Arjunkotri: Eathical hacking

Socks list for carding latest 2016 :)

CDRHINDI 0 carding, Eathical hacking, socks5 February 22, 2016

<div dir="ltr" style="text-align: left;" trbidi="on">
<b><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYWNCDLECuMFxDifm_cue1FcE3bjm1gDamdtJatLZngdKaaG7PPLljIqONmFvOL5cQQ9MmcPmo0W1KdFfJV7KwX7FCfotFE9MrW8i-YYDDi1_juQo9xq_sKx9KrJZOf-_WH_pLZJIRvVo/s1600/2016-01-29-12-40-44--1010663720.jpg" /> </b><br />
<b>Hello hackers</b><br />
<br />
From huge demand from our followers we are posting socks list 4 and 5 for carding<br />
<br />
IP Address                             Port                     Country<br />
<br />
201.173.182.132                   10000                Mexico<br />
201.173.249.86                   10000                Mexico<br />
177.240.196.57                   10000                Mexico<br />
189.218.40.142                   10000                Mexico<br />
201.172.124.217                   46453                Mexico<br />
189.214.255.196                   10000                Mexico<br />
201.173.44.8                           10000                Mexico<br />
200.225.24.49                           10000                Mexico<br />
189.218.142.217                   10000                Mexico<br />
200.239.26.152                   10000                Mexico<br />
187.161.70.167                   10000                Mexico<br />
189.218.221.229                   10000                Mexico<br />
187.253.30.173                   10000                Mexico<br />
201.175.106.166                   41737                Mexico<br />
189.194.39.29                           10000                Mexico<br />
24.137.253.7                           58766                Puerto Rico<br />
201.172.195.164                   12568                Mexico<br />
201.172.100.217                   10000                Mexico<br />
<br />
201.173.226.94                   10000                Mexico<br />
<br />
Remember use tor and vpn service to stay on the safe side</div>

Socks list for carding latest 2016 :)

Hello hackers From huge demand from our followers we are posting socks list 4 and 5 for carding IP Address ...

