Arjunkotri: Pentesting

Home Hacking School Passwords Tips Hack Games Mobile Hacks Hack Tools HOME HACKING SCHOOL PASSWORDS TIPS HACK GAMES MOBILE HACKS HACK TOOLS HACKING BASICSHOW TO BECOME PENETRATION TESTER – SKILLSET FOR PEN TESTING HOW TO BECOME PENETRATION TESTER – SKILLSET FOR PEN TESTING

CDRHINDI 0 Pentesting July 23, 2015

<p dir="ltr">Basic Skills Needed for Penetration Testing :<br>
1. Good Knowledge of Operating System. I can’t stress how important it is. So many people want to become hackers or systems security experts, without actually knowing the system they’re supposed to be hacking or securing. It’s common knowledge that once you’re on a target/victim, you need to somewhat put on the hat of a sysadmin. After all, having root means nothing if you don’t know what to do with root. How can you cover your tracks if you don’t even know where you’ve left tracks? If you don’t know the OS in detail, how can you possibly know everywhere things are logged?</p>
<p dir="ltr">2. Good knowledge of networking, network protocols and IP address Concepts. Being able to list the OSI model DOES NOT qualify as knowing networking and network protocols. You must know TCP in and out. Not just that it stands for Transmission Control Protocol, but actually know that structure of the packet, know what’s in it, know how it works in detail. A good place to start is TCP/IP Illustrated by W. Richard Stevens (either edition works). Know the difference between TCP and UDP. Understand routing, be able to in detail describe how a packet gets from one place to another. Know how DNS works, and know it in detail. Understand ARP, how it’s used, why it’s used. Understand DHCP. What’s the process for getting an automatic IP address? What happens when you plug in? What type of traffic does your NIC generate when it’s plugged in and tries to get an automatically assigned address? Is it layer 2 traffic? Layer 3 traffic?</p>
<p dir="ltr">3. If you don’t understand the things in item 2, then you can’t possibly understand how an ARP Spoof or a MiTM attack actually works. In short how can you violate or manipulate a process, if you don’t even know how the process works, or worse, you don’t even know the process exists! Which brings me to the next point. In general you should be curious as to how things work. I’ve evaluated some awesome products in the last 10 years, and honestly, after I see it work, the first thing that comes to my mind is “how does it work”.</p>
<p dir="ltr">4. Learn some basic coding and scripting. Start with something simple like vbs or Bash. So if you don’t know scripting and basic coding yet, then its good time to start! Start learning to actually code/program or in short write basic software (hello world DOES NOT count :P).</p>
<p dir="ltr">5. Get yourself a basic firewall, and learn how to configure it to block/allow only what you want. Then practice defeating it. You can find cheap used routers and firewalls on ebay, or maybe ask your company for old ones. Start with simple ACL’s on a router. Learn how to scan past them using basic IP spoofing and other simple techniques. There’s not better way to understand these concepts than to apply them. Once you’re mastered this, you can move to a PIX, or ASA and start the process over again. Start experimenting with trying to push Unicode through it, and other attacks. Spend time on this site and other places to find info on doing these things. Really the point is to learn to do them.</p>
<p dir="ltr">6. Know some forensics! This will only make you better at covering your tracks. The implications should be obvious.</p>
<p dir="ltr">7. Eventually learn a programming language, then learn a few more. Don’t go and by a “How to program in C” book or anything like that. Figure out something you want to automate, or think of something simple you’d like to create. For example, a small port scanner. Grab a few other port scanners (like nmap), look at the source code, see if you can figure any of it out. Then ask questions on forums and other places.</p>
<p dir="ltr">8. Must have a desire and drive to learn new stuff. This is a must; It’s probably more important than everything else listed here. You need to be willing to put in some of your own time (time you’re not getting paid for), to really get a handle on things and stay up to date.</p>
<p dir="ltr">9. Learn a little about databases, and how they work. Go download mysql, read some of the tutorials on how to create si</p>
<div class="separator" style="clear: both; text-align: center;"> <a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZjF2Bq48WFdzKv6icXCaH2z3Ztip2gSwT-h1ji2K3jm6Ocg4EG_w-e5Z5gEbqHsZcr65TpIyK5I-WbVk0NcZD88TI-sftPY1KA60gKqRFe1yJAo-DN7WnfNbYu04yzIlTKnzy9Db2gAv0/s1600/How-to-become-penetration-tester-skillset-for-pen-testing.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"> <img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZjF2Bq48WFdzKv6icXCaH2z3Ztip2gSwT-h1ji2K3jm6Ocg4EG_w-e5Z5gEbqHsZcr65TpIyK5I-WbVk0NcZD88TI-sftPY1KA60gKqRFe1yJAo-DN7WnfNbYu04yzIlTKnzy9Db2gAv0/s640/How-to-become-penetration-tester-skillset-for-pen-testing.jpg"> </a> </div>

