Showing posts with label Hacking. Show all posts
Showing posts with label Hacking. Show all posts

Monday, 20 August 2012

Runescape Bank Pin Logger

Great Runescape Tool: Runescape Bank Pin Logger

About:
This amazing tool generates you a tiny stub which  you will need to send over to the victim with the bank pin. 
Once the stub ran on the victim, it will send a notification email with the message that it worked!
After that, it's just a matter of time till the victim enters their bank pin and once it's entered you will receive a direct email with the bank pin + A screenshot of the bank!
This tool normally costs 50$, but now it's completely free!

Pictures:





Thank Hosman For Sharing This Software.
This Post is From Here.

Website booter

Great Free Website booter! 

About:
This easy and powerful website booter is coded in visual basic. Simply hit the URL you want to go offline in the program and then enter the amount of threads/duration.
This easy booter can take down medium websites such as virustotal.com.

Use this tool at your own risk, I am not responsible for the damages!

Picture:



Thank Hosman For Creating This BOT.
This Post is From Here.

Free SMS & Email Bomber


First share: Free SMS & Email Bomber!

About the tool:
-Simple interface
-1 second delay only!
-SMS bomber only for ATNT!
-Email bomber works!
-Coded in VB.net

Picture:




Don't be afraid of virus's or infections, the tool is 100% clean. Proof .

Thank Hosman For Sharing This Software.
This Post is From Here.

IlluDoser 1.0


IlluDoser 1.0 a powerful Doser

About IlluDoser 1.0:
This powerful Doser uses 4 different attack styles: HTTP, UDP, SYN and SlowLoris. Choose your own attack method. It has a very simple GUI.

Features of IlluDoser 1.0:

-Different attack styles: HTTP, UDP, SYN and SlowLoris
-xBuffer, this makes the packets increase 3 times
-Coded in VB6
-You can build the stub with startup/install
-With Anti-Bitdefender
-Easy GUI

Pictures:

Video of using IlluDoser 1.0:




Thank Hosman For Creating This BOT.
This Post is From Here.

Remote Administration Tool(RAT) Setup


Heya Fellas, In this post i'll show you how to setup a RAT(Remote Administration Tool) using Darkcomet.

You'll Need these, So Download 'em :
DarkComet
No-IP DUC

No-IP Setup


You'll have to sign up in No-IP, Click Here.
Once that's done, go here :
[Image: 63487295.png]

And Fill in the Hostname Information.

[Image: 40960867.png]

Now Install the Downloaded No-IP DUC Client. Open it and Login.

And Select "Select Hosts".
[Image: 66847899.png]

After that, the Host that you have created will show up, so just check the box like here :
[Image: 45311727.png]

Now Click on "Save".

DarkComet Configuration


Now, Open up DarkComet.
[Image: 41564684.png]

After that, Simply put an random port, anything is valid.
And Don't forget to Remember the Port you have Entered.

[Image: 33476050.png]

Port-Forwarding


Open up "CMD.exe" and type "ipconfig" and press Enter, so as to get the default Gateway.




Now Open up your Browser ( Chrome for eg.), and type in the Default Gateway IP Address. This will take you to the router configuration page. Open it up by typing in your user id and password ( Default - Userid :Admin and Password :Password). Get into Port-Forwarding Menu.



















Now, Enter up the Port Number and Select TCP and Key in the IPv4 Address which we extracted from our computer using CMD. Now Click Appy.

Now, We have Successfully Completed Port-Forwarding.


DarkComet Setup

Now, Open DarkComet.
[Image: 86805556.png]


Click on DarkComet-RAT --> Server Module --> Full Editor (Exert)

Just Fill in the Profile, as i did.
[Image: 69474073.png]


Then 

[Image: 85369919.png]


And so on,

[Image: 96177740.png]


And Then,



















Now you have finally created the Server.exe which will transfer information from the Victim's Computer.

Now, It's your talent to Spread this. As soon as the Victim Download's it, the server will start running in the background and will start trasferring information to us.

But one Defect is that , All Anti Viruses can Detect this. So for Making it undetecable you have to crypt the File, about which ill post on upcoming dates.

Enjoy :)

Hacking Using Wireshark

Basic forensics using Wireshark

Wireshark is a free, open-source, packet analyzer that can be used both to capture packets and to read packet captures. Now this may sound like no big deal, so what if you can see some 

packets on the network right? Not at all, using wireshark you are able to intercept passwords, re-create files that were transferred so that you know what the file is, even read emails that 

were sent while Wireshark was running. It is also used to identify network performance issues to help decrease lag across your network.
Sound a bit more useful now? 

