Articles by "HACK"

Hiển thị các bài đăng có nhãn HACK. Hiển thị tất cả bài đăng


In this tutorial "How to Randomly Hack a Home Routers", we are going to show you how to use port scanner to identify home routers (and even office routers :p) and after that we will try to log in to those routers.



In the world most of users doesn't change there router's default password because most of them only know how to use without know how to configure the router itself. So that's the point. We can use that vulnerability to hack the routers.
Requirements:
  • Port Scanner (I use zenmap )
  • Web Browser (I use Google Chrome)
  • Internet Connection
First of all I want to tell you why I use Zenmap because Nmap is the best friend of hackers and Zenmap is the graphical user interface of nmap.

Step by Step How to Randomly Hack a Home Routers

1. We should select an IP range. I have selected IP range that includes my public IP address.
XXX.XXX.30.0-XXX.XXX.30.255

2. Now let's scan for home routers.
When you finished your scan, You can find IP addresses which has open ports such as http port(80), ftp port(21) and telnet port(23).
I have found many IP addesses with port 80 is opened.

How to Randomly Hack a Home Routers
So I stopped my scan.

3. Now you can access these addesses using your web browser because http port is opened and we need to find whether the web page is router log in page.


4. If you see the alert error messages, it says TD-8817. So we can Google for it
search "TD-8817 default username and password"

5. Now let's try to access these IP addresses using default logins we just got on step 4.
Default username and passwords are not same for every routers.
With username : admin and password : admin, we can log in to the router administration page

Attacker can do several harmful things when they can access router page, such as:
  • Redirecting DNS to malicious websites
  • Phishing Attacks
  • etc

Conclusion:
Because most of users doesn't change their router passwords. It's a very bad habit because hackers can access your router form anyplace through internet when you are online and It is very harmful to you. So you must change your home router's password. Keep it on you mind.

Hope you found it useful 🙂

Hello, in this tutorial you will learn how to Create Password Stealer using VB Visual Studio.net that send the passwords of the victim to your email.

The recovery files + code.txt (which include the code written bellow) + the visual basic project.
DOWNLOAD HERE
REQUIREMENTS:
1) A mail.com account (their stmp is open and available for 3rd party apps)
2) Basic knowledge in vb.
3) Visual Studio 2008 or more (there is a free version however I will be using the ultimate version of 2013)
4) Nirsoft password recovery bins
5) A victim.

OVERVIEW:
We are going to create an exe file when opened it extracts 4 application which recover saved password on famous web browsers (chrome, Firefox ..Etc.) then launches them in command line mode , they will export the saved password into a text file which will be read by our app then sent to us by email.
We are using vb.net because it is a very easy programming language and it is common in malicious software.

Step by Step How to Create Password Stealer using VB Visual Studio.net:

1)    Open visual studio and create a new project like this
2)    You will get something like this , it is called the designer here you choose how your app looks like, but for our app we want it to be silent and not visible.

3)    Right click on this form and click “View Code <>”
You will get something like this, this is where we put out code.

This is called an event handler, whatever code you put between this and “End Sub” will be executed when the program first opens (before it appears).

4)    Now we need to add the nirsoft password recovery programs to our resources so on your right you need to click on the solution explorer

Then you need to click on My Project, this should appear

Click on resources -> add resource -> add existing file..
A dialog will appear choose the 4 files you downloaded (1.exe , 2.exe , 3.exe  ,3.exe)

5)    Now go back to the coding section and write this code (explained in the green text)

6)    Now we need to click Ctrl – Shift – B  to build our exe (it should show where it saved the exe like in the picture)

CONCLUSION:
You should not open any random exe files unless you are sure it is safe , a tip would be scanning it on virus total or similar sites , what I personally do is open said programs in Sandboxi

Notes: if you are having problems building the project turn off your anti-virus.

Level : Medium, Advanced
Hacking Facebook Using Man in the Middle Attack


In this tutorial Hacking Facebook Using Man in the Middle Attack I will demonstrate how to hacking Facebook using MITM(Man in the Middle). This attack usually happen inside a Local Area Network(LAN) in office, internet cafe, apartment, etc.
Below is the topology or infrastructure how MITM work, and how it can be happen to do hacking a Facebook account.

In the picture above, the attacker act as the third person attacker will manipulate the switch routing table so the victim will think that attacker is a Web server and vice versa, because the attacker has changed the routing table.
For this tutorial we need to prepare the tools to do Proof of Concept about this tutorial. Below you can download it.
1. XAMPP – APACHE+PHP+MySQL(We use XAMPP for our fake facebook web server)
2. Cain & Abel (We use it for Man in the Middle Attack)
3. Facebook Offline Page (I have nulled the code, so this script will not contacting Facebook when victim accessed fake Facebook page — only use this for learning)
Download Facebook Offline Page (mediafire.com):
Download
Update : replace your index.php and login.php using following files Download Here.