Home Hacking School Passwords Tips Hack Games Mobile Hacks Hack Tools HOME HACKING SCHOOL PASSWORDS TIPS HACK GAMES MOBILE HACKS HACK TOOLS HACKING BASICSHOW TO BECOME PENETRATION TESTER – SKILLSET FOR PEN TESTING HOW TO BECOME PENETRATION TESTER – SKILLSET FOR PEN TESTING

Basic Skills Needed for Penetration Testing : 1. Good Knowledge of Operating System. I can’t stress how important it is. So many people wan...

Duqu Analysis and Detection Tool by NSS Labs

CDRHINDI 0 Eathical hacking, Hacking, Pentesting January 25, 2015

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div style="text-align: -webkit-auto;">
<h3 class="post-title entry-title" style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 22px; font-weight: normal; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0.75em; position: relative;">
<span style="color: white;">Duqu Analysis and Detection Tool by NSS Labs</span></h3>
<div class="post-header" style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 11px; line-height: 1.6; margin-bottom: 1.5em; margin-left: 0px; margin-right: 0px; margin-top: 0px;">
<div class="post-header-line-1">
</div>
</div>
<div class="post-body entry-content" id="post-body-2508859838810899781" style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 1.4; position: relative; width: 3028px;">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="background-color: white; font-family: Georgia, 'Times New Roman', serif; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">
<div class="separator" style="clear: both; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: center;">
<span style="font-size: medium;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgo6JXUTY5ImiQIfbr4iULi83AHZb7g35_PnLHjzrFr3MrD2-MGYZYAAzRDD_pxPy5dglVS0CIe85TBl0n7kETnEK4bj7AtqNB3mOJ15IeMXU-f9459KSVtkK4tr_4v74wIoJ6T7JFeIzXw/s1600/APwcritics_20110818200047583926-420x0.jpg" rel="nofollow" style="clear: left; color: blue; cursor: pointer; float: left; margin-bottom: 1em; margin-left: 0px; margin-right: 1em; margin-top: 0px; outline-style: none; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;"><img border="0" height="241" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgo6JXUTY5ImiQIfbr4iULi83AHZb7g35_PnLHjzrFr3MrD2-MGYZYAAzRDD_pxPy5dglVS0CIe85TBl0n7kETnEK4bj7AtqNB3mOJ15IeMXU-f9459KSVtkK4tr_4v74wIoJ6T7JFeIzXw/s320/APwcritics_20110818200047583926-420x0.jpg" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(229, 229, 229); border-bottom-style: solid; border-bottom-width: 0px; border-color: initial; border-image: initial; border-left-color: rgb(229, 229, 229); border-left-style: solid; border-left-width: 0px; border-right-color: rgb(229, 229, 229); border-right-style: solid; border-right-width: 0px; border-top-color: rgb(229, 229, 229); border-top-style: solid; border-top-width: 0px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; clear: both; margin-bottom: 4px; margin-left: 0px; margin-right: 4px; margin-top: 0px; max-height: 1500px; max-width: 610px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; position: relative;" width="320" /></a></span></div>
<span style="font-size: medium;"><span class="Apple-style-span" style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><br style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;" /></span><br style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;" />NSS Labs has built a new, free tool that detects known and newly created Duqu drivers that have infiltrated systems, thus allowing security experts to further analyze the “<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">functionality, capabilities and ultimate purpose of DuQu.</b>”. The Tool is available free.<br style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;" /><br style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;" />Duqu is notorious worm that exploit Windows Zero-day Vulnerability. Microsoft released temporary fix yesterday for this vulnerability . According to the test, NSS tool Success rate is 100%, zero false positivies. Developers said it is using advanced pattern recognition techniques, it is also capable of detecting new drivers as they are discovered.Two new drivers were discovered after the tool was completed, and both were detected by the NSS tool with no updates required.<br style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;" /><br style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;" />It seems that Duqu contains similar code and utilizes similar techniques to Stuxnet. More precisely, it seems to make use of digital certificates that appear as legitimate, but it's far too early to describe it as Stuxnet 2.<br style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;" /><b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span class="Apple-style-span" style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">More Info :</span></b></span></div>
<ul style="background-color: white; font-family: Georgia, 'Times New Roman', serif; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">
<li style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-size: medium;">DuQu contains similar code to that used by Stuxnet.</span></li>
<li style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-size: medium;">DuQu uses similar techniques to Stuxnet, specifically the use of drivers signed by “legitimate” digital certificates. It is not known whether those certs were stolen or manufactured by the attackers following the compromise of a certificate authority (CA.)</span></li>
<li style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-size: medium;">DuQu is not self-replicating (although some theorize that it can be commanded to replicate itself across network shares); it requires the use of an exploit-based “dropper” to install it on a system.</span></li>
<li style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-size: medium;">The installer, which utilized a zero day kernel exploit delivered via a Microsoft Word document, has now been recovered and is currently being analyzed.</span></li>
<li style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-size: medium;">DuQu installs a keylogger in order to record keystrokes and collect other system information.</span></li>
<li style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-size: medium;">Stolen information is packaged into encrypted and compressed image files for subsequent exfiltration.</span></li>
<li style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-size: medium;">DuQu was communicating over HTTP/HTTPS with its intial command and control (CC) server in India; a custom CC protocol was implemented using modified image files. As of this writing, the CC server has been deactivated.</span></li>
<li style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-size: medium;">DuQu was initially configured with a fixed life, set to deactivate after 36 days, although additional components can be installed to extend this as required.</span></li>
</ul>
<div style="background-color: white; font-family: Georgia, 'Times New Roman', serif; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">
<span style="font-size: medium;"><span class="Apple-style-span" style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><a href="https://github.com/halsten/Duqu-detectors" rel="nofollow" style="color: blue; cursor: pointer; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-style: none; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;"><b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;">Download open-source scanner tool</b></a></span></span></div>
</div>
</div>
<span style="font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif;"><span style="font-size: 12px;"><br /></span></span></div>
</div>

