KING OF HACKERS

Secure Sockets Layer (SSL) - An Introduction

2011-07-26T08:00:00.000+08:00

In the OSI model a reference model for effective communication we find a layer named transport layer. Just like a physical layer (where viruses attack normally) transport layer also need some sort of security because transport layer is responsible for transmission of data.

So what actually makes transport layer to make the transmission secure and to protect the data from any intruder.

Have you ever noticed that when you visit some website it starts with http:// and whenever you visit some sort of money transfer and other important websites you find https:// point is clear https means a secure communication it means that your data that transfer from this connection secure by using some cryptography techniques.

SSL or secure sockets layer are cryptographic protocols that provide secure communication over the Internet. So what actually a cryptography is " Cryptography is a science of secrete communication".

SSL uses two keys to encrypt data − a public key known to everyone and a private or secret key known only to the recipient of the message.

HTTP VS HTTPS

The above picture shows that when ALICE sends the confidential information over insecure channel that there is a chance to sniff this confidential information (it might be a credit card information or may be your password etc). So the point is that an attacker can easily sniff this data and can easily read, understand and use for illegal activities because the data transfer in plain text regardless of any encryption it is simply a HTTP connection.

Now consider the second picture when an user send some sort of information over secure channel means if someone using HTTPS than the data first encrypt by using cryptography technique than it sends over channel, so in this case if someone sniff this data than he/she not able to understand it.

The above broad picture has clearly shows that HTTPS is secure, but how HTTPS is secure? Because it uses secure sockets layer (SSL). A website can implement HTTPS by purchasing an SSL Certificate.

Where there's a will there's a way. By following this amazing quote some researcher has discovered some ways to crack/hack SSL certificate too. To hack SSL certificate we will post an article later on.

Hacking Windows Using Social Engineering Toolkit and Backtrack 5

2011-07-25T19:00:00.000+08:00

What is Social Engineering Toolkit ?
The Social-Engineer Toolkit (SET) is specifically designed to perform advanced attacks against the human element. SET was designed to be released with the http://www.social-engineer.org launch and has quickly became a standard tool in a penetration testers arsenal. SET was written by David Kennedy (ReL1K) and with a lot of help from the community it has incorporated attacks never before seen in an exploitation toolset. The attacks built into the toolkit are designed to be targeted and focused attacks against a person or organization used during a penetration test.

Actually this hacking method will works perfectly with DNS spoofing or Man in the Middle Attack method. Here in this tutorial I’m only write how-to and step-by-step to perform the basic attack, but for the rest you can modified it with your own imagination.

In this tutorial we will see how this attack methods can owned your computer in just a few steps…
The success possibility of this attack depend on victim browser. If the victim never update their browser, the possibility can be 85% or more.

Requirement :
1. Backtrack 5 or Backtrack 4

Step By Step :
1. Change your work directory into /pentest/exploits/set/

2. Open Social Engineering Toolkit (SET) ./set and then choose "Website Attack Vectors" because we will attack victim via internet browser. Also in this attack we will attack via website generated by Social Engineering Toolkit to open by victim, so choose "Website Attack Vectors" for this options.

3. Usually when user open a website, sometimes they don't think that they are opening suspicious website that including malicious script to harm their computer. In this option we will choose "The Metasploit Browser Exploit Method" because we will attack via victim browser.

4. The next step just choose "Web Templates", because we will use the most famous website around the world that already provided by this Social Engineering Toolkit tools.

5. There are 4 website templates Ready To Use for this attack methods, such as GMail, Google, Facebook, and Twitter. In this tutorial I will use Google, but if you think Facebook or Twitter more better because it's the most accessed website, just change into what do you want.

6. For the next step…because we didn't know what kind of vulnerability that successfully attack the victim and what type of browser, etc, in this option we just choose "Metasploit Browser Autopwn" to load all vulnerability Social Engineering Toolkit known. This tools will launch all exploit in Social Engineering Toolkit database.

7. For payload options selection I prefer the most use Windows Shell Reverse_TCP, but you also can choose the other payload that most comfortable for you.

8. The next step is set up the Connect back port to attacker computer. In this example I use port 4444, but you can change to 1234, 4321, etc

9. The next step just wait until all process completed and also wait until the server running.

10. When the link given to user, the victim will see looks-a-like Google (fake website). When the page loads it also load all malicious script to attack victim computer.

11. In attacker computer if there's any vulnerability in victim computer browser it will return sessions value that mean the exploit successfully attacking victim computer. In this case the exploit create new fake process named "Notepad.exe".

12. To view active sessions that already opened by the exploit type "sessions -l" for listing an active sessions. Take a look to the ID…we will use that ID to connect to victim computer.

13. To interract and connect to victim computer use command "sessions -i ID". ID is numerical value that given when you do sessions -l. For example you can see example in picture below.

14. Victim computer already owned. I'm practice to create this tutorial using Virtual Machine so it will not harm other computer and also you can doing a lot of experience with your OS.

Darkcomet Crypter

2011-07-25T08:00:00.004+08:00

Add Icon For Fud Result working with all rats and stlrs

File Info

Report date: 2011-04-23 10:12:40 (GMT 1)
File name: darkcomet-crypter-exe
File size: 1167360 bytes
MD5 Hash: 703fd6381d6585a2d5bcb499d8ca7119
SHA1 Hash: cf2d12fd5cb1feb3cede887d3176d00bc1064b62
Detection rate: 4 on 10 (40%)
Status: INFECTED

Detections

Avast -
AVG -
Avira AntiVir - TR/Dropper.Gen
ClamAV -
Comodo -
Emsisoft - HackTool.Win32.VB.jz!IK
F-Prot - W32/VBTrojan.17!Generic
Ikarus - HackTool.Win32.VB.jz
TrendMicro -
Zoner -

Scan report generated by

NoVirusThanks.org

Download

The Difference Between HTTP and HTTPS

2011-07-25T00:30:00.005+08:00

HTTPS : Hyper Text Transfer Protocol Secure HTTPS is combination of Hyper Text Transfer Protocol and Secure Socket Layer protocol(SSL) / Transport Layer Security(TLS) to provide encrypted communication between web server and client. Usually HTTPS used for internet banking, payment transaction, login page, etc. This protocol use port 443 for communication.

Website that already use this protocol is GMail.com, and also other websites such as PayPal, Amazon, etc.
Let's see the connection between our computer and web server when we made connection using HTTPS using netstat -an.

As we can see from the picture, client computer opened random local ports and open port 443 on server side.

Are HTTPS (Hyper Text Transfer Protocol Secure) Secure?
To answer this question, let's see experiment below.
In this experiment, there's 2 person in one wireless network BadGuy and NiceGuy. NiceGuy trying to open http://gmail.com then login into it. In different place, BadGuy is in the same wireless network with NiceGuy as shown in the picture below :

When BadGuy trying to capture all packet data to/from access point, it will be different when NiceGuy using HTTPS for its connection. For more clear description, lets see the image below when NiceGuy Input username and password on GMail login page.

as you can see in above picture, it's use https:// for connection between client and web server. Then we will see what BadGuy do after NiceGuy using HTTPS for his connection. This BadGuy really like Wireshark, so he try again to capture the data and hope there's something interesting there.

BadGuy didn't find plain data there, every data send to / send from server is encrypted. The picture above is the login information(maybe) data that has already captured by BadGuy, but I think BadGuy cannot break the encrypted data only in a few days/months/year or maybe we can called "impossible" (we still didn't know when the possible time to break into it).