Step by step Hacking Facebook Using Man in the Middle Attack:

Attacker IP Address : 192.168.160.148

Victim IP Address : 192.168.160.82
Fake Web Server : 192.168.160.148
I assume you’re in a Local Area Network now.
1. Install the XAMPP and run the APACHE and MySQL service
Hacking Facebook Using Man in the Middle Attack

2. Extract the fb.rar and copy the content to C:\xampp\htdocs
Hacking Facebook Using Man in the Middle Attack
3. Check the fake web server by open it in a web browser and type http://localhost/
Hacking Facebook Using Man in the Middle Attack
4. Install Cain & Abel and do the APR(ARP Poisoning Routing), just see the step by step how to below
Hacking Facebook Using Man in the Middle Attack

Click the start/stop sniffer

Hacking Facebook Using Man in the Middle Attack

Choose your interface for sniffing and click OK. When it’s finish, click again the Start/Stop Sniffer to activate the sniffing interface.
Go to the Sniffer tab and then click the + (plus sign)

Hacking Facebook Using Man in the Middle Attack

Select "All hosts in my subnet" and Click OK.
Hacking Facebook Using Man in the Middle Attack

ou will see the other people in your network, but my target is 192.168.160.82 (MySelf…LoL :p)
Hacking Facebook Using Man in the Middle Attack

After we got all of the information, click at the bottom of application the APR tab.
Hacking Facebook Using Man in the Middle Attack
Click the + button, and follow the instruction below.
Hacking Facebook Using Man in the Middle Attack

When you finish, now the next step is preparing to redirect the facebook.com page to the fake web server.
Click "APR DNS" and click + to add the new redirecting rule.
Hacking Facebook Using Man in the Middle Attack
Hacking Facebook Using Man in the Middle Attack
When everything is finish, just click OK. Then the next step is to activate the APR by clicking the Start/Stop APRbutton.
Hacking Facebook Using Man in the Middle Attack

5. Now Hacking Facebook using MITM has been activated. This is how it looks like when victim opened http://www.facebook.com
Hacking Facebook Using Man in the Middle Attack
6. But if you ping the domain name, you can reveal that it’s fake, because the address is IP of the attacker
Hacking Facebook Using Man in the Middle Attack

Hope you found it useful 🙂



Computer security is improving and getting tough day by days, but most of technology leave the users behind about the importance of awareness of the user itself.

According to the website bettercap.org this tool is a powerful, flexible and portable tool created to perform various types of MITM attacks against a network, manipulate HTTPHTTPSand TCP traffic in realtime, sniff for credentials and much more.

Requirements:

1. Ruby interpreter ( >= 1.9 )
2. RubyGems environment installed.
3. Bettercap
4. Kali Linux 2016.2

3 Steps GMail MITM Hacking Using Bettercap:

1. TO install Bettercap in Kali Linux it’s more easy, just run apt-get update from terminal, and then run apt-get install bettercap.

2. To check the available options in Bettercap, we can run bettercap --help.

3. In this tutorial we’ve set the target is IP 192.168.1.111; but if you want to target the whole network, you can set the -T options without address. We’ve run this command
bettercap     -   T 192.168.1.111        --      proxy -     P POST


Conclusion how to avoid 3 Steps GMail MITM Hacking Using Bettercap:

1. Look the URL/address bar of your browser carefully. The log in page usually encrypted and started with https://
2. Type the destination URL  completely e.g: https://mail.google.com in your browser address bar.

Share if you found this post useful. 🙂

Some people who not too understand about computer networking they will get confused with this question "How to Know My Public IP Address".



 Actually this process was simple, but maybe some of you not get the clear information what is the real Public IP Address. Some of my friend (they have a little background about IT) when I ask "How to Know your Public IP Address"? they will answer "Ah I have an internet connection", or "I have a personal router and I can configure it by myself", or "I think yes I have a public IP Address" 😛
 When you have an internet connection, or you have personal router, doesn't guarantee that you also have a public IP address, because most of internet provider they will share and divide the bandwidth into some pieces (the internet provider will do the calculations, you can ask them about this 🙂 ). Usually you need to spent some money to get/rent this public IP address and the price is higher than usual/normal.

 Step by Step How to Know My Public IP Address:

Before start, if you have router, switch or other network mediator unplug it first. Make sure your computer connected directly to the internet source.

1.Public IP addres:  https://whatismyipaddress.com or   https://www.ip2location.com/
2. Open command prompt in Windows or Terminal in Linux and type ipconfig.
or you can use this code (in Windows):
ipconfig
pause();
copy and paste the code above into your notepad and save as ipconfig.bat.
Remember: when save as, make sure when notepad ask "Save as Type" you choose "All Files" 3. This is your computer current IP Address:
4. If your computer current IP address and the box in the 1st step have the same result, then you have a public IP address. If not, then you didn't have public IP address.
 Hope it useful 🙂

Author Name

Biểu mẫu liên hệ

Tên

Email *

Thông báo *

Được tạo bởi Blogger.