Showing posts with label Hacking. Show all posts
Showing posts with label Hacking. Show all posts

Saturday, July 20, 2013

Crack Wifi Passwords WEP | WPA | WPA2 | WPS - GUI Tool



Fern Wifi cracker is a tool written for wireless auditing and cracking wireless network passwords. It's written in python language.

Fern is able to crack WEP/WPA/WPS.

It runs on Linux based machines , like Ubuntu, Backtrack, Backbox, Kali Linux etc.

Features : 


  • WEP Cracking with Fragmentation,Chop-Chop, Caffe-Latte, Hirte, ARP Request Replay or WPS attack
  • WPA/WPA2 Cracking with Dictionary or WPS based attacks
  • Automatic saving of key in database on successful crack
  • Automatic Access Point Attack System
  • Session Hijacking (Passive and Ethernet Modes)
  • Access Point MAC Address Geo Location Tracking
  • Internal MITM Engine
  • Bruteforce Attacks (HTTP,HTTPS,TELNET,FTP)
  • Update Support

Download :



Screenshots :

Enjoy...!

Friday, June 28, 2013

Certified Ethical Hacker V6 Full Course



Free download Certified ethical hacker V6  Course free...



CONTENTS :

Module 1: Introduction to Ethical Hacking
Module 2: Hacking Laws
Module 3: Footprinting
Module 4: Google Hacking
Module 5: Scanning
Module 6: Enumeration
Module 7: System Hacking
Module 8: Trojans and Backdoors
Module 9: Viruses and Worms
Module 10: Sniffers
Module 11: Social Engineering
Impersonating Orkut, Facebook, MySpace
Modula 12: Phishing
Module 13: Hacking Email Accounts
Module 14: Denial-of-Service
Module 15: Session Hijacking
Module 16: Hacking Web Servers
Module 17: Web Application Vulnerabilities
Module 18: Web-Based Password Cracking Techniques
Module 19: SQL Injection
Module 20: Hacking Wireless Networks
Module 21: Physical Security
Module 22: Linux Hacking
Module 23: Evading IDS, Firewalls and Detecting Honey Pots
Module 24: Buffer Overfl ows
Module 25: Cryptography
Module 26: Penetration Testing
Module 27: Covert Hacking
Module 28: Writing Virus Codes
Module 29: Assembly Language Tutorial
Module 30: Exploit Writing
Module 31: Smashing the Stack for Fun and Profi t
Module 32: Windows Based Buffer Overfl ow Exploit Writing
Module 33: Reverse Engineering
Module 34: MAC OS X Hacking
Module 35: Hacking Routers, cable Modems and Firewalls
Module 36: Hacking Mobile Phones, PDA and Handheld Devices
Module 37: Bluetooth Hacking
Module 38: VoIP Hacking
Module 39: RFID Hacking
Module 40: Spamming
Module 41: Hacking USB Devices
Module 42: Hacking Database Servers
Module 43: Cyber Warfare- Hacking, Al-Qaida and Terrorism
Module 44: Internet Content Filtering Techniques
Module 45: Privacy on the Internet
Module 46: Securing Laptop Computers
Module 47: Spying Technologies
Module 48: Corporate Espionage- Hacking Using Insiders
Module 49: Creating Security Policies
Module 50: Software Piracy and Warez
Module 51: Hacking and Cheating Online Games
Module 52: Hacking RSS and Atom
Module 53: Hacking Web Browsers (Firefox, IE)
Module 54: Proxy Server Technologies
Module 55: Data Loss Prevention
Module 56: Hacking Global Positioning System (GPS)
Module 57: Computer Forensics and Incident Handling
Module 58: Credit Card Frauds
Module 59: How to Steal Passwords
Module 60: Firewall Technologies
Module 61: Threats and Countermeasures
Module 62: Case Studies

In this modules each module has more than 50 sub topics...
So, it's gonna have a fun...





