Zuo Bruno (Brun0L3z)

a few Minutes ago I posted on twitter that will be sharing my 10 Most dangerous php script and how to use them. I will not be giving any php tutorials in this post so I am assuming you can atleast read PHP and know how to install it and run it. If you cannot do these, please search google.
                                           
Here we go

1- TWO DOMAIN NAME SCANNER

      I have always wanted to hack into corporate domains but the problems is that some two domains (02) fail to give the right info. who will guess that the solution lies in this script? Scan .cm .ng .tr etc domain names with this php code:


define("__USED_CHARS__", "abcdefghijklmnopqrstuvwxyz0123456789");
define("__CASE_SENSITIVE__", true); // Use string above or use uppercase / lowercase variant

$bf = new chargen(2); // new chargen object, length 2
$bf->generate("whois"); // generate chars and call whois function

function whois($str)
{
        $domain = $str.".com";

        $retval = shell_exec("whois $domain");

        if (eregi("no match", $retval))
                echo $domain." ist available\n";
        else
                echo $domain." is unavailable\n";
}

class chargen
{
        private $chars = NULL;
        private $maxlength = NULL;

        protected $buffer = NULL;

        function generate($mycallback = false)
        {
                foreach ($this->buffer as $char)
                {
                        foreach ($this->chars as $nextchar)
                        {
                                $retval = $char.$nextchar;
                                $this->buffer[$retval] = $retval;

                                if ($mycallback && function_exists($mycallback))
                                        $mycallback($retval);
                                else
                                        echo $retval."\n";
                        }
                }

                if (strlen($retval) == $this->maxlength)
                        return;

                $this->generate($mycallback);
        }

        function __construct($maxlength = 8)
        {
                $chars = array();

                $this->buffer = array();
                array_push($this->buffer, "");

                for ($i = 0; $i < strlen(__USED_CHARS__); $i++)
                {
                        $index = substr(__USED_CHARS__, $i, 1);

                        if (__CASE_SENSITIVE__)
                        {
                                $this->chars[$index] = $index;
                        }
                        else
                        {
                                $this->chars[strtolower($index)] = strtolower($index);
                                $this->chars[strtoupper($index)] = strtoupper($index);
                        }
                }

                $this->maxlength = $maxlength;
        }
}
?>

Dear readers,

     Today I am going to show you how to solve a very very very hard problem in a very simple manner. If you are using Linux and Ringo Cameroon PPPoE or if you are using PPPoE or any other method to connect to the internet and then all of a sudden the following happens then read on:

1. You can browse some websites but not others
2. you can ping a website but cannot open in browser
3. you can telnet a website but cannot open in browser
4. you can traceroute a website but does not open in browser
5. filezilla loads and stops just before opening a remote directory
6. your skype works while facebook chat or empathy messenger will not
7. your internet suddenly slows down and sites fail to open

                               /sbin/ifconfig ppp0 mtu 1400

Then press enter and you are done. Solved. (this took me 7 days to figure out)

Thanks for reading

In my search for victim's IP and came across a unique situation. My victim was a user running windows and had no website, will not give me his email and was totally non considerate. infact he knew I was a hacker and was on the watch out. so what do I do???

   So what we can do if you find yourself in a similar position is to create a fake Skype account. make it fancy.. That should be easy to do. then search for the name of your victim. add them with a fancy intro so that they add you.

  once they are online start a conversation (not necessarily voice) just some text is enough. then open a terminal and type:

netstat -tupan | grep skype

if you were talking with more than 1 person. Just copy the IP and paste in www.ip2location.com to get the location so as to know the victim.

Thanks for reading. Your comments will be welcomed