HTTPS Conclusion
Packet data sent using HTTPS is encrypted, anyone cannot see the packet data inside public network. That's why HTTPS usually used for banking or transaction on internet, and also login page or other page need to encrypt the data.

XtremeRAT v2.7.1

2011-07-24T17:00:00.004+08:00

This is a tool that allow you to control your computer from anywhere in world.
With full support to Unicode language, you will never have problem using this software.
Here you can find new updates, informations and tutorials about this software.

Version 2.7 (18/05/2011) Last Update

- Added USB Spreader.
- Added Mouselogger.
- Added upload files and execute directly.
- Webcam function changed.
- Some language corrections.
- Select webcam and desktop capture functions to start automatically.
- New method to identify your servers.
- Corrected some bugs using preview images in File Manager.
- Upload files to FTP server using File Manager.
- Corrected some bugs using grab passwords function.

:scan:

File Info

Report date: 2011-05-20 17:48:33 (GMT 1)
File name: cliente-exe
File size: 3517440 bytes
MD5 Hash: 86a349f2becb28bead0cabcfc4264579
SHA1 Hash: 4bffdda39c1f78edcb4c90a6a03756ca424f7
Detection rate: 1 on 6 (17%)
Status: INFECTED

Detections

AVG -
Avira AntiVir -
ClamAV -
Emsisoft -
TrendMicro -
Zoner - TrojanDownloader.Delf.PYW

Scan report generated by

NoVirusThanks.org

DOWNLOAD

xtreme rat v2.9

2011-07-24T08:00:00.003+08:00

Version 2.9 (19/06/2011)

Here some changes since last version: Please, update your servers.

- Corrected a bug in file manager using "run with params".

- Corrected error when open keylogger function.

- Added no injection option.

- Added option to select capture audio automatically.

- Added new special folders in file manager.

- Corrected a tray icon bug.

- Added auto update function.

- Added a option to block connections from IP list.

- Corrected flags problem.

- Corrected chrome passwords.

- Corrected a bug using download files in file manager.

- Added a button in file manager to update drives and network connections list.

- Added in file manager a new thumbnail preview function.

- Added CPU usage column in process manager.

- Added mass search files.

- Added a option to open directory of the selected process in process manager.

- Added a funny option into window manager: Crazy Window.

- Added disconnect server option.

DOWNLOAD

How to Know if You Are Infected with RATs or Keyloggers

2011-07-24T00:30:00.001+08:00

How to Know if You Are Infected with RATs or Keyloggers

In this post i am going to show you how to find out when you are infected with a RAT or Keylogger without using any complex tools. Now i believe most of you might know that you need to have an internet connection to make a RAT or a Keylogger work, which would mean, if you are not connected to internet, you don't have to worry about being infected with RAT or Keylogger Ok, so for those who have internet connection and think they are being infected with a Trojan, here is a little guide that can solve your problem.

1. Now every program has their own process which can be seen on task manager. So the first thing to do is to find out which process theTrojan is being attached to. If you see some unknown process search that on google. A good hacker will always makes sure he hides its process with a Windows based Process, for eg. svchost.exe or something like that.

2. If you cant find, then the next thing you can do is use cmd
(to open cmd prompt, Click on Start--->Accessories-->Command prompt).
3. Once Command Prompt is opened, use this command: netstat -an |find /i "listening"
Note: The NETSTAT command will show you whatever ports are open or in use, but it is NOT a port scanning tool!

Now we wonder What this Command does?
This command will show all the opening ports. Now check for any unknown port.

4. You can skip step 3 if you want, and can do this instead.

Open command prompt and type netstat -b

Now this command will show you the active connections with the process with their PID (Process Identifier) and also the packets.
Look out for SYN Packets and the Foreign address its been connecting with , check the process its been associated with, check the ports also. If you find that its connecting to some unknown ports, then you can say you have been backdoored.

5. Go to your task manager. On the top of it,
click on View---> select Column---> Tick on PID (Process Identifier).
Match the suspicious Process with the Processes In task manager, check PID also.

Now most of the RATs resides on Start up. How to delete them from start up?
a) Go to regedit ---> HKLM\Software\Microsoft\Windows\Current version\Run
On the Right hand side, check for the process name which you find on step 4. if its not their. Check at
HKCU\Software\Microsoft\Windows\Current Version\Run
OR
Open Cmd prompt & type start msconfig. Go to Startup tab, you can check the startup process there.

I hope This Tutorial was easy and comprehensive.

Albertino Advanced RAT & Binder v4.2

2011-07-23T22:00:00.005+08:00

Features:

[*]Polymorphic STUB[*]Flags[*]Multi-Tasking (Control all features on same client simultaneously.)[*]Reverse Connection (Connect Behind Routers)[*]UPnP Manager (Run RAT without port forwarding) (on most routers)[*]Multi-Clients Management (Control few clients simultaneously)[*]Remote Client Information (Basic client info)[*]Last 25 visited web pages[*]Send Fake Messages[*]Funny Stuff (Hide Desktop Icons, Hide Start Button, Hide Task Bar, Open-Close CD-Rom, Flip Screen, Swap Mouse buttons, Lock CTRL+ALT+DEL and more)[*]IE Options (Get Version, Change Home Page, Change IE Title, Open Website.)[*]Control Panel (Shutdown PC, Restart PC, Logoff User)[*]Clipboard Manager (Get Clipboard, Set Clipboard, Clear Clipboard.)[*]Remote Server Download (Download files and execute them.)[*]Printer Manager (Print to Default Printer)[*]File Manager (Download and Upload Locally, Execute, Delete File, Delete Folder, Make Folder, Rename, File Size)[*]Search Files (Search for any file or type on remote PC.)[*]Keylogger (Get all keystrokes from remote PC.)[*]Remote Passwords (FF 2,3 and 3.5+, IE7-8, Chrome, MSN (+Live Messenger), Trillian, IMVU, Pidgin, No-IP, DyDNS, FileZilla, Outlook (no drops or external references))[*]Processes Manager (List all running processes with the ability to close selected.)[*]Services Manager (List all services, Stop-Start Service, Disable-Manual-Autostart Service.)[*]Windows Manager (Control Opened Windows (Close, Hide, Minimize, Maximize, Restore, Default, No Active))[*]Remote Desktop (Watch Live Remote Desktop with ability to change Image Quality, Remote Control and many others))[*]Remote WebCam (Watch Live Remote WebCam (Save capture as video to file as XVID, DIVX and others))[*]Registry Editor (List, Create, Edit, Delete registry keys)[*]Send to All (Download and run file from website to all clients, Upload and run file from your PC to all clients, Run a DDOS (small bot))[*]Command Prompt Line (Manage remote cmd as your own.)[*]Client Geo Location[*]Multi Binder Included. (New polymorphic technology method)[*]Icon Changer[*]Assembly Editor

DOWNLOAD

Rapzo logger 1.8.2 Private Cracked

2011-07-23T08:00:00.002+08:00

NVT Scam Result:

File Info

Report date: 2011-03-14 10:04:43 (GMT 1)

File name: express-exe

File size: 353280 bytes

MD5 Hash: 450b9c228262616aef4d7b0c3a5da1f2

SHA1 Hash: d5e489a2f9176b4d0cd47a43e4dab6a4d83eb019

Detection rate: 5 on 9 (56%)

Status: INFECTED

Detections

Avast - Win32:Spyware-gen [Spy]

AVG - Dropper.Generic3.NMD

ClamAV -

Comodo -

Emsisoft - Trojan-Spy.MSIL!IK

F-Prot -

Ikarus - Trojan-Spy.MSIL

TrendMicro -

Zoner - Dropper.Generic3.NPG

NoVirusThanks.org

Scan report generated by

Download

HackHound Crypter

2011-07-23T00:30:00.002+08:00

File Info

Report date: 2011-04-17.