Mobile phone root & jailbreak, hacking से जुडी जानकारी आप सभी के लिए

CDRHINDI 0 Eathical hacking, For Mobile, Hacking August 18, 2015

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="post-title entry-title" itemprop="name headline">
Mobile phone root & jailbreak, hacking से जुडी जानकारी आप सभी के लिए 
</h1>
<div class="topmeta">
<div class="pull-right inner">
</div>
</div>
<div class="post-body entry-content" id="post-body-4364320122524058828" itemprop="description articleBody">
<div dir="ltr" style="text-align: left;">
<div class="separator" style="clear: both; text-align: center;">
<img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiYm5n4-rJksm9GDJTJ5wjkna69tW3XDY_U3Rv1VfzHNP0JXv6WtRk8Wr64HRJLJuAIalje076mGPNf9vXbINeTiS1ymIY27MVdaN3Y0T-jgRzUDeQYYn8zzpYSLMRQtWmuqyCoBH0E8suG/s1600/mobile_security_software_f9qlh.jpg" width="320" /></div>
आज की पोस्ट के जरिये मैं आप लोगो का बताने वाला हु स्मार्टफोन की सेफ्टी 
से जुडी कुछ बाते हमारा पूरा डेटा हमारी पूरी फोटो हमारे स्मार्ट फोन में 
सेव होती है गर्ल फ्रैंड से लेकर बॉय फ्रेंड के मैसेज हमारे बैंक से जुड़े 
हमारी जिंदगी से जुड़े हर तरह के मैसेज हमारे स्मार्ट फोन में सेव होते है 
सोचिए हम इतनी छोटी सी डिवाइस में इतनी सारी इंफॉरमेशन लेकर खुम रहे है आप 
सोचे अगर आपकी इन सभी इंफोर्मेशन का गलत इस्तेमाल हो गया या फिर ये किसी 
गलत हाथों में चला जाए तो। ................<br />
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgdHIlemKKEje48qEZxHBnbRx9P_cNV2FlbWhmqCG2axWH3KSCb-GWjlThwloPlZdZZ7JArvZI3_n_LEsU6F0CpNRR3uivZMN6BND-TENVMSv-7WemShBX8GBK0LOSuZq64h4TpNhmrpqtk/s1600/images.jpg" /></div>
आज इसी टॉपिंग पर मैं बात करने वाला हु आप लोगो से अगर मैं एक सवाल पुछु की
 आपको आपके फोन में सबसे बड़ा खतरा क्या रहता है तो आपमें से बहुत से लोगो 
का जवाब यह ही होगा कि मेरा फोन कही खो ना जाए लेकिन क्या आप जानते हो 
मोबाइल खोने के अलावा और भी बहुत से खतरे है जो आपके इस स्मार्ट फोन में है
 आपकी सभी जानकारी आपके मैसेज आपके बैंक की डिटेल आपके परिवार के फोटो सब 
कुछ फोन के अंदर मौजूद है आपका फोन गुम हो ना हो लेकिन फोन के अंदर मौजूद 
हर जानकारी किसी के पास जा सकती है कोई आपका फोन हैक करके आपकी सभी जानकारी
 चुटकियो में अपने सर्वर पर ले सकता है<br />
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh4RoiNdvVU2YMKtIyOjtQpwcG77JD8vAP-synMC7rARKHwSFjGDRM3OUKUM-49MxtP3ZGxUmkKDDVkVvLmVck1F5HFGdkWgzuqjyy098EjrbYPHhGd8JwzrALQeIgCrzq8alTj315Da5E7/s1600/images_Fotor.jpg" /></div>
आइये आपको बताता हु किस तरह कोई आपको फोन को को हैक कर सकता है अधिकतर लोग 
अपने मोबाइल को अपने पीसी या लेपटॉप के साथ कनेक्ट करते है लेपटोप या पीसी 
को हैक करने के लिए Hacker एक malware लेपटोप या पीसी में भेजता है जो आपकी
 विंडो को इंफेक्ट कर देता है वो एक मैलवेयर लैपटॉप में होने वाली हर 
प्रोसेसिंग को रीड करके आपके सिस्टम की हर फाइल को पढ़ सकता है आपका कैमरा 
ओन कर सकता है हर तरह का काम कर सकता है इसी तरह की फाइल आपके स्मार्ट फोन 
में भी आती है जो की आपके पर्सनल डेटा के साथ कुछ भी कर सकती है<br />
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgSooCLj_DVAgGNbVhWnMamhY1bPwZMvhK2Du6BM5zp6vaCyePEu8yQzSStwhKVzWaBMMWnenOyNa6nwKO2cCBsUn69wx-1CuIOdzl1Tbuj_nSGbSGv0Mf8wl6IhiR8oZC4v_5XRLXOAuS9/s1600/images.jpg" /></div>
अब बात करते है मोबाइल की …………  मोबाइल में कुछ फीचर होते है जैसे की JPS 
एप्लीकेशन है जो JPS का इस्तेमाल करती है इनमे से सबसे ज्यादा Google Map 
का इस्तेमाल होता है और भी बहुत से app है ऐसी एप्लीकेशन को जब आप डाउनलोड 
करते हो तो आपके सामने परमिशन की एक लिस्ट आती है जिसमे ये सभी बाते लिखी 
होती है कि वो आपके फोन की हर इंफोर्मेशन लेगा आपके पास इस लिस्ट को रोकने 
का कोई चारा नहीं होता और आप इस लिस्ट को यस कर देते हो आपके यस करते ही उस
 एप्प को आपके मोबाइल फोन में मौजूद हर तरह की जानकारी लेने की परमिशन मिल 
जाती है आपका पूरा फोन गूगल चाहे तो अपने सर्वर पर अपलोड कर सकता है आपके 
सभी फोटो आपके मैसेज आपके बैंक की डिटेल आपके वीडियो वो सभी कुछ जो भी आपके
 फोन में होगा गूगल एक बार को आपके साथ ऐसा ना करे लेकिन ऑनलाइन बहुत से 
ऐसे ऍप है जो आपके डाटा को अपने सर्वर पर अपलोड करके उसका गलत इस्तेमाल कर 
सकती है<br />
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiyqEVei5fBbQZmbxNXVYf6fklk42VgbpcUMr-Qt6X-WzHJNG4iP-xU4h24tzxpTH6ZBbLtY6lzGttVjYmA7HIOutR8EmeV-QFauaR6dkZgbRV7fM-wUfm_0c7VrvVXL67p8IuStqrJI6pm/s1600/UnHack.png" /></div>
अब सवाल आता है की हमे कैसे पता चले की कौन कौन सी एप्लीकेशन हमारे डेटा को
 पढ़ रही है या किस एप्लीकेशन को क्या परमिशन मिली हुई है हमारे डेटा के साथ
 छेड़ छाड़ करने की मैं आपको एक एपलिकेशन का लिंक दे रहा हु जिसे आप अपने 
