Sunday, January 29, 2012
Anu
Features
- Hacks WEP, WPA, and WPA2
- Very simple and easy to use layout
- Works on All Android OS phones
- Works on iPod Touch 1st, 2nd, 3rd, and 4th gen
- Works on iPhone 1st, 2nd, 3G, 3GS, 4, 4s
- Works on iPad 1 and iPad 2
Showing posts with label Hacking tools. Show all posts
Showing posts with label Hacking tools. Show all posts
Sunday, January 29, 2012
Tuesday, December 27, 2011
HACK : Download F.B.I RAT with Full source coding
F.B.I RAT (Full Backdoor Intergration) V0.1. Supports
xp/Vista/Windows 7, all features have been tested on these OS's
including injection, but there have been some limitations on the
sniffer.
Saturday, July 9, 2011
Free download Award Keylogger - full version...
Award Keylogger allows you to monitor all users' activity on any
computers in real time and record each computer's usage history. Award
Keylogger makes it easy to view, in real time, the screenshots of the
any computers, all typed keystrokes, visited Web sites, used programs.
You can view a list of running processes and terminate undesirable
ones.
Wednesday, April 6, 2011
How to crack a WEP key (With Windows)??
Monday, April 4, 2011
Sunday, March 20, 2011
How to hack your computer on LAN?
I think there are already many tut on lan hacking but i found this tut .... its really nice .... so i decided to share it with u all.
Hacking Computer Inside LAN Network
This technique will be taking advantage of Port 139.
Most of the time,Port 139 will be opened.
First of all,I will do a port scanning at the target computer which is 192.168.40.128.
This computer is inside my LAN network.
scan it using Nmap.
I get the result and it shows Port 139 is opened up for me.
Now you will need both of these tools:
** USER2SID & SID2USER
** NetBios Auditing Tool
You can get both of them from HERE
After you get both of them,put them in the C: directory.
You now need to create a null session to the target computer.
Now open the Command Prompt and browse to the USER2SID & SID2USER folder.There will be 2 tools inside it,one will be USER2SID and another one will be SID2USER.
We will first using USER2SID to get the ID.
We will first using USER2SID to get the ID.
We will test against the Guest account because Guest account is a built in account.
After we get the ID,we need to do some modification on the ID.
We take the ID we get from the guest account and modified it become
"5 21 861567501 1383384898 839522115 500".
Please leave out the S-1-,leave out all the - too.
After we get the ID,we need to do some modification on the ID.
We take the ID we get from the guest account and modified it become
"5 21 861567501 1383384898 839522115 500".
Please leave out the S-1-,leave out all the - too.
Now you will see that you get the username of the Administrator account.
In this case,the Administrator account is Administrator.
Create a text file called user.txt and the content will be the username of the Admin account.
In this case,the Administrator account is Administrator.
Create a text file called user.txt and the content will be the username of the Admin account.
Prepare yourself a good wordlist.
Now put both of them in the same directory with the NetBios Auditing Tool.
MAIN PART
Now we are going to crack the Admin account for the password in order to access to the target computer.
Browse to the NetBios Auditing Tool directory.
Browse to the NetBios Auditing Tool directory.
Press on enter and the tool will run through the passlist.
In this case,I have get the password.
In order to proof that I can get access to the target computer using this password.
In order to proof that I can get access to the target computer using this password.
After you press enter,it will prompt you for the username and password.
Therefore,just input them inside the prompt and continue.
Target C drive will be on your screen.
In order to prevent from this attack,close down port that you do not want to use such as Port 135,Port 136,Port 137,Port 138 and Port 139.
Thanks...
Friday, March 4, 2011
Tools for hacking remote computer...
In this article on remote computer hacking, I will inform you about
hacking software to hack computer remotely.
This software is called "Prorat" is a RAT (Remote administration Tool) used to hack computer remotely.
RATs :
RATs also called as Remote Administration tools are popularly used softwares to control other computer remotely and considering hacking aspects, hack computer remotely. There are many RATs such as:
Prorat
Turkojan
Yuri RAT and many other.