Link to scan: MyAvScan.com | Virus Scan Results for DSC104.exe

File name: DSC104.exe

File size: 384657 bytes

MD5 Hash: 9f56208325bd040a86be7a4a81b7bc2d

SHA1 Hash: 5eb7819403470c309d21017908c57376d610c9ea

Detection rate: 0 out of 33

Status: CLEAN

Detections

AVG - Clean.

Acavir - Clean.

Avast 5 -Clean.

Avast -Clean.

Avira -Clean.

BitDefender -Clean.

VirusBuster Internet Security -Clean.

Clam Antivirus -Clean.

COMODO Internet Security -Clean.

DrWeb -Clean.

eTrust-Vet -Clean.

F-PROT Antivirus -Clean.

F-Secure Internet Security -Clean.

G Data -Clean.

IKARUS Security-Clean.

Kaspersky Antivirus -Clean.

McAfee -Clean.

MS Security Essentials -Clean.

ESET NOD32 -Clean.

Norman -Clean.

Norton -Clean.

Panda Security -Clean.

A-Squared Security -Clean.

Quick Heal Antivirus -Clean.

Rising Antivirus -Clean.

Solo Antivirus -Clean.

Sophos -Clean.

Trend Micro Internet Security -Clean.

VBA32 Antivirus -Clean.

Vexira Antivirus -Clean.

Webroot Internet Security -Clean.

Zoner AntiVirus -Clean.

AhnLab V3 Internet Security -Clean.

MyAvScan.com

Scan report generated by

For thosee who said myavscan.com result is fake

here is Novirusthanks result of crypted cybergate

File Info

Report date: 2011-04-17 19:15:29 (GMT 1)

File name: dsc104-exe

File size: 384657 bytes

MD5 Hash: 9f56208325bd040a86be7a4a81b7bc2d

SHA1 Hash: 5eb7819403470c309d21017908c57376d610c9ea

Detection rate: 0 on 10 (0%)

Status: CLEAN

Detections

Avast -

AVG -

Avira AntiVir -

ClamAV -

Comodo -

Emsisoft -

F-Prot -

Ikarus -

TrendMicro -

Zoner -

NoVirusThanks.org

Scan report generated by

DOWNLOAD

p-s-s-s : U2ZTVlR0U3VUNFdyZWZTa1N0Z2tlZlNz

Crypted With ARMON-64-->ATOM-128-->B A S E-64 ( last without space)

How To Hack eBay User ID and Password

2011-07-22T19:30:00.002+08:00

Today i want to teach you how to hack an eBay account password. For this i'll be using phishing. Phishing is one of the easiest ways to hack ANY site's user names and passwords. You upload a fake Webpage that looks like the legit one, then you send the link to your victim and trick him into entering his login info into the fake Webpage, which then sends the info to you. It's very simple and very effectively.

How to hack eBay account password

1. First you need to download eBay Phisher

2. The downloaded file contains:

* ebay.html
* ebaylogin.php
* log.txt

3. Now upload these three files to a free webhost site. You can try
Your Free Hosting
Free Web Hosting
Reliable Free Hosting
cPanel Hosting
T35 Hosting
FREE Website Hosting & Premium Web Hosting
110mb.com
www.esmartstart.com
4. After that send this phisher link (ebay.html) to your victim and make him login to his eBay account using your sent Phisher.

5. Once he logs in to his eBay account using Phisher, all his typed eBay id and password is stored in "log.txt".

6. Now, open log.txt to get hacked eBay id and password as shown.

Thats it. I hope this phishing tutorial is fullproof and you can now hack eBay account password using eBay Phishing. I have tried to keep this eBay phishing tutorial simple for you to hack eBay account password.

How to Hack Gmail Account Password ?

2011-07-22T13:00:00.000+08:00

Hi Friends , this is the best way to hack gmail account for passwords , tried it myself and worked!!!
Things That you Need for Hacking Gmail Account Password:
1. Gmail Phisher
2. Free Web hosting Site
3. Little bit of manual Work

Introduction to Phishing
If you know little bit of Hacking then Its must for you know About Phishing i.e What is Phishing and how it works and most important How you can protect yourself from getting into the Trap. I will try to explain all of these in my article.
First of all What are Phish pages and what is phishing?? Phish pages are basically the fake pages or virtual pages that looks similar to the original website Page. The only difference is the batch program running in the background i.e Original Webpage sends requests to Gmail server while Phish Page sends request to hacker's php server. Now Phishing is a password hacking technique commonly used by hackers using phish pages that looks similar to original web page. The only difference is the URL in the address bar so Guys One Important Tip for you all always check the Address bar while going to any website .
Now What is Smart Phishing, Normal phishing page sends the password to hacker but it doesn't redirects the page to original website but smart phishing does. Means victim can never know what really happened and his account is got hacked. He will only think that he has entered the wrong password as in second attempt the web page is original and he will be able to login and the most fantastic thing is that the original redirected page has username already entered in it that makes it even smarter.

Now lets come to how it works?? When a user types a Username Password in the the text box,The info is sent to "login.php" which acts as a password logger and redirects the page to "LoginFrame2.htm" which shows "There has been a temporary error Please Try Again" in it . So when the person clicks on try again it redirects to the actual URL so that the victim does not know that your site is a fake site and gets his gmail.com password hacked.

HACKING GMAIL ACCOUNT STEP WISE:
1. First of all download the Gmail Phisher.
DOWNLOAD

2. Extract the rar file now you will get three files as given below:
gmail.html
log.txt
mail.php

3. Upload all the Three files to any of the free Web hosting server. Remember while creating the account on these servers try the username as nearer as possible to the original URL like mail.gmaile or maile.gmall etc.. As its the most crucial step. Some Free Web hosting servers are given below you can also find few more for yourself.

www.yourfreehosting.net
www.esmartstart.com
www.110mb.com
www.drivehq.com
www.t35.com

4. Once you have uploaded all the three files to web hosting server now you have to send these to your victim. This is the most important step regarding smart phishing technique.
Most People use same password for orkut and gmail and here is the main hack lies. What you have to do you have to send the HTML email to the victim which looks similar to the Orkut scrap to his email you can easily do this using simple editing to the existing mail. Just you have to change the link with your phish link and content according to the person likings so that he will surely come inside the trap.
Another technique is that you can send him a request to join a particular community in the format orkut does.
And Last but the most important one Send him mail from Gmail Admin such that "We have seen illegal activity from your account and you need to verify your account and your account is temporarily disabled after this login. To unlock your account Verify your Email and in that link put your Phish link. Now Guys you all will came to know How it works. If you want to Protect yourself its must that you should know what techniques a Hacker can use to hack your Gmail Account.

5. Now After sending phisher to victim, once the user logs in to his Gmail account using your Phisher, his user ID and password are ours..And these are stored in log.txt What you have to do is just refresh your Web hosting account files.

6. The Log.txt file will contain the passwords and look like this:

Thats all Now you have hacked the password of victim. I hope you all have Liked It.

NOTE: This is for Educational Purpose Only. Isoftdl is not responsible for any damage done by You.

Account Cracking Tools

2011-07-22T08:00:00.000+08:00

Cracking Tools

ProxyLeechers

Proxycheckers

WordLeeching

Combo editor

OCX Registrator

Cookies makers

Eset Virus scan

DOWNLOAD

DarkComet - RAT v3.0.1 -TUTORIAL

2011-07-21T18:00:00.000+08:00

1) Create a account at No-IP

2) Login and do this:

If you dont know how to get your IP, click here.