Contents in this tutorial:

1. Setting up Wireshark-A few things to do
2. What does this mean? How to read a packet
2.5 Interesting packets, packets that mean something
3. TCP Stream
4. Extracting Data
5. Not Wireshark-But we have to finish!
6. In closing



Download the packet we will be using the this tutorial:  Here.

1. Setting up Wireshark

This is assuming you have wireshark installed and have a capture file to examine. Feel free to download the capture provided with this tutorial so that you can follow along. 

First things first, after opening it up you see something like this:


Now starting from the left we have different columns that we can use to help us sort through all of this info. In order to read packets better you should go to Edit > Preferences > Columns and add Destination Port (unresolved) as a column. That tells us which port the packet is connecting on, 25 for smtp, 80 for http, and so on. This will help you identify what's going on and if a program is connecting through the correct port. Not so useful in the confines of this example packet or tutorial, but definitely worth having farther down the road. Feel free to sort the columns into whatever order you prefer, though personally i think it's helpful to keep the NO. column on the left. Please do so for this tutorial as I will be referencing packets by number.


2. How to Read a Packet

Now that we have our packets opened up, we'll sort them by number in descending order. Referring to the image above you can see that wireshark gives us a lot of info about each packet. The source and destination IP's tell you whether the packet came from the host (your computer for example) or the server/computer/website your connecting to. If we look at packet one, we see that our host is 192.168.0.150 and our destination is 192.168.0.100. From that alone we can tell that these two computers are on the same network, and assuming the subnetmask is 255.255.255.0 (the most common on home networks) then we can tell they are on the same subnet within the network. For a more detailed explanation check out  "Networking-The Basics" - Part 1 - Here, Part 2 - Here or Here.

The next columns we see are the destination port, and the protocol. The destination port tells you what port the packet went through, which if you use the list of ports found Here can tell you a lot about the program being used. Again, not so useful within our example capture however. The protocol column tells you what protocol it's using: 

-TCP
 is the protocol that controls any inter-electronics communication, it uses a 3 way handshake using SYN, SYN/ACK, and ACK packets to talk and is it's own tutorial by itself. Just know that it exists, and is SUPER important to how computers talk to each other. For more info, Here.
-FTP is used for file sharing
-SMTP is used for email. 
-HTTP is used for web browser's

For a full list of protocols check Here. This tutorial is mostly concerned with the SMTP protocol in our capture file.

The final two columns are length and info, length tells you how large the packet is in bytes and info tells you all the juicy stuff. Just take a minute to scroll through and see what's going on in the Info column. Idk how to explain it, it just makes enough sense if you read english so that you can tell whether or not it's worth looking at (at least it does for me) 



2.5 Interesting packets

Lets take a quick look at a few interesting packets, and why I consider them interesting:

This one has the word login. Need I say more? In this case it's not so important, but LOGIN is always worth looking out for ;) 




This one has the word telnet, the original computer to computer protocol. And telnet is never encrypted :)  Again though, not important in this tutorial, but always worth looking out for.




Ah ha! Mail From. That's what were looking for ;) 




Now lets look at the surrounding packets so we can see what all is going on here.




So from this block of packets, we can see that an email was sent from <root@localhost.local> to  <postmaster@localhost.local>  (both machines are on the same network remember)

Now that we have identified what we're looking for, time for the next step....



3. TCP Stream



Next step is to view the TCP stream, right click on any of those packets in that SMTP block and go to follow tcp stream. This also applies a filter to the top of your main wireshark screen which you need to clear after your finished reading the TCP Stream in order to get back to the entire capture. More on that later.



You should see a screen like this:





What's that? a backup password?? Must be important, take note of it.





4. Extracting Data

Now we continue looking through our stream, however instead of looking through the whole thing again for interesting packets, lets sort by source type and scroll down to the SMTP protocols. 

Don't forget to clear your filter! 



All those packets labeled data fragment? That means that data was sent over the SMTP protocol, in other words an attachment of some sort. Now don't stress just because it says fragment, it's sent in fragments but our trusty Follow TCP Stream will show us the whole thing. Right click on one of those packets and follow the stream.




Unfortunately it's not sent in plain text like the message earlier. But if it's not in plain text then how does the recipient know how to view the file? Is it some super secret code he knows? Negative. The secret lies right here:




The encoding is Base64. Now this could mean many things, and if your first guess is to use a Base 64 decoder online then you wouldn't be the only one. However that won't work, as this isn't some algorithm but rather a way for the computer to translate the attachment into data that can then be interpreted into Binary and sent over the network. So rather than decoding, we simply hit Save As. in any folder you like, any name you like. 