Working of RATs:
To hack computer remotely using a RAT, you have to create a server and then send this server to victim whose you wanna hack computer remotely. Generally, this server is binded to any file say picture or song, so that whenever victim opens this file on his computer, our server is installed and this server opens port of victim computer and by using this opened port, you are able to hack computer remotely.
It is this RAT server that then sends all system information to PRORAT and we can then hack computer remotely using PRORAT.
Things you can do by hacking computer remotely:
Once you gain access to remote computer, you can hack computer remotely and perform any of following:
# Install a keylogger
# Monitor Chat windows
# Shutdown computer remotely
# Take control of system registry
# Hack locally stored passwords and licence keys
# Download additional malware and servers to gain stronger control
# Control and access all Control Panel options(including add or remover programs)
# Send various Error messages
# Access Printer services
# Erase all disk data by formatting drives
# Open FTP connection and start file transaction
Thus, you are able to hack computer remotely 100%. This software to hack computer remotely is hence very popular.
Disadvantage of remote hacking software RAT:
The main disadvantage of this software - RAT is that the server created to hack computer remotely is recognized by most antiviruses as hacktool and hence, antiviruses send alert messages when installing RAT server.
But, there are many softwares like Binders or Crypters to hide RAT server and prevent antiviruses from sending alerts. Even there are softwares like AVkiller which is used to turn antivirus inactive and then our server (used to hack computer remotely) can be installed on victim computer very easily.
This is all about RATs - softwares to hack computer remotely. In my next article, I will inform about server creation and installation on remote computer. If you have any problem with this article on how to hack computer remotely, please mention it in comments section.
Enjoy N hack computer remotely...
Monday, February 28, 2011
How to control a remote computer with keylogger (Lost Door)?
Remote Administration tools also known as RAT are windows Trojans or in simple terms programs used by a Hacker to get administrative privileges on the victim’s computer. Using a RAT you can do a lot of cool things such as “Upload, delete or modify data” , “Edit registry”, “Capture victim’s screen shot”, “Take control of victim’s Computer”or “Execute a virus” just with a click of a button.
Throughout this article I will teach you how to use Lost Door, a Windows RAT, to control and monitor a victim’s computer remotely.
Disclaimer: Coder and related sites are not responsible for any abuse done using this software.
Follow the steps below to setup a server for Lost Door.
- Download Lost Door from here . (The password to unzip this file is “qq” without double quotes.)
- On executing the download file, you will see the following screen. Accept it
- After it is open, right click on the window and click on create server
- Now enter your IP address and DNS here. Leave the rest of the field as it is.
- Now click on the ‘Options’ tab and choose the options as you want. To activate an offline keylogger is a good practice.
- Now go to ‘Advanced’ Tab. There will options related to spreading. This will be used in case you have more than 1 victim.
- Now just go to the ‘Create’ tab and click on create server. Your server is ready for use now and now send it to the victim.
Sending the server file to your victim
This is the most important thing after you have created your server file. If you want to take control on a single computer than you have to send this server file to the desired victim but if you want to affect more and more people than you have to use some spreading techniques.
- If you have physical access to the victim’s computer then take the server file in a pen drive and just double click on your server file once you have injected the pen drive into that computer.
- For those who don’t have physical access can use social engineering in order to get the victim execute that file on his computer.
Using Spreading to affect multiple victims
If you have more than one victim, then you have an option of using spreading technique. You might think that by creating multiple server files you can control multiple users. But here is a secret about spreading. When you select the spreading option, the server file will act as a worm which will spread itself across different computers via Email or any other channel. So your burden will be only to get one victim to execute that file on his computer, the remaining job of getting other victims will be done on its own.
Thanks...
Friday, January 7, 2011
A UDP Flood Program/Script....
This script/program is created by Code Mobile. Iam not taking thecredit of the original author. :)
/*
My advice is to disable the echo service completely. It is often used by hackers to hang a computer.
Try sending a packet from port 7 your ip to port 7 your ip.
The system will bounce the packet back and forth slowing the system
drastically.