4) Download DarkComet

5)

6) Press "Edit Server" & "Server Module" and then just do everything I do.

10)

Press +Listen and add the port you want to listen to, it must be the same port you have added on picture 8, if you dont know how to port forward, just use the search button up there ;)

Now you can start to spread your server, if you are not sure how to do it correct or you just want to know the best way, use the search button.

Mobius Forensic Toolkit v0.5.8

2011-07-21T13:39:00.002+08:00

Mobius Forensic Toolkit is a forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions. Cases and item categories are defined using XML files for easy integration with other tool.

Changelag

The Hive (registry viewer) features three new reports:email accounts, TCP/IP interfaces, and computer descriptions.
All registry reports can be exported as CSV and the user password report can be exported in a format suitable for John the Ripper as well.
Minor improvements were made

Installation

As root, type:
python setup.py install

Usage

Run mobius_bin.py.

DOWNLOAD

Cerberus 1.03.4 Beta Tutorial

2011-07-21T09:00:00.000+08:00

1) Download Cerberus 1.03.4 Beta.

Also, for those who aren't aware of this, if you right-click on a slave's thumbnail in the online server list and click 'Capture Desktop', you can click in that screen and register mouse clicks on their computer. I'm ashamed to admit this, but I only just realized that. :O

2) Browse to the Cerberus folder, and run Cerberus.exe as shown.

3) The client window will be displayed. This is the main window which would be displaying a list of connections and their info, had you actually any victims online. Of course at the moment, it is empty. But when you do have victims, you would right-click on their name/icon to bring up a pop-up menu which would provide you with the option to do all sorts of fun stuff.

4) Click on the Options button at the lower left corner of the window. This brings up Program Options. You can choose to leave the password as it is, or make a new one.

You have the option to enter 3 ports to listen to. If you don't know how to port forward ports, go search for a tutorial on port forwarding. Once you have your desired ports properly forwarded, enter them (a maximum of 3) into these fields. As you can see, I left the first field default (5150) and then set the second to my preferred port (8245). No, this number doesn't have a whole lot of meaning. Just make sure it is forwarded. Now click Save, and click on Options again. If you just advance to the next radio button, your changes might not be saved.

5) Skip down to the last radio button. (NOTE: If you have the No-IP DUC running, you can skip this step.)

In the username box, enter the email address you used to sign up at http://www.no-ip.com. If you don't have an IP registered there, go search for a tutorial on making a no-ip address then come back here once you have your account.
In the password box, enter the password you used at http://www.no-ip.com.

Click Update, Save, then Exit.

6) Click the New button at the lower left, near the Options button.
This is where you start the creation of your server that you want your victims to click on.

Click the Basic Options button.

Where I have entered kaidz account.no-ip.biz, you would replace with your own no-ip address that you registered that http://www.no-ip.com.
Click the + button to add it to the Address Book. This is the address your server will try to connect to (destination: YOU). The password must be the same used in Step (E). Connection port must be a properly forwarded port, and one of the possible 3 ports that your Cerberus client will be listening to.

7) Click the Server Installation radio button.
Set your options as I have. They don't need to be exact, except for the fact that Install Server must be checked.

The directory installation isn't very important, nor are the exact names you choose, but I would suggest you choose any directory besides Temporary Directory.

8) Select the Boot Methods radio button. This is where you will configure how your server is started whenever their PC is restarted.
Set your options as mine (you can change 'WindowsUpdate' to what ever you want) and click the + button after Active Setup a few times.

9) This is where you bind a file of your choice to be run whenever your server is clicked on. If you aren't interested in binding a file to your server, skip this step.

Click the...button after file to select a file to be bound inside your server.

In most circumstances, if the file is something the user actually wants, you would set Execution to Shell Execute (Normal). However, if you don't want any signs of this second added file being visible to the slave, set it to Shell Execute (Hidden). Setting the Destination to anything other than Temporary Directory is preferable. Make sure that a check-box is checked besides each file you want included in the server.

10) Here are some miscellaneous options. I would recommend checking Keylogger Active, so it is easier for you to steal passwords as your slave logs-in to websites.

Check Inject into Default Browser or select Process if you want your server to attempt to hide itself inside a running instance of the user-defined process ( I typed explorer, but if I wanted to inject into the Windows Explorer process I'm pretty sure that I should have typed Explorer.exe instead), and if it fails, it then injects itself into the slave's default browser. Among other things, this aids in preventing your server from being removed by an Anti-Virus program. Nothing is certain though, of course.

The Mutex is any value which uniquely identifies this certain build of your server. If another server with the same Mutex attempts to start, it will cancel because the same server will already be running. You can set the Mutex to whatever you like, or leave it alone.

11) Under the Create Server page ( you can ignore Display Message, Blacklist, and Overview as they aren't really relevant to this tutorial ), pick a name for your server (which of course you can rename whenever), and select its icon. If the icon you want isn't in the Cerberus\Icons directory, then it won't be available for selection from the Icons List. To select a different icon, click on the icon image itself to load another. Of course, Use icon must be checked.

Compact Server with UPX indicates that you want your server to be compressed (in other words, reduced in file size) by the UPX freeware executable compressor. Optional.

Under the File Extension drop down menu, you must select either Application (*.exe) or Screen Saver (*.scr) if you want your selected icon to be displayed.

When you are done, click Create Server.

The following window will pop-up:

A description of what this means is beyond the scope of this tutorial (actually, I'm just too lazy to explain it) so you can go ahead and click No.

Another dialog will inform you that your server was created, and where it is located (usually in the Cerberus folder). You now have your server!

Now, it is time to test it. One way of doing this is to run it on a spare computer that has access to the internet; in my case, I was was away from home so I didn't have this luxury. I just run the server myself, and if all goes as expected, my Cerberus will play this beast growling sound, and show a little balloon over it's taskbar icon, indicating that you have obtained a connection to a new slave!

12) You are done. Well, not quite. You need to spread your server in a way that will get potential victims into running it, but that is an entire class of its own in art of computer hacking. There are whole tutorials on that subject.

Once you are done making your server, make sure that you minimize the main Cerberus window so that it is reduced to an icon on the taskbar. This way you can always be listening for connections when a slave runs your server, and you will be notified every so often of the number of currently connected servers in the following manner:

That is it ! Hope you enjoyed and understood tutorial.

Blackshades NET -Complete Tutorial [Port Forward->Setup->Connect]

2011-07-20T21:34:00.001+08:00

Blackshades is the best RAT available in the Internet till now and it seems to be like many have problems using it,so here is a walk through:

DOWNLOAD Blackshades NET

Unit 1: Port Forwarding
Unit 2: Setting up Blackshades NET
Unit 3: Connecting to your slave
Unit 4: Special Features

Unit 1: Port Forwarding
First we need to port forward to send and recieve connections through Blackshades NET so follow these steps to forward your ports

Step 1: Go to your router's settings page,Its usually 10.0.0.1 or 192.168.1.1 after trying this into
your address bar of your web browser you will be asked for login settings,login to your router by typing the username and password.After loging in you will see this page

Note:These might not be applicable to all routers.If you find any difficulties please visit http://www.portforward.com

Setp 2: Now go to Port Forward settings(usually under Advanced settings) and then
click "Add Custom Service" and then type any name for it and then select service type as Both or TCP/UDP and starting port as "port number number",ending port as "port number".And the server ip address as your LAN IP(You can find by typing ip config in CMD.Its the ipv4 you need to type). For Blackshades we use 2 ports so forward 2 ports.

