DzireZOne: Hacking

Showing posts with label Hacking. Show all posts

Friday, March 28, 2014

How To Install Kali Linux In Virtual Machine Step By Step

Installing kali linux( backtrack 6 ) is not much harder as it was in down 1,2,3 versions of backtrack but anyway if you are stuck some where this step by step guide to install kali linux under virtual machine . why virtual machine ? because it gives you a safe environment to play and explore without damaging your physical hard drive , or any data loss what you should know before continue :

basic knowledge of virtual machine’s
basic knowledge of networking concepts ( TCP IP )
basic linux or any *nix ( if you ever worked on Linux then you are good to go )
time and patience

what is required :

Download Kali Linux ISO
Virtual machine ( i am using VMware workstation in tutorial , if you have Virtualbox or vmplayer then its good installation process is pretty same in every virtual platform )

Installation Process :

1 : Click on create new virtual machine

Create new virtual machine

2 : Choose ISO

Choose ISO

3 : Select Guest Operating System

Select guest operating system

4 : Set name and location

5 : Set disk space ( 20 GB is good enough, minimum 12 GB to work smoother )

6 : Review the hardware configuration and start the virtual machine

Select Graphical Install

7 : Select Graphical Install go through normal language and timezone host-name selection etc
Set your “root” password and don’t forget it

Set root password and don’t forget it

8 : Disk Partition ( if you are installing freshly without any dual boot then simply use guided and use full Virtual disk)

Use full virtual disk

9 : Select hard-drive and select all-in-one ( for new users ) or if you don’t know just choose all in one

10 : Click on finish partitioning and write changes to disk , choose yes to write

11 : Wait until installer finish copying files setting system

12 : Set network mirror and set boot-loader ( Very important )

13 : After installation restart and login with username ” root ” and password (What you set at step 7)

Kali linux

Sunday, March 23, 2014

HACKING LESSONS FOR BEGINNNERS PART 3

Ok now that you have my attention Please read this guide that will burst your bubble, beginner hackers. I am sorry for that.

You CANNOT hack emails or websites with just one or two clicks with some email hacking apps. You need to have proper information about the person that you are hacking. If you see sites that claim that they can hack email accounts within minutes and charge hundreds of dollars for it, just laugh at them and move on. Do not waste money on them as they will be just scamming you.

There are two ways to Hack Accounts of a Website:

Client Side Hacking:
This method can be done depending what you choose. Client side hacking is basically hacking the person's pc and extract information. Antiviruses will detect the apis, assemblies, etc and prevent you from infecting them. In this case you need:-
1) Keylogging : This basically taps all the keystrokes that users type. When user types password you get it. The victim requires to execute the keylogger "server" file in order to be infected.

2) Password Stealing : Here you steal password saved on user's pc. Browsers often save passwords to provide quick login to the user, but this can be harmful sometimes. Here same as keyloggers you need to execute a file on client pc. You can use combination of keylogger and password stealers, such as my Emissary Keylogger/Stealer.

3) Cookie Stealing : Here you are stealing cookies of the user. Cookies can be used to auto login as they hold information about the account.

4) Remote Administration Tools : These tools are very dangerous and give you full control of a computer. You can view webcams, desktops live, transfer and download files.

5) Social Engineering : Social Engineering is nothing but fooling someone to download your malware or extracting sensitive information from them.
One of the methods is this : Hacking Accounts through SE.

6) Phishing Attacks : Phishing is creating fake login pages similar to that of a website's login page and then fooling the person to enter their username and password into the login box. The triggered php scripts shall send the entered passwords to your log file.

7) Zombies/Bots : This is like keylogging and pass stealing if victim executes your malware he she can be infected with a bot. A bot will connect them to your irc channel or host server and make them your "Zombie". You can do whatever you want with them.

Server Side Hacking:
1) Exploiting : Exploiting means finding a vulnerability and using it to your advantage. There are various publically disclosed vulnerabilities and exploits that you can simply search on google and HC. There are ways to exploit a server the most common ones are

1) XSS Cross Site Scripting,

2) RFI, LFI

3) Uploading Shells

4) SQL Injections

5) CSRF

6) Gaining Root Access to websites hosted on the same server and then intruding another site on the server.

7) Using Scripts to gain information known as Exploits.

These methods are very vast and cannot be explained in a few lines so I am not explaining them in this guide.

2) Bruteforce Attack : Bruteforcing is using a bruteforcer software to try combinations of words, numbers and symbols to fetch the login of your victim. But this rarely works and you need to have a powerful computer.

3) Reverting Accounts : Here we are fooling the website servers that we are the authorized user and we are the holder of an account. One of this vulnerability exists in Hotmail and existed in Facebook. Users just supplied some information about the clients such as last accessed ip address, contacts on contact list, date of birth, location, etc. With a bit of SE its not that hard to extract such information from the client.