A Hacker Program I have seen used to do this is called codeudp.c
*/
/************************************************************************/
/* codeudp.c version 0.01 by CodeMobile - codemobile@yahoo.com */
/* Sends a single udp datagram with the source/destination address/port */
/* set to whatever you want. Unfortunately Linux 1.2 and SunOS 4.1 */
/* don't seem to have the IP_HDRINCL option, so the source address will */
/* be set to the real address. It does however work ok on SunOS 5.4. */
/* Should compile fine with just an ANSI compiler (such as gcc) under */
/* Linux and SunOS 4.1, but with SunOS 5.4 you have to specify extra */
/* libraries on the command line: */
/* /usr/ucb/cc -o codeudp codeudp001.c -lsocket -lnsl */
/* I'll state the obvious - this needs to be run as root! Do not use */
/* this program unless you know what you are doing, as it is possible */
/* that you could confuse parts of your network / internet. */
/* (c) 2011 Code Mobile - I accept no responsiblity for anything this does. */
/************************************************************************/
/* I used the source of traceroute as an example while writing this. */
/* Many thanks to Anu (pctipsbyanu@yahoo.com) and Inspired */
/* for pointing me in the right direction. */
/************************************************************************/
#include<sys/types.h>
#include<sys/socket.h>
#include<netinet/in_systm.h>
#include<netinet/in.h>
#include<netinet/ip.h>
#include<netinet/udp.h>
#include<errno.h>
#include<string.h>
#include<stdlib.h>
#include<netdb.h>
#include<arpa/inet.h>
#include<stdio.h>
struct sockaddr sa;
....To take advantage you must DOWNLOAD FULL CODE.
Compile and execute as root
All credit goes to Code Mobile.
For any questions or queries you must be directly contact to original author.
Thanks....
Friday, December 31, 2010
Hacking tools : Type of hacking? What is DDOS? Tools for DDOS?
There are several different kinds of dos attacks asdiscussed below:-
1) Ping Of Death :-The ping of death attack sends oversized ICMP datagrams (encapsulatedin IP packets) to the victim.The Ping command makes use of the ICMPecho request and echo reply messages and it’s commonly used todetermine whether the remote host is alive. In a ping of death attack,however, ping causes the remote system to hang, reboot or crash. To doso the attacker uses, the ping command in conjuction with -l argument(used to specify the size of the packet sent) to ping the target systemthat exceeds the maximum bytes allowed by TCP/IP (65,536).
example:- c:/ping -l 65540 hostname
Fortunately, nearly all operating systems these days are not vulnerable to the ping of death attack.
2) Teardrop Attack :- Whenever data is sent over the internet, it is broken into fragments atthe source system and reassembled at the destination system.
Forexample you need to send 3,000 bytes of data from one system toanother. Rather than sending the entire chunk in asingle packet, thedata is broken down into smaller packets as given below:
* packet 1 will carry bytes 1-1000.
* packet 2 will carry bytes 1001-2000.
* packet 3 will carry bytes 2001-3000.
In teardrop attack, however, the data packets sent to the target computer contais bytes that overlaps with each other.
(bytes 1-1500) (bytes 1001-2000) (bytes 1500-2500)
When the target system receives such a series of packets, it can notreassemble the data and therefore will crash, hang, or reboot.
Old Linux systems, Windows NT/95 are vulnerable.
3) SYN – Flood Attack :-In SYN flooding attack, several SYN packets are sent to the targethost, all with an invalid source IP address. When the target systemreceives these SYN packets, it tries to respond to each one with aSYN/ACK packet but as all the source IP addresses are invalid thetarget system goes into wait state for ACK message to receive fromsource. Eventually, due to large number of connection requests, thetarget systems’ memory is consumed. In order to actually affect thetarget system, a large number of SYN packets with invalid IP addressesmust be sent.
4) Land Attack :-A land attack is similar to SYN attack, the only difference being thatinstead of including an invalid IP address, the SYN packet include theIP address of the target sysetm itself. As a result an infinite loop iscreated within the target system, which ultimately hangs andcrashes.Windows NT before Service Pack 4 are vulnerable to this attack.