मोबाइल में डाल कर ये पता लगा सकते हो कि किस किस एप्लीकेशन को किस किस तरह
 की परमिशन मिली हुई है <a href="http://un-hack.me/" target="_blank">आप यहाँ क्लिक करके इस एप्लीकेशन को डाउनलोड कर सकते है</a>
 इसे डालने के बाद इस एप्प को ओपन करे और आपको जिस भी एप्लीकेशन पर टाऊट हो
 उसे अपने मोबाइल से हटा दे इस एप्लीकेशन के जरिये आप ये पता लगा सकते है 
कौन कौन सी एप्लीकेशन आपके sms पढ़ रही है आपकी गैलरी पर नजर रख रही आपके 
कॉन्टेक्ट नंबर पर नजर रख रही है ये एक तरह की खास एप्लीकेशन है जिसके 
जरिये आप उन सभी फ्रॉड एप्लीकेशन को हटा सकते हो जो बिना बात के आपके डाटा 
का इस्तेमाल कर रही है<br />
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjL-1VRsBpMVkN9kaTJ3vy1S7ET-eEPqj2LTzEZSPeberPxyKlMKeOrFaPEe17lQpeHrjyfYluB7vTxaFUM536tS_xrOTUAPBDD3klPseam0Mnh_KccegqeaEyIgNMUdDwQwT3i5WvDkq9r/s1600/mobile-phone-being-stolen.jpg" /></div>
ये तो बात थी एप्लीकेशन के जरिये ऐसे एप्प पर नजर रखने की लेकिन क्या आपको 
पता है जो भी डेटा आप डिलीट करते हो या व्हाट्सप्प के मैसेज डिलीट करते हो 
वो डिलीट नहीं होते बल्कि उनकी एक बहुत ही छोटी फाइल आपके मोबाइल में बन 
जाती है जिसके जरिये हम किसी भी टाइम उस डाटा को रिकवर कर सकते है इसका 
सबसे बड़ा उदाहरण रोज का इस्तेमाल होने वाली whatsapp एप्लीकेशन का ही देता 
हु<br />
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjY5UMhNPVOmesobj-7YpOa6E0uKMEaR_mJeFgtmPhXcgzGbyWiLGs0VSnaAqR_OU9mUzV8n0PdBi7_XR2Nj9G1dfbJ0zleHZ3lxpU-JhxAlMCy_BdtKXLIWjA3rI6S92U3RVckbEIBOug4/s1600/images.jpg" /></div>
आपके परिवार में मौजूद आपके बच्चे लड़के या लडकिया या आप खुद भी अक्सर 
whatsapp पर ही किसी के भी साथ पर्सनल चेट करते है और हम उस चैट को ये सोच 
कर डिलीट कर देते है की कोई हमारी पर्सनल बाते देख या पढ़ ना ले whatsapp 
कभी भी आपकी उन चेट को या फोटो को डिलीट नहीं करता whatsapp आपकी कुछ फाइल 
बनाता है जिन्हे आप पढ़ नहीं सकते अगर मुझ जैसी थोड़ी जानकारी रखने वाला भी 
कोई भी मेंबर आपकी फेमली में मौजूद है तो वो बहुत ही आराम से आपके whatsapp
 की सभी चेटिंग पढ़ सकता है आपके सभी मैसेज को रिकवर कर सकता है<br />
<br />
अगर आप अपने खुद के या अपने बच्चो के whatsapp मैसेज को पढ़ना चाहते है तो 
आपको अपने मोबाइल फोन की स्टोरेज में जाकर Whatsapp वाले फोल्डर को खोले 
यहाँ आपको Databases नाम का फोल्डर मिलेगा whatsapp के अंदर डिफाल्ट सेटिंग
 ये होती है कि ये भारतीय समय के अनुसार 4.00  बजे आपके whatsapp की सभी 
बैकअप फाइल इसी फोल्डर के अंदर सेव होती रहती है इन्ही फाइल के अंदर आपकी 
सभी फोटो सभी वीडियो सभी चेटिंग छुपी होती है अगर कभी आपका whatsapp डिलीट 
हो जाए तब भी आप इन databases की फाइल से अपने whatsapp की सभी चेटिंग 
वापिस ला सकते हो अगर आप अपने whatsapp की चेटिंग को ऑनलाइन देखना है तो वो
 भी आप बहुत आराम से कर सकते है<br />
<br />
whatsapp की चेटिंग को ऑनलाइन देखने के लिए आप बस गूगल पर जाकर इसके बारे 
में सर्च करे और और जो ऑनलाइन साइट खुले वहा आपको अपने whatsapp की 
databases की फाइल  अपलोड करना है अपलोड करते ही आपके whatsapp की सभी 
चेटिंग आपको दिख जायेगी इस तरह आप अपने परिवार में मौजूद किसी भी मेंबर की 
चेटिंग को पढ़ सकते हो<br />
<br />
इस से जुडी एक पोस्ट बहुत ही जल्दी आप लोगो के बीच दूंगा ताकि आपको पता लग 
सके की आपकी डिलीट करी हुई फाइल डिलीट नहीं होती बल्कि कोई भी उन्हें रिकवर
 करके पढ़ सकता है<br />
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiz9hZtAuFpVahHhb_w-cxDN7kGqFS0yrcXejMSDLbTLI_2V7itesQ5eA0pZBe6mDJRNvJGhw3hOb2PaLRzLLATJS8JsYGjYDJ21vEIEI7kVxrOx6QCVtDWXr8nh9rnzdEoU50ctoxhyCsz/s1600/cell-phone.jpg" /></div>
ये तो थी नार्मल whatsapp की बात लेकिन क्या आप जानते हो अगर आप अपने फोन 
को रीसेट भी कर दो उसका सभी डेटा अपने फोन से हटा देते हो तब भी कोई भी 
आपके उस डेटा को रिकवर कर सकता है आपने देखा होगा जब हम किसी पेन ड्राइव 
हार्ड डिस्क या मैमोरी कार्ड को फॉर्मेट करे है तो हमारे सामने दो ओप्सन्स 
आते है quick formet का और formet और 99% लोग क्विक फॉर्मेट का ही ओप्सन्स 
सलेक्ट करके अपनी डिवाइस को फॉर्मेट करते है बल्कि ऐसा नहीं करना चाहिए 
quick formet से आपकी फाइल डिलीट नहीं होती बल्कि quick फॉर्मेट से आपकी 
फाइल की बिट चेंच होती है जिसे आप रीड नहीं कर पाते आपको लगता है कि आपका 
सभी डाटा डिलीट हो गया लेकिन ऐसा बिलकुल नहीं होता किसी भी रिकवरी 
सॉफ्टवेयर के द्वारा इन फाइल को रिकवर किया जा सकता है लेकिन अगर आप quick 
formet की जगह नार्मल फॉर्मेट करोगे तो चांस बहुत कम रहेंगे डेटा रिकवरी के
 इसलिए जब भी किसी भी ड्राइव को फॉर्मेट करे तो quick formet ना करे नार्मल
 फॉर्मेट करे इसमें टाइम तो ज्यादा लगेगा लेकिन आपके मेमोरी कार्ड या फोन 
का डेटा किसी के हाथ नहीं लगेगा<br />