Thats it,you are done with Port Forwarding :)

Unit 2: Setting up Blackshades NET

Step 1: Open client.exe to launch Blackshades NET and then you are automatically logged in to

Blackshades Client

Setp 2: Now click "Create Server" tab and right click in "profiles pane" and select "Create new" and enter a profile name for it and click ok.

Step 3: Type your No-IP or DynDNS address into the "IP/DNS" area
Note:To create a No-IP address goto No-IP.com and register an account there and select "Add Host" and create one.

Step 4: Type the Ports that you forwarded.First port as "Port",second port as "Transfer Port"

Step 5: Name anything as your "Server ID",its just to identify the slave.You dont want to disturb
the "Encryption Key"!

Step 6: Enter the "File name" for the server that would be created.You can use "Hide File" feature if you want a silent execution of the server file.

Step 7: Select the "Install path" for the server to get installed,either "Application data" or "Temp
directory"

Step 8: Select the "Install mode" for the server whether to Install,Melt,Protect Process.Note:
(Optional step)

Step 9: You can set the "Delay" time for the connection between your client and the server here.

Step 10: Enter "HKCU" as something which appears like a system name,eg:WinNT and Use "Startup"
feature if you want to server to run each time the computer is restarted.Note:(Optional step)

Step 11:Generate "ActiveX" if you had selected "Startup" feature.Note: (Optional Step)

Step 12:Generate "Mutex" for the server by clicking "Generate"

Step 13: Click "Infect USB" if you want to infect the slave's USB with your virus,select "Compress with UPX" if you want to compress your server size.Select "Change Icon" if you want to change the icon.Select "Clone File Information" if you want to clone some file's information.Note:(Optional step)

Step 14: Click "Save" to save your profile information.Note:(Optional step)

Step 15: Click "Build" to create your server

Thats it the server is now built...

Unit 3: Connecting to your slave

Step 1: The server file that has been generated should be ran on the slave's PC.You need to send the file to the slave with the server being crypted and binded or else the slave will find out that its a Virus.

Note: Crypting and Binding is an Optional step.

Step 2: Go to "Settings" tab and enter the two forwarded ports.First Port as "Connection Port" and Second Port as "Transfer Port".

Step 3: Click "Activate" buttons for both "Connection Port" and "Transfer Port"

Step 4: After activating the 2 ports you can test them by clicking on "Test Port" adjacent to the
"Activate" buttons if the ports are forwarded correctly.

Step 5: After doing all,goto "Connections" tab to view and control all your slave computers.Thats all ! You are now connected with your slave PCs...

Unit 4: Special Features
This is a small guide explaining the Special and unique Features of Blackshades NET.

1)Asynchronus Mode:
Asynchronus mode is used for very holding large number of bots.
This mode does not connect all the bots to your computer at the same time which might cause instability but keeps the bots at stake.That is you wont be connected to all the bots at the same time but you can connect to specific bots whenever you want to and at the other time you keep them at stake.

Step 1: Goto "Settings" tab and select "Asynchronous Mode" and then the bots will connect in Asynchronous mode.

Step 2: To control a specific slave just select any function that you want to perform just as you do
normally and then Blackshades will ask you if you want to establish connection between the slave and your PC,select Ok.Note: The connection time may take a while when doing this.

2)Station: The station feature in Blackshades is similar to the normal Server but it reduces the quality of the server.The usage of the Station is only when if you want to connect to someone's PC securely.That is,the slave cannot traceback that it is you who has RATted the slave.

Step 1: Create a Station just like you did when creating a server but just use different No-IP or
DynDns address as your "Master IP/DNS".Its better to use different "Mutex","HKLM" if you use both "Sever" and "Station"

Step 2: Set "Master port" as 80 and "Master Transfer Port as "3389" and "Bot Port" as the Fist Port that you forwarded and "Bot Transfer Port" as the Second Port that you forwarded.

Step 3: Click "Build" to create the Station

3)On-Join Feature: The On-Join Feature will basically execute the command that you have set whenever a specific bot or all bots connect to your Client.

The tasks that could be performed are:

i)Dload.Exec - Download and Execute -This will download and execute a file on the slave PC
ii)Update - This will update the server/station on the slave PC by replacing your previous file.
iii)Keylog - This will start Keylogging the slave's PC
iv)Password - This will steal all the passwords from the slave's PC
v)Visit site - This will make the slave PC to visit a site.
vi)Spread - This will start spreading your virus to the slave's USB,IM,WinRAR,etc
vii)Notify - Sound - This will alert you with a sound when connected to the slave's PC

Step 1: Go to "On-join" tab and sort out for which bots you want to use the On-Join feature by
specifying the "ID","WAN","Country","Version".Or use * to execute the task in all bots

Step 2: Select the prefered task from the "Task" drop down list.

Step 3:Click Add to add the fuction.You can add many functions.

4)Web Interface: The web interface is used if you want to control your victims using a phone,OS including and other than Windows whic are connected by LAN in a web interface.

Step 1: Goto the folder where you have installed Blackshades NET and then /data/web and there open users.txt and there you can add/remove with admin and guest privileges.eg:admin:bsnet:password.Save the document

Step 2: Goto "Settings" tab and under "Web Interface" Pane type a port and click "Activate" to start using the Web Interface

Step 3: By clicking Permissions you can adjust the guest permissions on controlling the bot.

Step 4: So now its activated,now you just need any device which needs to be connected with your computer in a LAN network

Step 5: Once your device is connected through LAN,goto web browser and type the LAN IP address of your PC suffixed with a colon then your port number for this.Example: 10.0.0.1:80

Step 6: Once you do that you get a login screen where you can login with your details and control your bots.

5)Market: The Blackshades Market is a inbuilt market to buy and sell installs/victims/bots safely without the fear of being bot killed or scammed.

Step 1: Go to "Market" tab and if you want to buy bots click "Continue" in "Buyers" panel and then
click proceed.

Step 2: Enter the direct link to your virus in "URL/Link to your bot"

Step 3: Select the seller from whom you want to buy and click "Next" and proceed after reading the
terms and conditions.

Step 4: If you want to become a seller click "Continue" in "Sellers" panel and set your price per 100 bots and give your contact email id and choose your minimum payout.

Step 5: Click Enroll to become a seller.

Ok so after reading this tutorial you should be able to use Blackshades effectively.
Thnx for reading the Tutorial.

DIFFERENT TYPE OF SERVERS

2011-07-20T13:31:00.002+08:00

What is a Server?
A server is a device with a particular set of programs or protocols that provide various services, which other machines or clients request, to perform certain tasks. Together, a server and its clients form a client/server network which provides routing systems and centralized access to information, resources, stored data, etc. At the most ground level, one can consider it as a technology solution that serves files, data, print, fax resources and multiple computers. The advanced server versions, like Windows Small Business Server 2003 R2 enable the user to handle the accounts and passwords, allow or limit the access to shared resources, automatically support the data and access the business information remotely. For example, a file server is a machine that maintains files and allows clients or users to upload and download files from it. Similarly, a web server hosts websites and allows users to access these websites. Clients mainly include computers, printers, faxes or other devices that can be connected to the server. By using a server, one can securely share files and resources like fax machines and printers. Hence, with a server network, employees can access the Internet or company e-mail simultaneously.Servers also offer remote-management tools — which means an IT person can check usage and diagnose problems from another location. This also means you can perform routine maintenance such as adding new users or changing passwords

Different Types of Servers
The multiple types of servers or types of network servers are as follows:

Server Platform: Server platform is the fundamental hardware or software for a system which acts as an engine that drives the server. It is often used synonymously with an operating system.
Application Server: Also known as a type of middleware, it occupies a substantial amount of computing region between database servers and the end user, and is commonly used to connect the two.
Audio/Video Server: It provides multimedia capabilities to websites by helping the user to broadcast streaming multimedia content.
Chat Server: It serves the users to exchange data in an environment similar to Internet newsgroup which provides real time discussion capabilities.
Fax Server: It is one of the best option for organizations seeking for minimum incoming and outgoing telephone resources, but require to fax actual documents.
FTP Server: It works on one of the oldest of the Internet services, the file transfer protocol. It provides a secure file transfer between computers while ensuring file security and transfer control.
Groupware Server: It is a software designed that enables the users to work together, irrespective of the location, through the Internet or a corporate intranet and to function together in a virtual atmosphere.
IRC Server: It is an ideal option for those looking for real-time discussion capabilities. Internet Relay Chat comprises different network servers that enable the users to connect to each other through an IRC network.
List Server: It provides a better way of managing mailing lists. The server can be either open interactive discussion for the people or a one-way list that provide announcements, newsletters or advertising.
Mail Server: It transfers and stores mails over corporate networks through LANs, WANs and across the Internet.
News Server: It serves as a distribution and delivery source for many public news groups, approachable over the USENET news network.
Proxy Server: It acts as a mediator between a client program and an external server to filter requests, improve performance and share connections.
Telnet Server: It enables the users to log on to a host computer and execute tasks as if they are working on a remote computer.
Web Server: It provides static content to a web browser by loading a file from a disk and transferring it across the network to the user's web browser. This exchange is intermediated by the browser and the server, communicating using HTTP.

These were the different types of servers which can be categorized according to their applications. Servers along with managing network resources are also dedicated, i.e. they perform no other task other than their server tasks.

OWASP MANTRA SECURITY TOOLKIT - GANDIVA BETA 0.61

2011-07-20T09:00:00.000+08:00

Mantra is a dream that came true. It is a collection of free and open source tools integrated into a web browser, which can become handy for students, penetration testers, web application developers, security professionals etc. It is portable, ready-to-run, compact and follows the true spirit of free and open source software. Mantra is a security framework which can be very helpful in performing all the five phases of attacks including reconnaissance, scanning and enumeration, gaining access, escalation of privileges, maintaining access, and covering tracks. Apart from that it also contains a set of tools targeted for web developers and code debuggers which makes it handy for both offensive security and defensive security related tasks.
Mantra is lite, flexible, portable and user friendly with a nice graphical user interface. You can carry it in memory cards, flash drives, CD/DVDs, etc. It can be run natively on Linux, Windows and Mac platforms. It can also be installed on to your system within minutes. Mantra is absolutely free of cost and takes no time for you to set up.

The beta version of Mantra Security Toolkit contains following tools built onto it. Moreover Mantra follows the guidelines and structure of FireCAT which makes it even more acessible. You can also always suggest any tools/ scripts that you would like see in the next release.

DOWNLOAD

BLACKSHADES 4.2 CRACKED

2011-07-19T12:22:00.000+08:00

All right I've noticed ppl having trouble still with the crack.
Since that last thread has degenerated into incoherent jibber-jabber,

I am posting this here. The culmination of our (My) efforts.

Everyone use THIS as the latest known working version of the crack.

And yes, just in case the 4.2 is deleted from the official site ive decided to mirror it in here. This will contain everything needed to run. Try not to change anything unless you know what you are doing.

Things to remember:
1: Only keep the login server on if you want to generate a server. Once ur finished, feel free to turn it off.

2: Run the login server to be able to login. Type anything you want in that login box. Think of it as a server with no authentication. Its like we're ruining cloud computing here. But we should! If it were up to cloud computing none of us would have PERSONAL computers.

3:When making a server, for this implementation of the crack, SAVE your settings BEFORE you build. If you read the source code ull understand why.

4: Atm you cannot inject the server into other processes. You can only inject the server into itself. Like, say u have a crypter which uses injection. If it injects the server into its own memory image then its ok. If you try to inject into say svchost, it'll be blocked by DEP. Thank god I didnt lose any bots permanently due to that.

5: If you are using like DarkComet and want to migrate to blackshades like I have, and you are foolhardy enuf to have them running on the same ports, when your DarkComet gets few or no connections, it is bcuz the blackshades servers are effectively DoS'ing your DC client. (But its worth moving over. That filemanager is fuckin FAST! AND IT HAS TIMESTAMPS!!! AND REVERSE RELAY! But I digress.) Keep that in mind ad you migrate. The workaround obv uses windows firewall inbound filtering rules. I will not explain how to do that.

6: Keep the msvbvm60.dll file in there, otherwise itll revert back to being uncracked. And it may prompt you to update. In fact it will. 4.3 is released. Doesnt really have any new features that are useful, but since this one is cracked they thought theyd release a new version more secure just to keep their uncrackable RAT title. They can keep their title, and we can keep their RAT ^_^. I mean hey this 4.2 is kickass already. Who needs a steam stealer when you have keylogs eh? And this crack obviously will NEVER prompt for update.

It. Will. Work. FOREVER!!! ... until windows decides to stop supporting vb6 binaries, which is prolly not happening anytime soon. ( I mean it wont literally work yknow... forever... but.... u get the point)

Is that it? I think thats pretty much it. Remember you can run the login server source code in autoit SciTe if you dont rly trust the binary. Hell if you find a better server generation method, like oh i dunno maybe the right way to do it, like the official server does, feel free to patch it into the source!!!

DOWNLOAD

A BEGINNERS GUIDE TO KEYLOGGING

2011-07-19T05:24:00.000+08:00

Welcome to a Beginner's Guide to Keyloggers! In this guide I will go through all the common topics that you may need to know. When you finish reading this topic you will know everything you will ever need to get started keylogging. I cover every topic related to keyloggers as well as cover terminology and definitions. I'll explain how a keylogger works and how to even get started making your own! So let's get started!

What is a keylogger?
Learning the lingo and definitions.
Common features keyloggers have.
How do I use a keylogger?
What is a "stub"?
What is the "server"?
What is crypting?
What is the difference between a stealer and a keylogger?
What is .net framework and why do I care?
What are some good keyloggers?
What are some upsides to keyloggers?
What are some downsides to keyloggers?
I want to make my own keylogger. Where do I start?
I think I've been infected with a keylogger! What do I do?
Conclusion

A keylogger is a program that logs a keyboards keystrokes. It can be used for several purposes, both black hat and white hat. The most common use is black hat. A keylogger functions by grabbing a keystroke, triggered by when the slave presses a key on their keyboard, and saving it to a variable. This process is called "keyboard hooking". It then will take this long variable and send it via a SMTP or FTP server. You can then view these logs and use it for whatever your intention may be. Keyloggers have several different features that I will go into in a later section. The most basic ones only include keyboard hooking and a way to send the logs.

One of the most confusing things about starting something new is not understanding the lingo. If you don't understand the lingo, how will you know what people are talking about? In this section I'll be explaining the common terms people use concerning keyloggers. I'll be going over some other more general things as well.

Logger
- Slang term for keylogger. See the "What is a keylogger" section.
Hooks
- Slang term for keyboard hooks. These are also explained in the "What is a keylogger section"
Keystrokes
- Section of code that is triggered when the slave types something on the keyboard.
Logs
- Compiliation of all the keystrokes over a period of time.
FTP
- A webhost that stores files that allows the user to connect and retrieve said files. Files in this case are logs.
SMTP
- A way that logs are sent via email. Example, MSN, Gmail, Yahoo, etc.