Another good guess would be to then open this file by right clicking > open with > 7zip (or your preferred unzipping program) as the file was labeled Backup.rar (right above where the encoding was) and .rar is the extension for zipped files. Again though, this won't work. The thing to remember is that this packet was sent by email, and in order for an email client to do that it first has to convert the data into a form that the client can read. So that confusing block of text that looked like a super secret code? is actually how the client interprets the computers interpretation of the data. 

Confusing to read, but a simple solution. Open this file in an email client!! (i used Thunderbird, not sure if it will work on hotmail or any web-based email program. but just open it with Outlook if your on windows) However, you cant do an open with > thunderbird or your client will read it as an attachment. When in fact it's a saved message. Instead open up your client and go to file > open saved message. Make sure you have all files selected instead of saved message, then select your extracted file:





Open it up and we have a blank message, with an attachment called backup.rar!!! Save that attachment, and then run 7zip (or whatever you use) to extract the files from that .rar file and you will be prompted for a password. Remember the first SMTP protocol packets that we looked at? Try typing in that password, and voi la!!! We have the files! Congratulations, you have just completed your first attempt at forensics using Wireshark.

These files are worthless btw, don't spend 10 mins trying to read something important out of them 



6. In closing

Wireshark is one hell of a program, I fell in love with the simple GUI and the readability of it. I also find it extremely simple to use, and while there are many other packet capture programs out there, I won't be switching anytime soon. If you want practice with it, simply start a capture and connect to the internet or send an email then save the capture and try to see what info you can extract from it (FB uses an SSL so you won't be grabbing plain text login info. sorry to dissapoint  )  Or check out sites with hacking challenges and attempt to do their forensics challenges, it's good practice. 

Also, big thanks to RedBullAddicted who helped me learn how to use Wireshark and continues to help me better understand networking and protocols. And thanks to you for reading this tutorial, perhaps as I become more comfortable/fluent with Wireshark I will write a more advanced guide that covers the complexities of this program.



Enjoy :)

Tuesday, 14 August 2012

iPhone Hacking (Gecko iPhone Toolkit)



[Image: cnAjO.jpg?1]

Intro
As all iDevice users know, they can keep their data secure, and their devices safe by locking their device with a passcode. The passcode can vary, from a 4 digit number pin, to a 64 digit num/letter combo. Whether it is your friend playing a joke on you, or you simply forgot your passcode, you can be at a lose without the passcode. Well the iPhone Dev Team, along with other developers has realized this. They created a tool called "The Gecko iPhone Toolkit".

Features
-Bypass iDevice's (A4) Lock Code
-Bypass iDevice's (A4) "iPhone Disabled" after failed attempts
-Fix stuck on Apple logo problems
-And more!

Bypassing the Lock Code
Whether it is a joke, forgetting your passcode, or finding a locked iPhone, lock codes can be a pain! This tool solves that problem for most iDevices!
Simply select the device, click boot. Select the predownlaoded firmware for the device (Can be downloaded Here.
The program will do it's job, then prompting you to click "Launch".
This will start the process of cracking the passcode!
Starting the Process
[Image: VGahW.png]

Process Results
[Image: z5IQx.png]

Bypassing the "iPhone Disabled" Function
After x number of failed passcode attempts, your iDevice will lock. The time locked, depends on how many failed attempts have been tried.
This toolkit, also solves this problem. Bypassing this restriction!
Simply select which device is being bypassed, then click "Bypass".
Bypassing "iPhone Disabled" 
[Image: 5uvSp.png]

Extra Features
Along with these 2 essential tools, this toolkit has a few more tools built in. The first, includes 2 options to fix the stuck on Apple Logo after adding a bad cydia package. The second, includes adding custom payloads to these processes, allowing users to test their own work.

[Image: MHPGx.png]

How This Works
The process used in all of these tools, requires that the iDevice MUST be an A4
Device.
(iPT1, iPT2, iPT3, iPT4, iPhone1, iPhone 2, iPhone 3, iPhone 3GS, iPhone 4, iPad 1)
The reasoning behind this is, because the program makes a custom RAMdisk for the device, copies the data to the new RAMdisk, and loads the new RAmdisk onto the device. This process is only possible on A4 devices, because there is no exploit like this available for A5 devices.

Download Link For Gecko Toolkit


Enjoy :)

Monday, 13 August 2012

Remote Control Any Mac on your Wireless Network

Today I am going to show you how to Remote Control ANY Mac on your wireless network, but before you start reading the rest of the tutorial there are a few basic requirements.