<div class="separator" style="clear: both; text-align: center;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgg8IxiM0jhdmMrf0dd7IKLZdxBDTOoRAnISnLkLrCGNhzT35Zk8ewHTE4yN3efcQTLHSY7nSorqBWJCmxUGXDGW9lSfXeMKGSi_YhnL_by4J2WmZO1ti864txVDBNOxlWbyjPrCmStioyc/s1600/images.jpg" /></div>
मेरे कंप्यूटर दुनिया ग्रुप में अक्सर लोग मोबाइल फोन को रुट करने की 
जानकारी पूछते है मैं किसी को इसकी जानकारी नहीं देता मैं अपने हर मेंबर को
 इशारो इशारो में समझाने की कोसिस करता हु कि फोन को रुट मत करो लेकिन शायद
 कोई समझना ही नहीं चाहता उनको तो बस नयी नयी एप्लीकेशन को अपने मोबाइल पर 
रन करना है मेरे ग्रुप में ऐसे मेंबर मौजूद है जो ऐसे लोगो की हेल्प कर 
देते है जिन्हे अपना मोबाइल रुट करना होता है लेकिन मैं मोबाइल फोन रुट के 
मामले में किसी की हेल्प नहीं करता क्युकी मैं जानता हु फोन रुट करने से 
किसी के भी फोन का कोई भी डेटा ऑनलाइन किसी के भी सर्वर पर अपलोड हो सकता 
है आपके मोबाइल फोन में आने वाले हर sms को कोई भी हैकर आराम से हैक कर 
सकता है अक्सर लोग अपने मोबाइल फोन को जेल ब्रेक या रुट कर देते है हलाकि 
मोबाइल फोन को रुट करके आप मोबाइल फोन पर किसी भी तरह की एप्लीकेशन रन कर 
सकते है हैकिंग से जुड़े बहुत से टूल रुट हुवे मोबाइल पर ही रन होते है मतलब
 फोन रुट करके आपको आजादी होती है कुछ भी करने की चाहे किसी wifi के 
पासवर्ड को ब्रैक करने की बात हो या सॉफ्टवेयर को अपडेट करने की बात<br />
<div class="separator" style="clear: both; text-align: center;">
<img border="0" height="180" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjdxJETlU0oA2Xy6idRXL99S5jptf2OFbxz-Euv7ntcuia-CuV4FwA6JaTwHdstvPBPxdUkQYElKzsPmlPXY1PSNTtZm0bGodK0F4VPkgJuUNEyFTwIucb4n9GVWT95HyLlEeQ0rf0xbtRX/s1600/mobile+phon+root.jpg" width="320" /></div>
अगर आप मुझ से पूछोगे की क्या आपने भी अपना पर्सनल फोन रुट किया है तो मेरा
 जवाब नहीं होगा क्युकी मैं ऐसा बिलकुल भी नहीं करूँगा मेरी मेल के पासवर्ड
 का कोड ,मेरे ऑनलाइन शॉपिंग कार्ड का OTP कोड, मेरा पूरा पर्सनल डेटा, 
मेरे कॉन्टेक्ट नंबर, मेरे फैमली के फोटो, मेरी whatsapp चेटिंग, मेरे बैंक
 की डिटेल सभी कुछ मेरे फोन में सेव है और मेरी पूरी सेफ्टी के साथ सबकी 
नजरो से बची है अगर मैंने नयी नयी एपलिकेशन चलाने के चक्कर में अपना फोन 
रुट कर दिया तो फिर मेरे डेटा से मेरी सेफ्टी हट जायेगी कोई भी हेकर मेरी 
पर्सनल डिटेल को चुटकियो में कही से भी किसी भी टाइम देख सकता है और उसकी 
इस हरकत का मुझे पता भी नहीं चलेगा क्युकी मेरा फोन रुट होगा और रुट मोबाइल
 पर किसी भी तरह की कोई भी सेफ्टी काम नहीं करती<br />
<div class="separator" style="clear: both; text-align: center;">
<img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhBSlT2Vk2OpugfrzuFh7cXboCQIe3ddlLoaXOj6UBeTSztecqdl9o3mEp-3a1CkipLEMTf7NEQn1YVZr3yko00wfHnTvwBJ33ojxv03VehZmLI59CcUC3JynHscL2WHLK3uYbALynFq09N/s1600/images.jpg" /></div>
हा अगर मुझे कोई फोन रुट करना ही होगा तो मैं ऐसा फोन रुट करना पसंद करूँगा
 जिसके अंदर मेरा कोई भी पर्सनल डेटा नहीं होगा और मैं उन सभी लोगो को ये 
ही बोलना चाहूंगा कुछ एप्लीकेशन के चक्कर में आकर अपने फोन को रुट ना करे 
क्युकी मोबाइल फोन रुट या चेल ब्रैक करने से आपके मोबाइल की पर्सनल डिटेल 
किसी के भी हाथ लग सकती है फोन रुट करके आप अपनी सभी डिटेल ऑनलाइन बैठे 
हैकरों को दे रहे हो जिनका काम ही बस लोगो की जानकारी चुराना है आप लोगो के
 लिए शायद ये बहुत बड़ी बात ना हो लेकिन फोन रुट करके आप अपने पैर में खुद 
ही कुल्हाड़ी मार रहे हो<br />
<br />
अगर आप फोन रुट करके नई नई एप्लीकेशन रन करना चाहते है तो किसी ऐसे फोन को 
रुट करे जिस पर आपकी पर्सनल डिटेल ना हो आज की इस इतनी बड़ी पोस्ट में मैं 
बस आपको यह ही बताना चाहता हु कि आप खुद ही अपने फोन और अपने डेटा की 
सेफ्टी कर सकते हो ये सब कुछ आपके ही हाथ में है अगर आप ये सोचो यार फोन 
रुट करके एक अच्छा सा एंटीवायरस डाल लूंगा जो की मेरे फोन की सेफ्टी करेगा 
तो आप गलत हो फोन रुट या जेल ब्रेक होने के बाद आप कितने भी एंटी वायरस या 
सेफ्टी अपने मोबाइल में लगा लो आपका मोबाइल का डेटा बच नहीं पायेगा हैकरों 
की नजर से ................क्युकी खुद ही आपने फोन रुट करके गलत किया है और
 गलत करने वालो का कोई भी साथ नहीं देता चाहे बात रियल लाइफ की हो या 
वर्जुवल दुनिया की आपके फोन की सेफ्टी आपके हाथ में है अब आपको खुद ही 
देखना है कि अपने स्मार्ट फोन को रुट करके एन्जॉय करना चाहते हो या फिर फोन
 को रुट करके अपने फोन का पर्सनल डेटा हेकरो तक पहुचाना चाहते हो<br />
<br />
आज की पोस्ट के द्वारा मेरे उन सभी मेंबर को फोन को रुट करने  वाले फायदा 
या नुकसान दोनों का जवाब मिल गया है अब फैसला आपको खुद ही करना है कि अपना 
पर्सनल फोन रुट करना सही ह या गलत .........मिलते है अगली पोस्ट में और भी 
ज्ञानवर्धक जानकारियो के साथ। ................<br />
</div>
</div>
<br /><br /><a href="http://www.hinditechguru.com/2015/04/mobile-phone-root-jailbreak-hacking.html#ixzz3jAgIL1eU" style="color: #003399;"></a></div>