FUD
- Full Un-Detected. This means that antiviruses will not detect your file as a virus. This will be further explained in the "What is crypting section".
UD
- Undetected. This means that some antiviruses will not detect your files as a virus, while others will.
Server
- A server is the output of your keylogger. I will take this in-depth in the "What is a server?" section.
Crypter
- A crypter crypts your file removing detections. I'll take this in-depth in the "What is crypting" section.
Detection
- A detection is a term used when an antivirus detects, or thinks your file is a virus. You always want to have the least amount of detections possible to increase your success rate and to reduce errors.
Black hat
- A black hat is someone who uses their knowledge of computers and security for malicious reasons.
White hat
- A white hat is someone who uses their knowledge of computers and security for helpful reasons. They help disinfect and improve others security to combat black hat hackers.
Grey hat
- A grey hat is a mixture between a black and white hat. They will infect innocent people and then help them get rid of it, for free or a price (the latter being more common).
Backdoored
- When a file is backdoored it has a virus binded to it. This means that the file will act normally and the user will be infected without their knowledge. This has become extremely common in the keylogger section. Always be wary of new releases.

As I've said before, most keyloggers have two basic settings. Keyboard hooking and log sending (by FTP or SMTP). Most keylogger developers (myself included) like to include more settings to help ease the user experience. Below is a list of common settings you may find, and what they do:

Icon Changers
- This will change your viruses icon without corrupting it like some third party programs can do.
MuteX
- MuteX is a unique string that you generate. It helps prevent multiple logs from being sent.
Add to Startup
- This will add a registry (or other ways) that will cause your virus to start when the computer is turned on.
Antis
- Antis are a feature that help keep your virus on the slaves computer for as long as possible. They disable or stop certain white hat programs such as antiviruses, sandboxie, and keyscramblers from running or removing your file.
Disable CMD/Taskmanager/Registry
- This feature will change the registry value for each of these system tools to disable them.
Logging interval
- This allows the user to chose how often logs are sent.
Fake Error Message
- This will cause a fake error message to pop up, making it seem less suspicious.
File pumper
- This will add to the size of your virus. This helps making it seem less suspicious as a game won't be a few kilobytes.
Assembly Editing
- This allows you to change things found in the properties menu when right clicking a file. This helps it seem more like a real file rather than a virus.
Encrypted user information
- This encrtyps your information so that others cannot steal it by decompiling your virus.
Test connection
- This will test your credentials that you've entered to make sure they are correct.

Using a keylogger is a lot easier than it sounds. All you need to do is find one that you want to use, download it, and then chose your settings. Once you have entered all your information and chosen your settings, click the build button. The builder will create your server. This is what you give to people. Give them this file and when they run it they will be infected and you will start receiving logs. Pretty self explanitory. If you ever have a question contact the creator and they should be able to help you.

A stub is a separate binary that contains special code that is required for the keylogger to function. There are usually two things in a keylogger. The builder and the stub. Some keyloggers will have a stub built in. A builder takes the information and settings you've chosen and merges it with a stub. The stub contains keyhooks and the workings of each feature. These two merge to create your virus, containing all of the information. I'll cover this file in the next section.

A server is the ouptput of your keylogging builder. It takes your user information (the builder) and the actual malicious code (the stub) and merges the two (via either Code DOM which I'll explain later in this section, or by file splitting, which I will also cover) to make one bad ass file. There are several ways that this is accomplished, and both ways have their ups and downs. The server is also what you distribute to infect people. It is your "virus"

CodeDom is a type of building that generates the code during run time. This allows the user to only have to download one file (just a builder). After inputting your information, the builder will take this and combine it with the malicious code (already inside the builder). This helps lower detection rates, but overall is harder to do, and is harder to reFUD (you have to re distribute the entire builder, instead of just providing another stub).

Filesplitting is the old school way to do things. It requries taking your information (the builder) and combining it with a separate file that contains the malicious code. While this makes it easier to detect, it's easier to update as you can simply give your users another file (same thing, just with less detections).

Crypting can be very complex, though it isn't necessary for you to know all of this information. So for this section I'll keep things to what you need to know. Crypting involves taking a stub (sometimes it's CodeDOM) and using that to FUD (or lower your detection rate) your file. The entire process can get a bit confusing, and I won't bother getting into it. What you do need to know is that crypting can easily corrupt your keylogging sever making it no longer work. A corrupt keylogger may not be detected (the crypter at least did it's job) but it will not send logs making it useless. Because of this you should chose your crypters carefully and it may take a while to find one that works (for free) with your keylogging server. If you are buying a crypter (which I recommend) then be sure to ask the seller to either test or verify your server. In short, crypting is used to lower detection rate, and raise execution rates. That's all you need to know.

There is one major defining difference between a stealer and a keylogger. A stealers purposes is to steal passwords that have been saved in the browser/application. Ever logged into something and your browser prompted you to save the password? This is what stealers steal. They are good for massivley grabbing passwords and quickly. Once run they do not continue to steal until run again.

.Net Framework is a very in-depth concept from Microsoft. While you don't need to know (or should you really care) you should know that most keyloggers are written in Visual Basic .Net, giving it a dependancies. Depending on who made it (whether they suck or not) you may have to install a specific version (.Net 4.0). Most computers (99%) come with .Net 2.0 installed. Your output will also requrie a specific framework (depending on which one you use).

Amarok 2.4.2 Beta 1 "Nightshade" Released

2011-07-18T12:04:00.000+08:00

This has been a busy spring and early summer in Amarok-land. Developers met up in Randa, Switzerland and sprinted with a lot of other KDE teams, including KDE Multimedia. Besides lots of good times, much coding progress and bugfixing was done too. You will immediately notice a new streamlined look, and some nice background graphics. The other big change is in dynamic playlists.
One we have been waiting for: drag and drop on Collections, to copy or move within Local Music, and also directly from the Playlist. We also got patches for various bugs and wishes: one can now configure the names of Podcast episodes, thanks to Sandeep Raghuraman, and automatic scrolling in the Lyrics applet is possible, thanks to Jan Gerrit Marker. Good news for classical music listeners, you now have the option to scrobble the composer as artist in Last.fm, thanks to Nicholas Wilson.
We also have an updated dynamic playlist which should be easier to understand. Some of the functionality changes are: New AlbumPlay example playlist, a Quiz-play bias that will pick a song that starts with the same character the last one ended with, preventing duplicate tracks.
And of course we have quite a few bug-fixes, and changes under the skin. The changelog below gives a fairly complete overview of the changes in this beta release. Please help us test it and get it ready for prime-time.

Features

Made Amarok compile with the Clang LLVM frontend.
Enable drag and drop on collections to copy/move within Local Music and directly from the playlist.
Added KNotify scripting interface.
Make podcast episodes download filename configurable. Patch by Sandeep Raghuraman.
Automatic scrolling in lyrics applet (Thanks to Jan Gerrit Marker)
Option to scrobble composer as artist to Last.fm (Thanks to Nicholas Wilson)
Option to hide the OSD if another window is taking the full screen

Changes

Again write back ratings only if option is selected.
Moved the queue-editor action to the main menu under playlist to save space. Queue editor now has a shortcut: Meta+U.
Removed the redo action from the playlist toolbar to make it less wide.
Made some playlist toolbar actions collapse into a menu button for use on small screens.
Removed the statusbar. Moved progress info & messages to the Media Sources dock.
Removed the preview button and checkbox from the organize collection dialog.
General user interface cleanup (addition of browser widget backgrounds, etc.)
Removed the add button in the context toolbar. Applet explorer is opened on config.
Easier to understand Dynamic playlists
Made Amarok depend ffmpeg-0.6 or newer.
Use KImageCache if possible (kdelibs 4.5.0 and later), which should reduce the number of cache-related crashes.