Monday, January 7, 2013

Top 11 Hacking Tools that Penetration Tester Uses



1. Metasploit Framework – an open source tool for exploit development and penetration testing Metasploit is well known in the security community. Metasploit has exploits for both server and client based attacks; with feature packed communication modules (meterpreter) that make pwning systems fun! The framework now includes Armitage for point and click network exploitation. This is the go to tool if you want to break into a network or computer system.
Defending against Metasploit:
  • Keep all software updated with the latest security patches.
  • Use strong passwords on all systems.
  • Deploy network services with secure configurations.
2. Ettercap – a suite of tools for man in the middle attacks (MITM). Once you have initiated a man in the middle attack with Ettercap use the modules and scripting capabilities to manipulate or inject traffic on the fly. Sniffing data and passwords are just the beginning; inject to exploit FTW!
Defending against Ettercap:
  • Understand that ARP poisoning is not difficult in a typical switched network.
  • Lock down network ports.
  • Use secure switch configurations and NAC if risk is sufficient.
3. sslstrip – using HTTPS makes people feel warm, fuzzy and secure. Using sslstrip this security can be attacked, reducing the connection to an unencrypted HTTP session, whereby all the traffic is readable. Banking details, passwords and emails from your boss all in the clear. Even includes a nifty feature where the favicon on the unencrypted connection is replaced with a padlock just to make the user keep that warm and fuzzy feeling.
Defending against sslstrip:
  • Be aware of the possibility of MITM attacks (arp, proxies / gateway, wireless).
  • Look for sudden protocol changes in browser bar. Not really a technical mitigation!
4. evilgrade – another man in the middle attack. Everyone knows that keeping software updated is the way to stay secure. This little utility fakes the upgrade and provides the user with a not so good update. Can exploit the upgrade functionality on around 63 pieces of software including Opera, Notepad++, VMware, Virtualbox, itunes, quicktime and winamp! It really whips the llamas ass!
Defending against evilgrade:
  • Be aware of the possibility of MITM attacks (arp attacks, proxy / gateway, wireless).
  • Only perform updates to your system or applications on a trusted network.
5. Social Engineer Toolkit – makes creating a social engineered client side attack way too easy. Creates the spear phish, sends the email and serves the malicious exploit. SET is the open source client side attack weapon of choice.
Defending against SET:
  • User awareness training around spear phishing attacks.
  • Strong Email and Web filtering controls.
6. sqlmap – SQL Injection is an attack vector that has been around for over 10 years. Yet it is still the easiest way to get dumps of entire databases of information. Sqlmap is not only a highly accurate tool for detecting sql injection; but also has the capability to dump information from the database and to even launch attacks that can result in operating system shell access on the vulnerable system.
Defending against sqlmap:
  • Filter all input on dynamic websites (secure the web applications).
  • Use mod_proxy or other web based filtering controls to help block malicious injection attacks (not ideal as often able to bypass these web application firewalls (WAF).
7. aircrack-ng – breaking holes in wireless networks for fun and profit. A suite of tools that enables all manner of wireless network attacks.
Defending against aircrack-ng:
  • Never use WEP
  • When using WPA2 with pre-shared keys, ensure passwords are strong (10+ characters non-dictionary based passwords).
8. oclHashcat – Need to get some passwords from the hashes you grabbed with sqlmap? Use this tool to bust them open. Over 48 different hashing algorithms supported. Will use the GPU (if supported) on your graphics card to find those hashes many times faster than your clunky old CPU.
Defending against oclHashcat:
  • Passwords are the weakest link. Enforce password complexity.
  • Protect the hashed passwords.
  • Salt the hashes.
9. ncrack – Brute force network passwords with this tool from Fyodor the creator of Nmap. Passwords are the weakest link and Ncrack makes it easy to brute force passwords for RDP, SSH, http(s), SMB, pop3(s), VNC, FTP, and telnet.
Defending against ncrack:
  • Use strong passwords everywhere.
  • Implement time based lockouts on network service password failures.
10. Cain and Abel – Cracking passwords, sniffing VOIP and Man in the Middle (MITM) attacks against RDP are just a few examples of the many features of this Windows only tool.
Defending against Cain and Abel:
  • Be aware of the possibility of MITM attacks (arp attacks, untrusted proxy / gateway, wireless).
  • Use strong passwords everywhere.
11. Tor – push your traffic through this onion network that is designed to provide anonymity to the user. Note your traffic from the exit node is not encrypted or secured. Make sure you understand what it does before using it, Tor provides anonymity not encrypted communication.
Defending against Tor:
  • It is possible to implement blocking of Tor exit nodes on your firewall, if Tor traffic is linked to a threat to your environment.