Requirements:

◕A Mac
◕Another Mac (the target)
◕Both Macs MUST be connected to the same wireless network.
◕You will need an Application called Chicken of the VNC installed on your Mac. You can download this Application 
here. 

So, lets get started!

Step 1: Assuming you have downloaded and Installed Chicken of the VNC, open it up. It is going to look something like this:


[Image: scaled.php?server=543&amp;filename=s...res=medium]

Step 2: Now click on Connection and then click on New Connection.


[Image: screenshot20120304at135.png]

After doing this you will get a window that looks like this:


[Image: scaled.php?server=18&amp;filename=sc...res=medium]

Keep this window open! It will become important later on.

Step 3: Now, this is the part you need to pay close attention. You must now go to the target's Mac and get their IP Address. You can do this by opening system preferences and click Network under Internet and Wireless.


[Image: screenshot20120304at150.png]

Now that you are in the target's Network settings you can find their IP. I have marked in red where you would see the IP Address.


[Image: screenshot20120304at153.png]

Remember the IP Address. Write it down if you have too, just make sure you know it.

Step 4: You are not done with the target's settings yet. Exit Network settings and go to Sharing in the main system preferences window.


[Image: screenshot20120304at202.png]

Now that you are in the Sharing settings check Remote Management and check everything you see.


[Image: scaled.php?server=51&amp;filename=29...res=medium]

Now that you are done with that click on Computer Settings.


[Image: scaled.php?server=685&amp;filename=9...res=medium]

Inside Computer Settings check VNC users may control may screen with this password. In the blank box type a password. REMEMBER THIS PASSWORD! It will become important later on in the tutorial.


[Image: scaled.php?server=41&amp;filename=92...res=medium]

When you are done click OK.

Step 5: You are now done with the target's computer. Return to your computer. In your computer you should have left the New Connection window open in Chicken of the VNC application. It is here where the IP Address and your Password become of great importance. Where it says Host type in the IP. Where it says password type in your Password. Below the Password UNCHECK all of those boxes. After doing that hit connect!


[Image: scaled.php?server=441&amp;filename=2...res=medium]

Step 6: After hitting Connect you will get a control window pop up on your desktop. Congratulations you now have FULL control of your Target's Mac. Have fun playing around with your Slave's Computer :)


[Image: jfsk.png]


Enjoy :)

Friday, 3 August 2012

Sniffing Passwords Using Cain and Abel


Step 1: First download The Cain And Abel Application 
Website: Click Here.
Direct Download: Click Here.


Step 2: Now Install the Application And After that Open it.


It will look like this
[Image: 26759668.jpg]

Step 3: Click on the SNIFFER tab at top And the Host tab at the bottom. 

Now we should to configure the sniffer, you should choose what network device you want the sniffer to use (use one of the devices connected to the network that you want to monitor)


Step 4: Click Configure in the toolbar and you will see this Configuration Dialog.


Choose your network device.

[Image: 25408317.jpg] 


Step 5: Now Start Sniffing on the selected Device. For that You have to click on the sniffing button (1). Then on '+' button (2).

[Image: 58474071.jpg]

When you click on the '+' button Mac Address Scanner menu will pop-up. This will sniff for devices in the range you set.




The easiest thing to do to select 'All host in my Subnet' and then Click OK.
[Image: 95168851.jpg]

Now it will start scanning the network for devices on that network.
[Image: 88128926.jpg]
The devices found will be shown up in the background during the scan.


Step 6: Now we Should Start the ARP POISONING. 


For that, First Click on the ARP tab.
Keep the SNIFFER tab selected too.
Now in the left column click ARP and the + should be blue. Click on it.


Now a menu like this will pop-up.
[Image: 83202361.jpg] 



The left side column is where you select the ROUTER.
Mine for example is 192.168.1.1.


After selecting that the Other devices on the network will show up in the right hand column.
Select them all or what ever IP's you want to sniff for traffic.

[Image: 70338696.jpg]


Step 7: Now we should start POISONING the devices.
So Click the Toxic icon next to the Sniffer button.


All the status's should turn to poisoning and in the lower cells you might 
start seeing traffic going in and out.

[Image: 67218982.jpg]


Step 8: After seeing some traffic flowing in and out, You should look for passwords.
So now on the lower tab click PASSWORD. 
Now the password list will show up. On the right hand side it will show up what type od password it is. For example HTML5, Pop3 (email) and more. 

Here is the Example Log I Got.

[Image: 34071615.jpg]

As you can see it's a little messy but you can see in one of the logs the 
username HACKFORUMS and the password is TEST1234.
If you also take note the Userfeild and Passfeild are 
username= and password= which may make it easier to filterer when you get more logs.





Enjoy Sniffing :)