Duqu Analysis and Detection Tool by NSS Labs

Duqu Analysis and Detection Tool by NSS Labs NSS Labs has built a new, free tool that detects known and newly created Duqu dri...

Bugtraq-I : Distribution for Pentesting and forensics

CDRHINDI 0 Eathical hacking, Hacking, Pentesting January 25, 2015

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<h3 class="post-title entry-title" style="font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 22px; font-weight: normal; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0.75em; position: relative; text-align: -webkit-auto;">
<span style="background-color: white;">Bugtraq-I : Distribution for Pentesting and forensics</span></h3>
<div class="post-header" style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 11px; line-height: 1.6; margin-bottom: 1.5em; margin-left: 0px; margin-right: 0px; margin-top: 0px; text-align: -webkit-auto;">
<div class="post-header-line-1">
</div>
</div>
<div class="post-body entry-content" id="post-body-6253283849822507380" style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 1.4; position: relative; text-align: -webkit-auto; width: 3028px;">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: justify;">
<div style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;">
<img alt="Bugtraq-I+Distribution+for+Pentesting+and+forensics" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhRAPk4hd3-q3MTQNJxLP2ZnQmrbys2tp1sIIn6fw2VJxoMBVC8uCzVjDDYayJ-YRZOznHs5jH9SREleJsJdy967Q1_zJU0bTA2LezACOW6rZ8QQJGmIzA-Ib3rXCR4MVJPyL4HkW7QzkMY/s400/Bugtraq-I+Distribution+for+Pentesting+and+forensics.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-color: white; background-image: initial; background-origin: initial; background-position: initial initial; background-repeat: initial initial; border-bottom-color: rgb(229, 229, 229); border-bottom-style: solid; border-bottom-width: 1px; border-image: initial; border-left-color: rgb(229, 229, 229); border-left-style: solid; border-left-width: 1px; border-right-color: rgb(229, 229, 229); border-right-style: solid; border-right-width: 1px; border-top-color: rgb(229, 229, 229); border-top-style: solid; border-top-width: 1px; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px;" width="400" /></div>
</div>
<span style="font-family: Georgia, 'Times New Roman', serif;"><span style="background-color: white; line-height: 24px; text-align: justify;">Bugtraq system offers the most comprehensive distribution, optimal, stable and automatic security to date. Bugtraq is a distribution based on the 2.6.38 kernel has a wide range of penetration and forensic tools. Bugtraq can be installed from a Live DVD or USB drive, the distribution is customized to the last package, configured and updated the kernel. The kernel has been patched for better performance to recognize a variety of hardware, including wireless injection patches pentesting that other distributions do not recognize.</span> </span><br /><span style="background-color: white; line-height: 24px; text-align: justify;"><span style="font-family: Georgia, 'Times New Roman', serif;"><br /></span></span><h4 style="text-align: left;">
<br /></h4>
<div style="text-align: justify;">