Monday, November 19, 2012

Friday, June 15, 2012

A Quick Intro to MD5





  • MD5 Stands for Message Digest Algorithm 5
  • It's widely used Algorithm over the globe.
  • Designed by Ronald Rivest.
  • First Published on April 1992.
  • It Produces 128 bit hash encryption of any string.
  • Most of People says that it's impossible to Crack , The fact is that No Encryption method is impossible to Crack.
  • MD5 also uses as a Digital Signature.
  • Some online tools to Crack MD5

    http://md5crack.com
    http://www.md5decrypter.co.uk
    http://www.md5this.com
    http://www.md5cracker.org/

Friday, March 16, 2012

Tuesday, January 3, 2012

How to: Extend your laptop's Wireless Antenna Range upto 16 Times - Tweak 1



I’ve been using a wireless Ethernet card in my laptop. But now the change from wired networking to wireless was an amazing shift. Now I could wander around my office or my home and connect to the Web. However, in many situations, I found that the range of the built-in antenna in the PC card was limited, and I desired additional range.

Wednesday, December 14, 2011

What is Footprinting ? Footprinting Basic



What is Footprinting ?

Footprinting is the first and most convenient way that hackers use to gather information about computer systems and the companies they belong to. The purpose of footprinting is to learn as much as you can about a system, its remote access capabilities, its ports and services, and the aspects of its security.

Introduction
Footprinting is the means by which hackers target an organization and use a remote access process to gather proprietary information relevant to organization’s Internet and network processors.They does "who is" queries which produce employee name,contace no,email and such important information.



What Hackers look for
The attacker first identifies the various domain names that he's interested in exploiting. He then performs a footprint analysis of the target to gather as much information as possible through publicly available sources. The footprint analysis gives the hacker an indication of how large the target might be, how many potential entry points exist.


One thing that hackers can usually disregard that you must pay particular attention to is what we techies affectionately refer to as layers eight and nine of the seven layer OSI Model-Politics and Funding. The amount of information that is readily available about you, your organization, its employees, and anything else you can image is nothing short of amazing.


Tools available for footprint
Port scanners: Port Scanners are used to determine which hosts are alive on the Internet, which Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) ports are listening on each system, and the operating system that is installed on each host.


Trace routes: Trace Route are performed to help identify the relationship
of each host to every other and to identify potential security mechanisms between the attacker and the target. 


Nslookup: Nslookup is a command line tool in Windows Platform that can be used to perform DNS queries and zone transfers. 


Tracert:  Tracert is a command line tool used by hackers to create network maps of the target
network presence. After the port scanning and trace routing is finished, attackers create a network map that represents their understanding of the target's Internet footprint. This map is used for the second phase of the attack: information enumeration.


Techniques used to footprint
  • DNS queries
  • Network enumeration
  • Network queries
  • Operating system identification
  • Organizational queries
  • Ping sweeps
  • Point of contact queries
  • Port Scanning
  • Registrar queries (WHOIS queries)
  • SNMP queries
  • World Wide Web spidering
Enjoy !!!


Tuesday, December 13, 2011

HI ALERT!!! New Trojan Spreading - SPQJSADSLA.EXE Get Details



Friends while i am surfing i got a new alert that my PC is infected. Suddenly one window opens with security shield title and it starts scanning it self, even i am not using any antivirus, or any antimalware.