That covers most of the basics of Email/Website Account "Hacking". Hope you don't buy into any of the bullshit after reading this guide.
Comment For Queries...
Keep Visiting For More

Thursday, March 20, 2014

HACKING LESSONS FOR BEGINNNERS PART 2

Hiii Guyzz Welcome Here , If U Wana Read My Old Tut Click Part -1 Tut

==========================================================

Here Is Part - 2

OK there are a few tutorials, but what I want to do here is try to provide a complete basic overview to refer you to all the main aspects of hacking, and not random crap, stuff that will actually teach you in a structure. I'll presume you have little to no experience and try to point you in the right direction - feel free to ask questions and give feedback.
more info about hacking here

Obviously you need a good understanding in computing, different operating systems, different server types, networking and so on. Something you really want to also get to grips with is IP/TCP/UDP so I'll refer you to a link here

Reconnaissance/Information gathering:
The first, and often most overlooked part of hacking is reconnaissance/information gathering. Lazy or noobs will often do little to non of this at all which often leads to getting caught, a failed hack, creating more hard work for themselves or generally missed opportunities. This is often described as foot printing, blue printing and just information gathering. So there are many things you want to look for. For instance information about the company, employees, systems, partners/associates and more and it's useful for many reasons. Mainly finding your best approach/weaknesses and something we'll come onto later, social engineering.

A good tutorial is here

Scanning
The next section is scanning, that is, scanning the port/services on your target either across the WAN or LAN, this helps identify the points of entry, map out the network and more. This i when you start to realize why the reconnaissance helps and the IP/TCP/UDP knowledge comes into play. For instance, if you scan the ports of a target and they have TCP ports 21 (FTP), 23 (TELNET), 3389 (RDP) open. That is 3 potential access points... for more information on scanning, click here

Gaining/maintaining access:
Once you've done your reconnaissance, foot printed, scanned the system and mapped out the network/determined the services you now want to find a way to access the systems. This is done in many ways, and differentiates dependent on the network, servers, weaknesses and so on. For example, you may want to hack into a web server but while that could be secure you find it's integrated with a vulnerable back end database and access it that way. Once you're in a system(s) you want to stay there by creating back doors and so on, the idea is, you've made all this effort so ensure you can access the system(s) in the future. More info here and here

Covering tracks
Obviously doing everything you've done, the last thing you want is to get caught. You can take steps when entering systems such as proxies, spoofed IP's, public systems and so on. But after you've gained access, often a part of maintaining access is covering tracks and hiding the fact you was ever their, from editing/deleting logs/registries and so on.

Programming
Contrary to belief at first you do not need to be able to program, it helps don't get me wrong but there are so many tools out their for you, at the beginning stages it isn't necessary. The main reasons for a hacker programming is to write their own tools for exploits/viruses etc and tools. This is when really for when you become more advanced and the tools/resources available to you just don't cut the mustard anymore. Personally (despite me coding in different languages) I would recommend C++ despite whether you're new to programming. It's generally the most overall useful and robust language and great for hacking. But try not to concentrate on this at the minute this is way down the line.

Social Engineering
In my experienced, this is one of, if not the most important aspect/skill in hacking. In a nut shell it is a way for you to gain information on people and/or organizations which you wouldn't normally have access to for your own sinister reasons. I could tell you stories as long as Santa's list regarding social engineering and trust me, please, it's the most powerful tool you'll ever have. More info here

Further reading
A nice overview course (while a little outdated and pretentious) have a look at this torrent it's the videos etc of a C|EH course

NOTE:
This is in NO WAY a complete tutorial, it is simply a guide to try and point you in the right directions to progressively aid you in learning the fundamentals of hacking! so don't give me any shit or I will pimp slap you.

Hope you enjoyed people!& Also Like It Please Comment Below....

Saturday, March 15, 2014

Hacking Lessons For beginnners Part 1

This is Class-1 for Hacking introduction

Usually a beginner have two questions when they going to learn hacking...

Q .I want to be a hacker, but I don't know where to start Sad ?
Ans.Well, you're in luck, because the best place to start off is right here!

Q.What is Hacking?
Hacking is a process to bypass the security mechanisms of an information system or network.
Or
In common usage, hacker is a generic term for a computer criminal, often with a specific specialty in computer intrusion. While other definitions peculiar to the computer enthusiast community exist, they are rarely used in mainstream context. ..
Or
Hacking is an unauthorized use of computer and network resources. (The term "hacker" originally meant a very gifted programmer. In recent years though, with easier access to multiple systems,it now has negative implications.)
Hacking started way too far when the microsoft DOS was designed. Hacking is basically finding out the loop holes and trying leak some information out of it, which may lead you to get some critical information like passwords, credit card details. Sometimes hacking is done just because of the personal offenses.

Defining Hacker..
Hacker is a word that has two meanings:
Traditionally, a hacker is someone who likes to tinker with software or electronic systems.