Mobile phone root & jailbreak, hacking से जुडी जानकारी आप सभी के लिए

Mobile phone root & jailbreak, hacking से जुडी जानकारी आप सभी के लिए आज की पोस्ट के जरिये मैं आप लोगो का बताने वाला हु स्मार...

Duqu Analysis and Detection Tool by NSS Labs

CDRHINDI 0 Eathical hacking, Hacking, Pentesting January 25, 2015

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div style="text-align: -webkit-auto;">
<h3 class="post-title entry-title" style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 22px; font-weight: normal; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0.75em; position: relative;">
<span style="color: white;">Duqu Analysis and Detection Tool by NSS Labs</span></h3>
<div class="post-header" style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 11px; line-height: 1.6; margin-bottom: 1.5em; margin-left: 0px; margin-right: 0px; margin-top: 0px;">
<div class="post-header-line-1">
</div>
</div>
<div class="post-body entry-content" id="post-body-2508859838810899781" style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 1.4; position: relative; width: 3028px;">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="background-color: white; font-family: Georgia, 'Times New Roman', serif; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">
<div class="separator" style="clear: both; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: center;">
<span style="font-size: medium;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgo6JXUTY5ImiQIfbr4iULi83AHZb7g35_PnLHjzrFr3MrD2-MGYZYAAzRDD_pxPy5dglVS0CIe85TBl0n7kETnEK4bj7AtqNB3mOJ15IeMXU-f9459KSVtkK4tr_4v74wIoJ6T7JFeIzXw/s1600/APwcritics_20110818200047583926-420x0.jpg" rel="nofollow" style="clear: left; color: blue; cursor: pointer; float: left; margin-bottom: 1em; margin-left: 0px; margin-right: 1em; margin-top: 0px; outline-style: none; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgo6JXUTY5ImiQIfbr4iULi83AHZb7g35_PnLHjzrFr3MrD2-MGYZYAAzRDD_pxPy5dglVS0CIe85TBl0n7kETnEK4bj7AtqNB3mOJ15IeMXU-f9459KSVtkK4tr_4v74wIoJ6T7JFeIzXw/s320/APwcritics_20110818200047583926-420x0.jpg" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(229, 229, 229); border-bottom-style: solid; border-bottom-width: 0px; border-color: initial; border-image: initial; border-left-color: rgb(229, 229, 229); border-left-style: solid; border-left-width: 0px; border-right-color: rgb(229, 229, 229); border-right-style: solid; border-right-width: 0px; border-top-color: rgb(229, 229, 229); border-top-style: solid; border-top-width: 0px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; clear: both; margin-bottom: 4px; margin-left: 0px; margin-right: 4px; margin-top: 0px; max-height: 1500px; max-width: 610px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; position: relative;" width="320" /></a></span></div>
<span style="font-size: medium;"><span class="Apple-style-span" style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><br style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;" /></span><br style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;" />NSS Labs has built a new, free tool that detects known and newly created Duqu drivers that have infiltrated systems, thus allowing security experts to further analyze the “<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">functionality, capabilities and ultimate purpose of DuQu.</b>”. The Tool is available free.<br style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;" /><br style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;" />Duqu is notorious worm that exploit Windows Zero-day Vulnerability. Microsoft released temporary fix yesterday for this vulnerability . According to the test, NSS tool Success rate is 100%, zero false positivies. Developers said it is using advanced pattern recognition techniques, it is also capable of detecting new drivers as they are discovered.Two new drivers were discovered after the tool was completed, and both were detected by the NSS tool with no updates required.<br style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;" /><br style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;" />It seems that Duqu contains similar code and utilizes similar techniques to Stuxnet. More precisely, it seems to make use of digital certificates that appear as legitimate, but it's far too early to describe it as Stuxnet 2.<br style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;" /><b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span class="Apple-style-span" style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">More Info :</span></b></span></div>
<ul style="background-color: white; font-family: Georgia, 'Times New Roman', serif; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">
<li style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-size: medium;">DuQu contains similar code to that used by Stuxnet.</span></li>
<li style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-size: medium;">DuQu uses similar techniques to Stuxnet, specifically the use of drivers signed by “legitimate” digital certificates. It is not known whether those certs were stolen or manufactured by the attackers following the compromise of a certificate authority (CA.)</span></li>
<li style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-size: medium;">DuQu is not self-replicating (although some theorize that it can be commanded to replicate itself across network shares); it requires the use of an exploit-based “dropper” to install it on a system.</span></li>
<li style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-size: medium;">The installer, which utilized a zero day kernel exploit delivered via a Microsoft Word document, has now been recovered and is currently being analyzed.</span></li>
<li style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-size: medium;">DuQu installs a keylogger in order to record keystrokes and collect other system information.</span></li>
<li style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-size: medium;">Stolen information is packaged into encrypted and compressed image files for subsequent exfiltration.</span></li>
<li style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-size: medium;">DuQu was communicating over HTTP/HTTPS with its intial command and control (CC) server in India; a custom CC protocol was implemented using modified image files. As of this writing, the CC server has been deactivated.</span></li>
<li style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-size: medium;">DuQu was initially configured with a fixed life, set to deactivate after 36 days, although additional components can be installed to extend this as required.</span></li>
</ul>
<div style="background-color: white; font-family: Georgia, 'Times New Roman', serif; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">
<span style="font-size: medium;"><span class="Apple-style-span" style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><a href="https://github.com/halsten/Duqu-detectors" rel="nofollow" style="color: blue; cursor: pointer; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-style: none; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;"><b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Download open-source scanner tool</b></a></span></span></div>
</div>
</div>
<span style="font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="font-size: 12px;"><br /></span></span></div>
</div>