Bugfixes

Don't let the album applet freeze Amarok for ages on track change.
Fixed cover fetching from Google Images.
Fixed a crash in the equalizer dialog when selecting "Off".
Fix finalization of track copy process to media device collections.
Fixed crash on MusicBrainz search.
Avoid crash in ContextView when accessing Plasma::Applet::view().
Fixed playlist tooltip getting too tall for multiline comments.
Made equalizer keywords (dB,kHz,...) translatable.
Made equalizer preset names translatable.
Fixed runtime error reporting of scripts.
Fixed "Happy" moodbar theme.
Fixed crash for invalid scripts trying to be stopped by the manager.
Fixed collection menu items ordering.
Fixed top level podcast location setting.
Fixed double-clicking in collection using left-handed mouse setting.

DOWNLOAD

SQL INJECTOR V1.0.2

2011-07-18T04:13:00.000+08:00

SqlInjector is an application to perform completely blind SQL injection. Currently it only supports MS
SQL Server. It uses time and true/false based inference to conditions to extract data. The key feature
is that it uses a binary search mechanism to reduce the character search address space; this means it
can get each character value within 7 to 8 requests.

Features
Binary search for faster character identification
Completely blind injection using time based inference
True/False inference
Supports MS SQL Server
Extracts database name
Extracts current user
Extracts server version
Extracts table names
Extracts column names
Extracts column data types
Extracts column lengths
Configurable space encoding
Configurable wait timing
Tree view display of enumerated data
Resume support
Save/Loading of project files
Proxy support
Authentication support (Basic, Negotiate, Digest, NTLM, X509)

Download

BSQL HACKER

2011-07-18T03:11:00.000+08:00

BSQL Hacker is an automated SQL Injection Framework / Tool designed to exploit SQL injection vulnerabilities virtually in any database.

BSQL Hacker aims for experienced users as well as beginners who want to automate SQL Injections (especially Blind SQL Injections).

It's easy to use for beginners and provide great amount of customisation and automation support for experienced users. Features a nice metasploit alike exploit repository to share and update SQL Injection exploits.

Key Features

Easy Mode
SQL Injection Wizard
Automated Attack Support (database dump)
ORACLE
MSSQL
MySQL (experimental)
General
Fast and Multithreaded
4 Different SQL Injection Support
Blind SQL Injection
Time Based Blind SQL Injection
Deep Blind (based on advanced time delays) SQL Injection
Error Based SQL Injection
Can automate most of the new SQL Injection methods those relies on Blind SQL Injection
RegEx Signature support
Console and GUI Support
Load / Save Support
Token / Nonce / ViewState etc. Support
Session Sharing Support
Advanced Configuration Support
Automated Attack mode, Automatically extract all database schema and data mode

Update / Exploit Repository Features
Metasploit alike but exploit repository support
Allows to save and share SQL Injection exploits
Supports auto-update
Custom GUI support for exploits (cookie input, URL input etc.)

GUI Features
Load and Save
Template and Attack File Support (Users can save sessions and share them. Some sections like username, password or cookie in the templates can be show to the user in a GUI)
Visually view true and false responses as well as full HTML response, including time and stats

Connection Related
Proxy Support (Authenticated Proxy Support)
NTLM, Basic Auth Support, use default credentials of current user/application
SSL (also invalid certificates) Support
Custom Header Support

Injection Points (only one of them or combination)
Query String
Post
HTTP Headers
Cookies

Other
Post Injection data can be stored in a separated file
XML Output (not stable)
CSRF protection support (one time session tokens or asp.net viewstate ort similar can be used for separated login sessions, bypassing proxy pages etc.)

BSQL Hacker Manual.pdf 1.1 MB

Download

10 Steps to Set Up Armitage in Backtrack for Penetration Test

2011-07-18T01:48:00.000+08:00

What is Armitage?
Armitage exists to help security professionals better understand the hacking process and appreciate what's possible with the powerful Metasploit framework. Security professionals who understand hacking will make better decisions to protect you and your information." I copy that paragraph from Fast and Easy Hacking FAQ, but in a simple way to explain what is Armitage, in my opinion it's tools that make you learning about Netowork Security, Metasploit, and NMap more easier because this tools make all of that tools(Metasploit, NMap) in visual way not a command line. Just a few click and you will know the flow of an attack happen in the network.

Read here for latest Backtrack 5 Armitage tutorial.

Requirement :
1. Backtrack 4r2
2. Armitage (apt-get install armitage from your Backtrack Box)
3. Java 1.6.0+
4. Metasploit 3.5+
5. Database (PostgreSQL , MySQL) –> In this tutorial we use MySQL; PostgreSQL usually used when you use Backtrack 4r1

Step By Step :
If you still unfamiliar with Backtrack, you can read my previous post about 5 useful things in Backtrack Linux.
1. I assume you have already installing Armitage by using apt-get install armitage. The next step is update your metasploit to the latest version by using msfupdate command. This is needed to update our exploit database to the latest version.
v4L@bt:~# /pentest/exploits/framework3/msfupdate

2. The next step is enabling RPC Daemon for metasploit, in this case we will use SSL to interact with metasploit.
v4L@bt:~# /pentest/exploits/framework3/msfrpcd -f -U msf -P test -t Basic

The above command will start the msfrpcd with the user msf, password test, SSL listener, on the default port 55553.

3. After setting up the MSRPC Daemon, the next step is turn on our database service (I will use MySQL)
v4L@bt:~# /etc/init.d/mysql start

4. The step 1-3 is the needed step to make sure Armitage running correctly without error. If everything is okay, the next step is run the Armitage inside /pentest/exploits/armitage/, so we need to change the directory first.
v4L@bt:~# cd /pentest/exploits/armitage/ v4L@bt:/pentest/exploits/armitage# ./armitage.sh

5. After the ./armitage.sh command, there's should appear new window to connect to MySQL and mysql msfrpcd. Make sure everything is correct and also check the Use SSL checklist. If everything is OK, click CONNECT.

6. Here's the main window of Armitage, at the top of application there's a menu, on the left side there's auxiliary, exploits, and payload from metasploit, and at the bottom of application there's MSFConsole.

7. The next step we need to add host(s). We also can use NMap to scan whole network or specific IP Address. In this case I will use "Quick Scan(OS Detect)" using NMap to find alive hosts in my network.

My network address is 192.168.1.0/24 class C.

You need to wait until the tasks completed. Usually it depends on scanning type, if you use intense scan will take more time than quick scan. Below is the picture when it finish doing the task.

If the tools found alive hosts it will be shown like the picture below(also the OS).

8. From the previous image it shows that we need to find some attacks available for the listed hosts.

You can use automated attack finder from armitage who will find the most suitable attacks for the hosts listed. you can choose both "by Port" or "by Vulnerability". If attack analysis has finished the application will inform you like the picture below.

9. In this example I will try the MS08_067 vulnerability in Windows.

The next step is the same when you use metasploit framework. If you confused in this steps, you can use automated exploitation (leave all the options default), then click LAUNCH and wait.

10. If the targeted hosts is vulnerable with the attack, the color will be changed into red, that's mean that we can breach into the computer.

The next step is right click the hosts and as you can see on the above picture, I choose the command shell to interact with the victim. I think you should know what happen next when I click that option PWNED.

I hope this tutorial is useful for you, especially for you who want to tests your personal network from security breach by using metasploit.