Hackers enjoy exploring and learning how computer systems operate
The good-guy (White hat) hackers don’t like being in the same category as the bad-guy (Black hat) hackers.(These terms come from Western movies where the good guys wore white cowboy hats and the bad guys wore black cowboy hats.)
Whatever the case, most people give hacker a negative connotation. Many malicious hackers claim that they don’t cause damage but instead
are altruistically helping others. Yeah, right. Many malicious hackers are electronic thieves.

Top 5 Most Famous Hackers of All Time:

1. Jonathan James: James gained notoriety when he became the first juvenile to be sent to prison for hacking. He was sentenced at the age of 16 . In an anonymous PBS interview, he professes, "I was just looking around, playing around. What was fun for me was a challenge to see what I could pull off." James also cracked into NASA computers,stealing software worth approximately $1.7 million.

2. Adrian Lamo: Lamo's claim to fame is his break-ins at major organizations like The New York Times and Microsoft. Dubbed the "homeless hacker," he used Internet connections at Kinko's, coffee shops and libraries to make his intrusions. In a profile article, "He Hacks by Day, Squats by Night," Lamo reflects, "I have a laptop in Pittsburgh, a change of clothes in D.C. It kind of redefines the term multi-jurisdictional."

3. Kevin Mitnick: A self-proclaimed "hacker poster boy," Mitnick went through a highly publicized pursuit by authorities. His mischief was hyped by the media but his actual offenses may be less notable than his notoriety suggests. The Department of Justice describes him as "the most wanted computer criminal in United States history." His exploits were detailed in two movies: Freedom Downtime and Takedown.

4. Kevin Poulsen: Also known as Dark Dante, he gained recognition for his hack of LA radio's KIIS-FM phone lines, which earned him a brand new Porsche, among other items.His hacking specialty, however, revolved around s.

5. Robert Tappan Morris: Morris, son of former National Security Agency scientist Robert Morris, is known as the creator of the Morris Worm, the first computer worm to be unleashed on the Internet. As a result of this crime, he was the first person prosecuted under the 1986 Computer Fraud and Abuse Act..

<------The decision------>

Firstly, you are going to need to know the difference between Blackhats and Whitehats.

White-hat (ethical): Someone who uses his/her knowledge for good/to help others.

White hat hacking examples:

Penetration tester - Using your skills to do penetration tests. (usually paid work)

Helping others - Community/forum based usually.

CEH - Certified ethical hacker.

And more!

Black-hat (un-ethical): Someone who uses his/her knowledge for personal gain/malicious reasons.

Blackhat hacking examples:

Keylogging - Keystroke logging, basically logs what the person that you have infected is doing. As to what they are typing and basically what they do on their computer.

DoS (short for Denial of Service attack) - a type of attack designed to disable networked systems usually by sending a huge amount of external requests thus flooding the system or making it work slowly.

DDoS (short for Distributed Denial of Service attack) - Similar to DOS in almost every way except with DOS the attack comes from one source, but with DDOS the attack comes from multiple sources. To achieve this you will need a botnet/hostbooter(or other methods) which I will not go into deep discussion about in this tutorial.

RAT - (Short for Remote Administrative Tool) or sometimes referred to as (Remote Administration Trojans) - These are somewhat similar to keyloggers, but they are also a lot different. RAT'S basically will give you control over the other person's computer (the person you have infected).

Social Engineering - Basically a way to get someone to give you the information you want. You could attain this by posing to be someone you are not and using manipulative skills to get information from a person you know has the information.

So choose your self who you want to be an helper or a criminal behind the bars...

Hackers Three Stages:
1.Script kiddies - these are beginners for hacking,these are the people who makes people looks bad.script kiddies have doesn't have any hacking skill.they use hacking tools developed by others without any knowledge what the going behind the scenes.

2.Intermediate hackers - these people have good knowledge about computer hardware,networks and programming knowledge to understand what can a script do.?,but like script kiddies they also use pre-developed hacking tools

3.Elite hackers - These are the skilled hackers.they are the one who develop hacking tools and exploits they can break into system and hide there tracks.
You should eventually got to this level .. ;)

Q . Did i really want to learn Programming language for this ..?
Ans. Yup you should want to go through this because you cant what going behind the scripts and hacking tools so you should want to learn programming language..
I recommend to you first start with HTML because its a basic language if you masters in HTML then you can understand how webpages works
After that you can go for C language because its most popular language in world also there are many powerful hacking tools or exploits you can make from C..

Resources For learning HTML urself -
1.HTMLDOG
2.W3SCHOOLS
3.Google Code
4.Mozilla developer network

Languages for hacking:-
1.C
2.C++
3.Python
4.Java

Resources For learning C language urself -
1.Learn code the hard way
2.Notes on programming in C
also use books like - The C programmming Language,ANSI C, etc

I have various resources for programming languges and other stuff if you want reply below or PM me on Facebook...

Recent Post

How To Install Kali Linux In Virtual Machine Step By Step

HACKING LESSONS FOR BEGINNNERS PART 3

There are two ways to Hack Accounts of a Website:

HACKING LESSONS FOR BEGINNNERS PART 2

Hacking Lessons For beginnners Part 1

Pages