Duqu Analysis and Detection Tool by NSS Labs

Duqu Analysis and Detection Tool by NSS Labs NSS Labs has built a new, free tool that detects known and newly created Duqu dri...

Bugtraq-I : Distribution for Pentesting and forensics

CDRHINDI 0 Eathical hacking, Hacking, Pentesting January 25, 2015

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<h3 class="post-title entry-title" style="font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 22px; font-weight: normal; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0.75em; position: relative; text-align: -webkit-auto;">
<span style="background-color: white;">Bugtraq-I : Distribution for Pentesting and forensics</span></h3>
<div class="post-header" style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 11px; line-height: 1.6; margin-bottom: 1.5em; margin-left: 0px; margin-right: 0px; margin-top: 0px; text-align: -webkit-auto;">
<div class="post-header-line-1">
</div>
</div>
<div class="post-body entry-content" id="post-body-6253283849822507380" style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 1.4; position: relative; text-align: -webkit-auto; width: 3028px;">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: justify;">
<div style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;">
<img alt="Bugtraq-I+Distribution+for+Pentesting+and+forensics" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRAPk4hd3-q3MTQNJxLP2ZnQmrbys2tp1sIIn6fw2VJxoMBVC8uCzVjDDYayJ-YRZOznHs5jH9SREleJsJdy967Q1_zJU0bTA2LezACOW6rZ8QQJGmIzA-Ib3rXCR4MVJPyL4HkW7QzkMY/s400/Bugtraq-I+Distribution+for+Pentesting+and+forensics.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; border-bottom-color: rgb(229, 229, 229); border-bottom-style: solid; border-bottom-width: 1px; border-image: initial; border-left-color: rgb(229, 229, 229); border-left-style: solid; border-left-width: 1px; border-right-color: rgb(229, 229, 229); border-right-style: solid; border-right-width: 1px; border-top-color: rgb(229, 229, 229); border-top-style: solid; border-top-width: 1px; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px;" width="400" /></div>
</div>
<span style="font-family: Georgia, 'Times New Roman', serif;"><span style="background-color: white; line-height: 24px; text-align: justify;">Bugtraq system offers the most comprehensive distribution, optimal, stable and automatic security to date. Bugtraq is a distribution based on the 2.6.38 kernel has a wide range of penetration and forensic tools. Bugtraq can be installed from a Live DVD or USB drive, the distribution is customized to the last package, configured and updated the kernel. The kernel has been patched for better performance to recognize a variety of hardware, including wireless injection patches pentesting that other distributions do not recognize.</span> </span><br /><span style="background-color: white; line-height: 24px; text-align: justify;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span><h4 style="text-align: left;">
<br /></h4>
<div style="text-align: justify;">
<br /></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-family: Georgia, 'Times New Roman', serif;">Some of the special features that you can appreciate are:</span></b></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;">· Administrative improvements of the system for better management of services.</span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;">· Expanded the range of recognition for injection wireless drivers.</span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;">· Patching the kernel 2.6.38 to recognize 4 gigs of RAM in 32-bit.</span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;">· Tools perfectly configured, automated installation scripts and tools like Nessus, OpenVAS, Greenbone, Nod32, Hashcat, Avira, BitDefender, ClamAV, Avast, AVG, etc...</span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;">· Unique Scripts from Bugtraq-Team (SVN updates tools, delete tracks, backdoors, Spyder-sql, etc.)</span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;">· Stability and performance optimized: Enhanced performance flash and java and start purging unnecessary services. So that the user can use only the services you really want.</span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;">· It has incorporated the creation of the user in the installation, which is created with all system configurations.</span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;">· We are the distribution and Forensic Pentesting with more tools built and functional, well organized menu without repetition of the same to avoid overwhelming the user.</span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;"><br style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;" /></span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<a href="http://bugtraq-team.com/index.php/en/descargas-2" rel="follow" style="color: blue; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-color: initial; outline-style: none; outline-width: initial; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;"><b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="color: black; font-family: Georgia, 'Times New Roman', serif;">Download Bugtraq-I</span></span></b></a></div>
</div>
</div>
<span style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 12px; text-align: -webkit-auto;">- See more at: http://hckr333-sh.blogspot.in/search?updated-max=2012-08-17T09:45:00%2B05:30&max-results=3&start=3&by-date=false#sthash.RHW1iX3R.dpuf</span>
</div>

Bugtraq-I : Distribution for Pentesting and forensics

Bugtraq-I : Distribution for Pentesting and forensics Bugtraq system offers the most comprehensive distribution, optimal, stab...

