important than quantity. More info. Hacker's Hideaway site Get to posting so you can WI… Continue

Added by Anarchy Angel on October 25, 2009 at 11:59pm — No Comments

Hacker's Hideaway moved!

Hacker's Hideaway has moved to a new server and we now have a domain name! We will be lunching great free services soon on top of our already great blog posts and tool releases, check it often to keep up to date! https://www.hackers-hideaway.com Continue

Added by Anarchy Angel on September 27, 2009 at 5:30pm — 1 Comment

Voodoo magic

In this post we will be looking at the voodoo chat system, or more to the point the client for voodoo. Dont know what voodoo is? This is from their website: Voodoo Chat is a free graphical chat community! Using web pages as a backdrop, Voodoo Chat lets you chat with old and new friends in a well-blended environment that lets you feel like you're 'in the room' without taking the emphasis away… Continue

Added by Anarchy Angel on September 16, 2009 at 11:00pm — No Comments

Hacker's Hideaway ARP attack tool

This ARP attack tool has 4 major functions, 3 of witch attempt to MITM one or more computers on a network with a passive method or flood type method. It sets up forwarding and everything for you. The other function attacks a switch and trys to fill up its ARP table and turn it into a hub of sorts, allowing you to sniff all network traffic. While there is a few tools that do some of these things what really sets this one apart is the remote mac destination option that allows you to run the attack… Continue

Added by Anarchy Angel on September 14, 2009 at 8:41pm — No Comments

Tor the second time around.

Recently i needed to use tor and wanted to open my rely back up, if you remember one of my older posts that talked about why i closed my little tor network down this time im blocking common torrent ports. I know this will not completely stop ppl from using torrents over my relay but it should stop most of it. Here is a list of useful exit policy rules you can set in tor to help stop all kind… Continue

Added by Anarchy Angel on September 9, 2009 at 8:49pm — No Comments

Like in the movie hackers :P

So a while ago i hacked a server, got as far as uploading a shell. I then put it aside and moved on to the next server intending to come back later to patch the system and root it. Well a few days had past before i got back to it but yesterday when i finally had time to play i find another hacker has come along and uploaded his own shell, he even got a copy of the shadow file for me. My next… Continue

Added by Anarchy Angel on September 3, 2009 at 6:40pm — 6 Comments

Knowing just enough to be deadly

So my boss decided to take one of the voip phones from the office home to use and he wanted it to use our asterisk system. Now back in the day he used to run a ISP, the biggest in our town at one point, so he knows his way around a computer but not so much around security. Anyway he did some reading and found out he needed to open a few ports and set up a few rules. Now its been a while sin… Continue

Added by Anarchy Angel on August 14, 2009 at 2:52pm — No Comments

Yet another sql injection tool

In this post i will be releasing my new online sql injection tool. As of right now it only works with mysql, so if anyone would like to provide a site thats open to injection using the following databases that would be of great help: postgres, mssql, and ms access. So anyway lets move on to how to use the tool. Goto the sql injection page and in the top field you will enter a site you think… Continue

Added by Anarchy Angel on August 4, 2009 at 4:12pm — No Comments

ConfCon 09

Before i make my way to defcon this year ill be attending ConfCon 2009! Its a con for phreakers and the only one i know of that takes place over the phone! Its free and anyone is welcome to attend. This is from the ConfCon site in the about section: Conf Con is the first ever telephone conference of it's kind. We aim to connect all the best conferences from around the PSTN, and bring th… Continue

Added by Anarchy Angel on July 13, 2009 at 12:03pm — 2 Comments

Pwned by tor.

So some of you might know i run a few tor exit relays because i believe in the idea behind it and i like that it can help give others a voice and an extra eye to see as evident with the Iran election and other events, and i use the service my self now and then so why not give back. I run one on my home connection and one at work, we have a T1 and hardly ever use it so i thought i would d… Continue

Added by Anarchy Angel on July 6, 2009 at 8:03pm — 3 Comments

How to hack Blisque!

In this blog post ill be talking about a little vulnerability in Blisques voting schema that allows you to push any post up until you get board. Then ill go into how you and push your foes posts down so no one sees them >:) Then we will talk a little about the comments and posting. Ok so how do you get unlimited pushes? Well when you push on a post it gets put into your cookie. So al… Continue

Added by Anarchy Angel on June 19, 2009 at 6:30pm — No Comments

HackSec - Digg for Security

HackSec is a site dedicated to having the top hacking and security news. It's like digg.com, but for security. Its hosted on a open news sharing community driven network thats free and easy to use called Blisque. Both HackSec and Blisque are a joint project between Lime and me. Check it out at http://hacksec.blisque.com/ Continue

Added by Anarchy Angel on June 17, 2009 at 11:00pm — No Comments

Mass 0wnage of China!

So we have all heard about Chinas next move to oppress its people. If you dont know what im talking about heres a little recap, China is going to make it mandatory that all computers sold in China come with censorship (content filtering) software out of the box called Green Dam. Thats bullshit right i know but the crazyness dont stop there. A few bloggers started talking abou… Continue

Added by Anarchy Angel on June 12, 2009 at 2:24pm — No Comments

A few lulz

Over the weekend i had the opertunity to terrorize cool web chat users again. for a long time i was banned for exploiting an vulnerbility that allowed me to post as anyone i wanted, including mods, i could have got back on but its too much work finding proxys just to fuck off. why i was unbanned i dont know but i was more then happy to have another crack at it with out all he bull shit.… Continue

Added by Anarchy Angel on May 28, 2009 at 12:19am — No Comments

Still jamming gears.

As promised here are a few other scripts i hacked for google gears. The first one is a table dumper, that is it will get all the data a table holds and show it to you! The other one is a table updater, so you can change any existing data in your database right form the script! I want to take a minute to talk about this tool a little bit and why it can be very helpful. If someone were to… Continue

Added by Anarchy Angel on May 14, 2009 at 11:23pm — No Comments

Google Gears client DB mapping and attacks.

The last few days i been messing around with Google Gears client side databases and i started going to a few sites that are said to be using google gears. I wanted to see just what was being stored on my gears db. There was no real tool to do this so i came up with a little gears db mapping script, that can be used as a bookmarklet to map any given database from any given domain. The sc… Continue

Added by Anarchy Angel on May 6, 2009 at 11:05pm — 2 Comments

My Essentials wireless G router hacking

Device: Router/AP Vendor: My Essentials Model #: ME1004-R Ver. 10000 This is my first try at device hacking and i picked this router because my employer is looking to recommend this to our customers. By first try i mean attacking the web UI and not just its ARP tables, which i still did test for. So anyway needless to say i did happen to find more then one security issue. The first thi… Continue

Added by Anarchy Angel on April 24, 2009 at 7:43pm — No Comments

< Previous Post

Anarchy Angel's Blog (40)