5) Smurf Attack :-There are 3 players in the smurf attack–the attacker,the intermediary(which can also be a victim) and the victim. In most scenarios theattacker spoofs the IP source address as the IP of the intended victimto the intermediary network broadcast address. Every host on theintermediary network replies, flooding the victim and the intermediarynetwork with network traffic.
Result:-Performance may be degraded such that the victim, the victim andintermediary networks become congested and unusable, i.e. clogging thenetwork and preventing legitimate users from obtaining network services.
6) UDP – Flood Attack :-Two UDP services: echo (which echos back any character received) andchargen (which generates character) were used in the past for networktesting and are enabled by default on most systems. These services canbe used to launch a DOS by connecting the chargen to echo ports on thesame or another machine and generating large amounts of network traffic.
7) Distributed Denial Of Service (DDoS) :- InDistributed DoS attack, there are 100 or more different attackers(systems) attacking the single system. Due to higher number ofattackers DDoS attack is more effective and dangerous than regular DoSattack. The attackers have control over master zombies, which, in turn,have control over slave zombies, as shown in figure.
No system connected to the internet is safe from DDoS attacks. Allplatforms, including Unix and Windows NT, are vulnerable to suchattacks. Even Mac OS machines have been used to conduct DDoS attacks.
The most popular DDoS tools are:-
a) Trin00 (WinTrinoo)b) Tribe Flood Network (TFN) (TFN2k)
c) Shaft
d) Stacheldraht
e) MStream
IF YOU NEED ANY TOOLS FROM THE LIST THN LET ME KNOW VIA COMMENT OR ON pctipsbyanu@yahoo.comOR pctipsbyanu@gmail.com
Distributed Denial Of Service with Reflectors (DRDoS) :-In DRDoS attacks the army of the attacker consists of master zombies,slave zombies, and reflectors. The difference in this type of attack isthat slave zombies are led by master zombies to send a stream ofpackets with the victim’s IP address as the source IP address to otheruninfected machines (known as reflectors), exhorting these machines toconnect with the victim. Then the reflectors send the victim a greatervolume of traffic, as a reply to its exhortation for the opening of anew connection, because they believe that the victim was the host thatasked for it. Therefore, in DRDoS attacks, the attack is mounted bynoncompromised machines, which mount the attack without being aware ofthe action.
A DRDoS attack creates a greatervolume of traffic because of its more distributed nature, as shown inthe figure below.
Keep enjoy*****.....
Saturday, June 5, 2010
Best Windows Hacking Tools
This is the Collection of Best Windows Hacking Tools:
1. Cain & Abel – Cain & Abel is a password recovery tool for the Microsoft Windows Operating System. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols.
2. SuperScan – SuperScan is a powerful TCP port scanner, pinger, resolver. SuperScan 4 (Current Version) is a completely-rewritten update of the highly popular Windows port scanning tool, SuperScan.
3. GFI LANguard Network Security Scanner – GFI LANguard N.S.S. is a network vulnerability management solution that scans your network and performs over 15,000 vulnerability assessments. It identifies all possible security threats and provides you with tools to patch and secure your network. GFI LANguard N.S.S. was voted Favorite Commercial Security Tool by NMAP users for 2 years running and has been sold over 200,000 times!
4. Retina – Retina Network Security Scanner, recognised as the industry standard for vulnerability assessment, identifies known security vulnerabilities and assists in prioritising threats for remediation. Featuring fast, accurate, and non-intrusive scanning, users are able to secure their networks against even the most recent of discovered vulnerabilities.
5. SamSpade – SamSpade provides a consistent GUI and implementation for many handy network query tasks. It was designed with tracking down spammers in mind, but can be useful for many other network exploration, administration, and security tasks. It includes tools such as ping, nslookup, whois, dig, traceroute, finger, raw HTTP web browser, DNS zone transfer, SMTP relay check, website search, and more.
6. N-Stealth – N-Stealth is a commercial web server security scanner. It is generally updated more frequently than free web scanners such as whisker and nikto, but you have to pay for the privilege.