FTP and TELNET Password Cracking with THC Hydra

CDRHINDI 0 Eathical hacking, Hacking, Internet tips and tricks, website hacking January 25, 2015

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<h3 class="post-title entry-title" style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 22px; font-weight: normal; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0.75em; position: relative; text-align: -webkit-auto;">
<span style="color: red;">FTP and TELNET Password Cracking with THC Hydra</span></h3>
<div class="post-header" style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 11px; line-height: 1.6; margin-bottom: 1.5em; margin-left: 0px; margin-right: 0px; margin-top: 0px; text-align: -webkit-auto;">
<div class="post-header-line-1">
</div>
</div>
<div class="post-body entry-content" id="post-body-2213857167816426606" style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 1.4; position: relative; text-align: -webkit-auto; width: 3028px;">
<div dir="ltr" style="text-align: left;" trbidi="on">
<br /><div class="MsoNormal" style="background-color: white; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><span style="line-height: 19.600000381469727px;">Password is the only thing which protects secure information on the network systems. If we want to access secure information, we must be an authorize member of the system or network.  According to many password security study passwords are the biggest </span><span style="line-height: 19.59090805053711px;">security holes</span><span style="line-height: 19.600000381469727px;"> . If any unauthorized managed to get the right password, he will be able to access the secure data on the system.</span></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Although many security systems try to improve security by various methods but there are some tools which always break the security easily. THC Hydra is the tool which shows how easy it is to gain the unauthorized access of a network system from remote to a system.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">This is not the only tool which can crack FTP or Telnet passwords of a remote computer. There are various tools available which can do this job and those also supports various protocols and use parallel connection to crack. But THC Hydra is the best and known for its speed and efficiency.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">THC Hydra performs brute force attack based on password dictionary.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>Bruteforce Attack</b>: Bruteforce attack is the most widely used attack for password cracking. This attack uses all possible permutations of passwords until the correct password is found.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">For example: If the password is 3 characters long and consists of both letters and numbers. Then a brute force attack will use 2,38,328 different password at your password.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">For First character: total lower case letters (26) + total upper case letters (26) + total numbers (10) = 62</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">For Second character: same = 62</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">For Third character: same = 62</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Total permutations = 62*62*62 = 2,38,328</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>About THC Hydra:</b> Before knowing about the password cracking with this tool, you must know few things about this tool.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">THC Hydra is the fast network logon cracker. It connects with multiple parallel connections to the remote systems and then starts its attack. It is able to crack passwords of various kinds of services.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">If we compare this tool with other available logon password crackers, this tool supports more services and protocols. And it is faster than other tools.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>List of Protocols, THC Hydra supports: </b>These are the protocols which this tool supports. We can crack password of these services with this nice logon cracker.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">AFP, Cisco AAA, Cisco auth, Cisco enable, CVS, Firebird, FTP, HTTP-FORM-GET, HTTP-FORM-POST, HTTP-GET, HTTP-HEAD, HTTP-PROXY, HTTPS-FORM-GET, HTTPS-FORM-POST, HTTPS-GET, HTTPS-HEAD, HTTP-Proxy, ICQ, IMAP, IRC, LDAP, MS-SQL, MYSQL, NCP, NNTP, Oracle Listener, Oracle SID, Oracle, PC-Anywhere, PCNFS, POP3, POSTGRES, RDP, Rexec, Rlogin, Rsh, SAP/R3, SIP, SMB, SMTP, SMTP Enum, SNMP, SOCKS5, SSH (v1 and v2), Subversion, Teamspeak (TS2), Telnet, VMware-Auth, VNC and XMPP.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>Supported Platforms: </b>This network logon cracker is available for most of the available platforms. This is the list:</span></div>
<div class="MsoListParagraphCxSpFirst" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">·         All UNIX platforms (linux, *bsd, solaris, etc.)</span></div>
<div class="MsoListParagraphCxSpMiddle" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">·         Mac OS/X</span></div>
<div class="MsoListParagraphCxSpMiddle" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">·         Windows with Cygwin (both ipv4 and ipv6)</span></div>
<div class="MsoListParagraphCxSpLast" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">·         Mobile systems based on Linux or Mac OS/X (e.g. Android, iPhone, Zaurus, iPaq)</span></div>
<div class="MsoListParagraphCxSpLast" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Hydra Explaind and its usage:<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">For command line usage, we will use following command:</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">$ hydra [[[-l LOGIN|-L FILE] [-p PASS|-P FILE]] | [-C FILE]] [-e ns] [-o FILE] [-t TASKS] [-M FILE [-T TASKS]] [-w TIME] [-f] [-s PORT] [-S] [-vV] server service [OPT]<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Here different argument has different meaning. Read the meaning of these command line arguments below:</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-R<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">It is used to restore a previous aborted/crashed session</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-S<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">connect via SSL to the target system</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-s<port><o:p></o:p></port></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">if the service is on a different default port, define it here. Write –s before the port.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-l <login>or -L<file><o:p></o:p></file></login></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">login with LOGIN name, or load several logins from FILE. Be sure for case of l in both argument. Small for username ad capital for username list file.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-p <pass>or -P<file><o:p></o:p></file></pass></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">try password PASS, or load several passwords from FILE. Same case for p will be applied here. If you want to try single password use small p. But use capital P for the password list.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-e<ns><o:p></o:p></ns></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">additional checks, "n" for null password, "s" try login as pass</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-C<file><o:p></o:p></file></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">colon seperated "login:pass" format, instead of -L/-P options. This file will have colon seperated login and password. This is also a better idea to use.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-M<file><o:p></o:p></file></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">server list for parallel attacks, one entry per line</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-o<file><o:p></o:p></file></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-size: medium;"><span style="font-family: Times, 'Times New Roman', serif;">It will write found login/password pairs to FILE instead of stdout</span><span style="font-family: Times, 'Times New Roman', serif; line-height: 19.600000381469727px;">.</span></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-f<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">This argument will exit after the first found login/password pair (per host if -M). It will not check for any other combinattion which may be matched if we are using username list and password list together.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-t<tasks><o:p></o:p></tasks></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">run TASKS number of connects in parallel (default: 16)</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-w</span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">defines the max wait time in seconds for responses (default: 30)</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-v / -V<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">verbose mode / show login+pass combination for each attempt</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">server<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">the target server (use either this OR the -M option)</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">service<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">the service to crack. Supported protocols: telnet ftp pop3[-ntlm] imap[-ntlm] smb smbnt http[s]-{head|get} http-{get|post}-form http-proxy cisco cisco-enable vnc ldap2 ldap3 mssql mysql oracle-listener postgres nntp socks5 rexec rlogin pcnfs snmp rsh cvs svn icq sapr3 ssh2 smtp-auth[-ntlm] pcanywhere teamspeak sip vmauthd firebird ncp afp</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">How to crack Telnet password with THC Hydra:<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">First of all download, Hydra from the official website. If you are using windows Version, you will have to work on console. These are no GUI for windows users. I am showing it on windows. Download the zip file and extract it on the system.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Now follow these steps:<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Click on start and type CMD in search bar (in windows 7) and open command prompt.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Now change the command prompt location to the hydra folder by using CD command.</span></div>
<div class="separator" style="background-color: white; clear: both; line-height: 19.600000381469727px; text-align: justify;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSMDq7JCDC3a-UVJIJQyVaSYFsgCa_HS3l6vzkd1rdfr5LuS2WPDlJ5I1Cieuvr5slJnSZBoQtnRld3iwrSSVNZobrgvXxQB7jWEblw2AnyghEYgDbKjDtgWS4vRDBFB7A6u0FJXvDEYEA/s1600/thc1.png" imageanchor="1" style="border-bottom-style: none; border-color: initial; border-image: initial; border-left-style: none; border-right-style: none; border-top-style: none; border-width: initial; color: blue; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span style="color: black; font-family: Times, 'Times New Roman', serif; font-size: medium;"><img border="0" height="88" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSMDq7JCDC3a-UVJIJQyVaSYFsgCa_HS3l6vzkd1rdfr5LuS2WPDlJ5I1Cieuvr5slJnSZBoQtnRld3iwrSSVNZobrgvXxQB7jWEblw2AnyghEYgDbKjDtgWS4vRDBFB7A6u0FJXvDEYEA/s320/thc1.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(221, 221, 221); border-bottom-style: solid; border-bottom-width: 4px; border-color: initial; border-image: initial; border-left-color: rgb(221, 221, 221); border-left-style: solid; border-left-width: 4px; border-right-color: rgb(221, 221, 221); border-right-style: solid; border-right-width: 4px; border-top-color: rgb(221, 221, 221); border-top-style: solid; border-top-width: 4px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="320" /></span></a></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: center;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Figure 1: THC Hydra</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Now we will execute the hydra by typing <b>hydra.exe </b>in the command prompt<b><o:p></o:p></b></span></div>