Than i checked process in task manager and found the process of security shield, the process was xnlroiob.exe, then i try to find on internet but google says no result found.

I doubt that it's not any antivirus, surely it's a fake warning and virus or trojan or malware.

I think and again checked task manager, i found that one java.exe process is also running even i am not using any java application. Then i end the process and i amazed that, that security shield application was stopped working and i am not getting any warning any more.

After Search i found that this is a Trojan and giving fake warning to victims and running on java.

Then i started CProcess utility (from http://www.nirsoft.net/) and find the location of that fu*ky trojan. It was in my "C:\Users\Technoknol\AppData\Local\xnlroiob.exe". I tried to delete but when i close and reopen that location, it was there.

So, Beware friends it's the alert because i have faced the problem and i know how it's danger. Don't worry it's solution will be published when i win against that fu*ky.

Here below is a some reports and specifications of it. Read it carefully.



Details:
Group : Cloaked Malware

Country of Origin :  South Africa

First Seen on :  Dec 11, 2011

File Names : SPQJSADSLA.EXE, 43627076.EXE, 86145167.DAT, 65257416.EXE, TEST.EXE, xnlroiob.exe

File Size : 365,056 bytes (357 Kilo bytes)

File Type : EXE Executable

Affected Operating Systems : Windows

Friends this is the information i found on internet. Here below is a PREVX and VIRUSTOTAL report click and check it out.


http://www.freezepage.com/1323723846KMUNTLFQDD ( Virus Total Report Freezed Page )


Below is a Screenshots i've captured. If you have seen like this on your computer then you're infected beware when sufing.

1. This Screen in image says that such listed files are suspecious but i have checked but that was never shown as suspecious.


2.This windows says that your Internet Explorer is infected with Trojan Spy, and asking you to activate.
3. Whenever you click on any warning or anywhere it opens full screen window like below image.

 
4.  It opens a window looking as control panel-->Action Center (in Windows7).
5. The main window which first opens on my PC any starts scanning it self.
6. A window which says 9 viruses, 2 adware and 3 spyware detected and asking to remove all threats like any original antivirus.
7. and last a notification warning tells you that Spyware.IEmonster is detected and sending all your passwords.

And at last, have you noticed that, in 4th image close button is disabled when microsoft will never do that (ofcourse not in control panel) and it looks like control panel of windows7 , and in other images windows like Windows XP (I am using Windows7).


Enjoy !!!


Wednesday, August 24, 2011

How to Use Havij - A SQL Injection Tool - Tutorial



Here i Will tell you how to use A SQL Injection Tool - Havij



How to Use Havij:

First of All you have to find A Vulnerable Link. Then Paste it in "Target:" box in Havij









Now Click on Analyze to get site info and Database Name


    Then Click on "Tables" Button so you will show the database name.
    Now Select Database and Click on "Get Tables" Button. So you will get Tables Name.
    Now Select anyone Table which you want like Admin,Users,user,Administrator etc. And after this Click on "Get Columns".

    After processing you will get Columns then select any columns and Click on "Get Data" Button. You will get Data from that selected Columns.



    Download Havij:





    Havij 1.15
    http://www.easy-share.com/1917698386/Havij1.15Free.rar
    http://www.megaupload.com/?d=XYQ7BF3L
    http://hotfile.com/dl/127734306/c0a40e7/Havij1.15Free.rar.html

    Havij Help (PDF Format)
    http://www.megaupload.com/?d=XYQ7BF3L
    http://www.ziddu.com/download/16168508/havij_help-english.pdf.html
    http://hotfile.com/dl/127734315/4e9f6fd/havij_help-english.pdf.html


    Havij Help (CHM Format)
    http://www.ziddu.com/download/16168508/havij_help-english.pdf.html
    http://www.megaupload.com/?d=XYQ7BF3L
    http://hotfile.com/dl/127734319/71c7d4a/havij_help-english.chm.html

    UPDATE :

       OR  CLICK HERE

    Related Posts Plugin for WordPress, Blogger...