7. Solarwinds – Solarwinds contains many network monitoring, discovery and attack tools. The advanced security tools not only test internet security with the SNMP Brute Force Attack and Dictionary Attack utilities but also validate the security on Cisco Routers with the Router Security Check. The Remote TCP Reset remotely display all active sessions on a device and the Password Decryption can decrypt Type 7 Cisco Passwords. The Port Scanner allows testing for open TCP ports across IP Address and port ranges or selection of specific machines and ports.
8. Achilles – The first publicly released general-purpose web application security assessment tool. Achilles acts as a HTTP/HTTPS proxy that allows a user to intercept, log, and modify web traffic on the fly. Due to a cyber squatter, Achilles is no longer online at its original home of www.Digizen-Security.com…OOPS!
9. CookieDigger - CookieDigger helps identify weak cookie generation and insecure implementations of session management by web applications. The tool works by collecting and analyzing cookies issued by a web application for multiple users. The tool reports on the predictability and entropy of the cookie and whether critical information, such as user name and password, are included in the cookie values.
10. Netcat (The Network SwissArmy Knife) – Netcat was originally a Unix utility which reads and writes data across network connections, using TCP or UDP protocol. It is designed to be a reliable “back-end” tool that can be used directly or easily driven by other programs and scripts. At the same time, it is a feature-rich network debugging and exploration tool, since it can create almost any kind of connection you would need and has several interesting built-in capabilities.
Top 10 Linux Hacking Tool
This is a Cool Collection of Top Ten Linux Hacking Tools.
1. nmap – Nmap (“Network Mapper”) is a free open source utility for network exploration or security auditing. It was designed to rapidly scan large networks, although it works fine against single hosts. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. Nmap runs on most types of computers and both console and graphical versions are available.
2. Nikto – Nikto is an Open Source (GPL) web server scanner which performs comprehensive tests against web servers for multiple items, including over 3200 potentially dangerous files/CGIs, versions on over 625 servers, and version specific problems on over 230 servers. Scan items and plugins are frequently updated and can be automatically updated (if desired).
3. THC-Amap – Amap is a next-generation tool for assistingnetwork penetration testing. It performs fast and reliable application protocol detection, independant on the TCP/UDP port they are being bound to.
4. Ethereal – Ethereal is used by network professionals around the world for troubleshooting, analysis, software and protocol development, and education. It has all of the standard features you would expect in a protocol analyzer, and several features not seen in any other product.
5. THC-Hydra – Number one of the biggest security holes are passwords, as every password security study shows. Hydra is a parallized login cracker which supports numerous protocols to attack. New modules are easy to add, beside that, it is flexible and very fast.
6. Metasploit Framework – The Metasploit Framework is an advanced open-source platform for developing, testing, and using exploit code. This project initially started off as a portable network game and has evolved into a powerful tool for penetration testing, exploit development, and vulnerability research.
7. John the Ripper – John the Ripper is a fast password cracker, currently available for many flavors of Unix (11 are officially supported, not counting different architectures), DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix flavors, supported out of the box are Kerberos AFS and Windows NT/2000/XP/2003 LM hashes, plus several more with contributed patches.
8. Nessus – Nessus is the world’s most popular vulnerability scanner used in over 75,000 organisations world-wide. Many of the world’s largest organisations are realising significant cost savings by using Nessus to audit business-critical enterprise devices and applications.
9. IRPAS – Internetwork Routing Protocol Attack Suite – Routing protocols are by definition protocols, which are used by routers to communicate with each other about ways to deliver routed protocols, such as IP. While many improvements have been done to the host security since the early days of the Internet, the core of this network still uses unauthenticated services for critical communication.
10. Rainbowcrack – RainbowCrack is a general propose implementation of Philippe Oechslin’s faster time-memory trade-off technique. In short, the RainbowCrack tool is a hash cracker. A traditional brute force cracker try all possible plaintexts one by one in cracking time. It is time consuming to break complex password in this way. The idea of time-memory trade-off is to do all cracking time computation in advance and store the result in files so called “rainbow table”.
Subscribe to:
Comments (Atom)