<div class="separator" style="background-color: white; clear: both; line-height: 19.600000381469727px; text-align: justify;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKv652EmRKD1jeFKDoJTO6ovnYr07oTXkj1FmJ0ZjkzmxWLaWC-1Myue1VEQJcpJ5z1DECUrB_ejlPjXQ74IVjdoHvkUZNpMIF-UXGUBHXuUAe52s4rSt7JLYiVlUKek-jE-61vlFZvF4l/s1600/thc1.png" imageanchor="1" style="border-bottom-style: none; border-color: initial; border-image: initial; border-left-style: none; border-right-style: none; border-top-style: none; border-width: initial; color: blue; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span style="color: black; font-family: Times, 'Times New Roman', serif; font-size: medium;"><img border="0" height="229" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKv652EmRKD1jeFKDoJTO6ovnYr07oTXkj1FmJ0ZjkzmxWLaWC-1Myue1VEQJcpJ5z1DECUrB_ejlPjXQ74IVjdoHvkUZNpMIF-UXGUBHXuUAe52s4rSt7JLYiVlUKek-jE-61vlFZvF4l/s320/thc1.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(221, 221, 221); border-bottom-style: solid; border-bottom-width: 4px; border-color: initial; border-image: initial; border-left-color: rgb(221, 221, 221); border-left-style: solid; border-left-width: 4px; border-right-color: rgb(221, 221, 221); border-right-style: solid; border-right-width: 4px; border-top-color: rgb(221, 221, 221); border-top-style: solid; border-top-width: 4px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="320" /></span></a></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: center;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>Figure 2:</b> Running Hydra For First Time</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Now we need to select the target computer. At this moment we can use Nmap for scanning IP and open ports. So download the Nmap in your system. Windows users should download windows version. After downloading Nmap, scan for IP range. Also check for open ports in these IP addresses.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">How to Use Nmap?<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Use of Nmap is really simple. If you do not know, I am writing something in short which will help you.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Suppose I am in a network which has IP series of 192.168.0.x and I want to break into the telnet of a system in this network. I will use Nmap to find my target system.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">First of all, we will scan to check which systems are alive on the network. Use Nmap for simple ping and get the list of all systems alive on the network. Use this command:</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">nmap -sP 192.168.0.1-10<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">now see the results of this ping scan. You will get the list of ip addresses of all systems which are alive. These systems can be used as target so I will pick one from the list.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">I have chosen the system with ip address <b>192.168.0.7<o:p></o:p></b></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-size: medium;"><span style="font-family: Times, 'Times New Roman', serif;">Now we will check whether the TELNET port is open in the target computer or not. So use this command for simple port scan</span><span style="font-family: Times, 'Times New Roman', serif; line-height: 19.600000381469727px;">:</span></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">nmap -sS -sV -P 0 -T5 -O 192.168.0.7<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">This command will show all running service on the target computer. If Telnet service is running on the target system, we are ready for the attack, otherwise we will have to select another computer for the attack.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">After selecting the target, we will start attack on it. After knowing that Telnet port is open we will use Hydra to attack on it.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">There are two things we need to have before the attack. Username list and a password list. Username list is being used in case we do not know the username. Password list will be the possible list of passwords which will be used by hydra for brute forcing.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>Case 1: </b>Suppose we know the username. Let us assume that the username for the target telnet is <b>admin.<o:p></o:p></b></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Now we will use the command to run the attack.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: center;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">hydra -l admin -P passlist.txt 192.168.0.7 telnet<o:p></o:p></span></b></div>
<div class="separator" style="background-color: white; clear: both; line-height: 19.600000381469727px; text-align: justify;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKS5nczCYTOCrb4Xz_iYGw9rw9HWTGSGp2kiyf8N7D0X2rQJ0TrSdvDD68qsJhkk_8ExPWaXjhzLSpS35q_gy3dJcJCoUsYCJz7-AqA7tZ2Lno2VMGFF9OSgxuiB12_aQmG8aZRoh2zLi3/s1600/thc1.png" imageanchor="1" style="border-bottom-style: none; border-color: initial; border-image: initial; border-left-style: none; border-right-style: none; border-top-style: none; border-width: initial; color: blue; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span style="color: black; font-family: Times, 'Times New Roman', serif; font-size: medium;"><img border="0" height="229" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKS5nczCYTOCrb4Xz_iYGw9rw9HWTGSGp2kiyf8N7D0X2rQJ0TrSdvDD68qsJhkk_8ExPWaXjhzLSpS35q_gy3dJcJCoUsYCJz7-AqA7tZ2Lno2VMGFF9OSgxuiB12_aQmG8aZRoh2zLi3/s320/thc1.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(221, 221, 221); border-bottom-style: solid; border-bottom-width: 4px; border-color: initial; border-image: initial; border-left-color: rgb(221, 221, 221); border-left-style: solid; border-left-width: 4px; border-right-color: rgb(221, 221, 221); border-right-style: solid; border-right-width: 4px; border-top-color: rgb(221, 221, 221); border-top-style: solid; border-top-width: 4px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="320" /></span></a></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: center;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Figure 3: attacking on Telnet of target system with username Admin<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Here passlist.txt is the list of possible passwords. Hydra will use each password for the selected username and will try to login. If a password from the list is matched, it will stop the scanning and show the username and <span style="position: static;"><span class="kLink" style="background-color: transparent; background-image: none; border-bottom-style: solid; border-bottom-width: 1px; border-left-style: none !important; border-left-width: 0px !important; border-right-style: none !important; border-right-width: 0px !important; border-top-style: none !important; border-top-width: 0px !important; display: inline !important; float: none !important; padding-bottom: 1px !important; padding-left: 0px !important; padding-right: 0px !important; padding-top: 0px !important; position: static; width: auto !important;">password </span><span class="kLink" style="background-color: transparent; background-image: none; border-bottom-style: solid; border-bottom-width: 1px; border-left-style: none !important; border-left-width: 0px !important; border-right-style: none !important; border-right-width: 0px !important; border-top-style: none !important; border-top-width: 0px !important; display: inline !important; float: none !important; padding-bottom: 1px !important; padding-left: 0px !important; padding-right: 0px !important; padding-top: 0px !important; position: static; width: auto !important;">combination</span></span> for the target telnet.</span></div>
<div class="separator" style="background-color: white; clear: both; line-height: 19.600000381469727px; text-align: justify;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0M0fVyzzQaDB7neA42GVlDZy-JNGImgQHbndxZvPiNPxUXNRopKZdqGRYPrP2FISQjaq4pL3hD3y7R06-evKeFtaOguU3jPEHjHW6FFfQLpfrZjVTDOTxVUwu7IhOk3A5P2crzcXru_C9/s1600/thc1.png" imageanchor="1" style="border-bottom-style: none; border-color: initial; border-image: initial; border-left-style: none; border-right-style: none; border-top-style: none; border-width: initial; color: blue; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span style="color: black; font-family: Times, 'Times New Roman', serif; font-size: medium;"><img border="0" height="26" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0M0fVyzzQaDB7neA42GVlDZy-JNGImgQHbndxZvPiNPxUXNRopKZdqGRYPrP2FISQjaq4pL3hD3y7R06-evKeFtaOguU3jPEHjHW6FFfQLpfrZjVTDOTxVUwu7IhOk3A5P2crzcXru_C9/s320/thc1.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(221, 221, 221); border-bottom-style: solid; border-bottom-width: 4px; border-color: initial; border-image: initial; border-left-color: rgb(221, 221, 221); border-left-style: solid; border-left-width: 4px; border-right-color: rgb(221, 221, 221); border-right-style: solid; border-right-width: 4px; border-top-color: rgb(221, 221, 221); border-top-style: solid; border-top-width: 4px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="320" /></span></a></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: center;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Figure 4: Cracked password for the username admin<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">If no password from the passlist.txt matched with the username, it will simply stop scan.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">In case, you want to save the scan results into a file, you will have to change the command and add the name of the output file into command line argument.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">hydra -l admin -P passlist.txt -o test.txt 192.168.0.7 telnet<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">This command will save the result to the output file test.txt.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>Case 2: </b>In case you do not know the username, you can use the guess list of username along with the password list. Now we will use the command to run the attack.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: center;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">hydra -L username.txt -P passlist.txt 192.168.0.7 telnet<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Here username.txt is the guess list for possible usernames for the target admin and passlist.txt is the guess list for possible passwords.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">To save the result into a output file we will use the similar command as I have already written. The only difference is that we will pass username list here.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">hydra -L username.txt -P passlist.txt -o test.txt 192.168.0.7 telnet<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Here: One thing to Note that using username and password list change one thing in the command which is not noticeable for all users. When I have executed the command for a single username, I used <b>–l admin </b>but I use <b>-L username.txt </b>when I used a list. Here see the difference between <b>–L </b>and<b>-l. </b>When use a single username, use small case of l but use capital L when use username list.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">If you are on Ubuntu or any other linux based operating system, this tool will be more easy to use. This tool comes with a nice GUI for Linux based operating systems. So you will not need to learn hydra commands for them. Working is similar and commands are executed in background of GUI.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">This was the short demonstration of Telnet password cracking with the use of HYDRA network logon cracker.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">How to crack FTP password with THC Hydra:<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">In previous section, I wrote about cracking Telnet password with Hydra. As I already told that this is a network logon cracker and it supports many network protolcols. So it is used to cracked most of the network login. Cracking FTP password is also the same as cracking telnet password.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">You just need to find the target system with FTP port open. And then use hydra to crack password with password dictionary. If you are not sure about the username, you can use username dictionary along with password dictionary.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Now we will use the command to run the attack.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: center;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">hydra -l admin -P passlist.txt 192.168.0.7 ftp<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">You can see that the command is similar. Only I have replaced the Telnet with ftp to tell Hydra that it has to attack on ftp port this time. You can change the target system IP accordingly. You can also use admin list as given below.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: center;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">hydra –L username.txt -P passlist.txt 192.168.0.7 ftp<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">All other things are similar. And you can replace this ftp to any other supported protocol.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>How to protect against Hydra attack: </b>Protection against these kind of Buteforcing attack is divided into three parts</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoListParagraphCxSpFirst" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">·         Always check your logs against suspicious activity. Log files will help to know more about the attacker.</span></div>
<div class="MsoListParagraphCxSpMiddle" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">·         Always use strong password with good length. Use both cases, number and a special characters.</span></div>
<div class="MsoListParagraphCxSpLast" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">·         Always restrict few number of invalid login and then block the login from that IP.</span></div>
<div class="MsoListParagraphCxSpLast" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoListParagraphCxSpLast" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>Conclusion: </b>THC Hydra is really a nice and effective networ logon cracker. It is best among all available network logon cracker tools. It is also used dictionary based attack with multiple connection at a time which makes it faster. So always use strong password which is hard to crack. If you will use a strong password with use of capital and small letters, numbers and special characters. These kind of passwords are really hard to crack as it makes more number of permutations. You can also setup server restriction. In this, you can disallow login after 3 invalid login. This will block bruteforce attack.</span></div>
</div>
</div>
<span style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 12px; text-align: -webkit-auto;">- See more at: http://hckr333-sh.blogspot.in/search?updated-max=2012-09-21T09:46:00%2B05:30&max-results=3#sthash.SzYObVA5.dpuf</span>
</div>