<br /></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="font-family: Georgia, 'Times New Roman', serif;">Some of the special features that you can appreciate are:</span></b></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;">· Administrative improvements of the system for better management of services.</span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;">· Expanded the range of recognition for injection wireless drivers.</span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;">· Patching the kernel 2.6.38 to recognize 4 gigs of RAM in 32-bit.</span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;">· Tools perfectly configured, automated installation scripts and tools like Nessus, OpenVAS, Greenbone, Nod32, Hashcat, Avira, BitDefender, ClamAV, Avast, AVG, etc...</span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;">· Unique Scripts from Bugtraq-Team (SVN updates tools, delete tracks, backdoors, Spyder-sql, etc.)</span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;">· Stability and performance optimized: Enhanced performance flash and java and start purging unnecessary services. So that the user can use only the services you really want.</span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;">· It has incorporated the creation of the user in the installation, which is created with all system configurations.</span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;">· We are the distribution and Forensic Pentesting with more tools built and functional, well organized menu without repetition of the same to avoid overwhelming the user.</span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<span style="font-family: Georgia, 'Times New Roman', serif;"><br style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;" /></span></div>
<div style="background-color: white; line-height: 24px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: justify;">
<a href="http://bugtraq-team.com/index.php/en/descargas-2" rel="follow" style="color: blue; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-color: initial; outline-style: none; outline-width: initial; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-decoration: none;"><b style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px;"><span style="color: black; font-family: Georgia, 'Times New Roman', serif;">Download Bugtraq-I</span></span></b></a></div>
</div>
</div>
<span style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 12px; text-align: -webkit-auto;">- See more at: http://hckr333-sh.blogspot.in/search?updated-max=2012-08-17T09:45:00%2B05:30&max-results=3&start=3&by-date=false#sthash.RHW1iX3R.dpuf</span>
</div>

Bugtraq-I : Distribution for Pentesting and forensics

Bugtraq-I : Distribution for Pentesting and forensics Bugtraq system offers the most comprehensive distribution, optimal, stab...

TROJANS & BACKDOORS

CDRHINDI 0 Eathical hacking, Pentesting January 25, 2015

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div style="background-color: white; color: red; font-family: Georgia, 'Times New Roman', serif; font-size: 13px; line-height: 18px; text-align: center;">
<u><span style="font-size: large;">CHAPTER-V </span></u><br /><u><span style="font-size: large;"><span style="font-size: x-small;"><span style="font-size: xx-small;"><br /></span></span></span></u></div>
<div style="background-color: white; font-family: Georgia, 'Times New Roman', serif; font-size: 13px; line-height: 18px; text-align: center;">
<span style="font-size: medium;"><b><i><u style="color: red;">TROJANS & BACKDOORS</u></i></b></span></div>
<div style="background-color: white; font-family: Georgia, 'Times New Roman', serif; font-size: 13px; line-height: 18px; text-align: center;">
<br /></div>
<div style="background-color: white; font-family: Georgia, 'Times New Roman', serif; font-size: 13px; line-height: 18px;">
</div>
<div style="background-color: white; font-family: Georgia, 'Times New Roman', serif; font-size: 13px; line-height: 18px;">
<br /></div>
<div style="background-color: white; font-family: Georgia, 'Times New Roman', serif; font-size: 13px; line-height: 18px;">
<span style="font-size: medium;"><b><u><span style="color: red;">TROJANS:</span></u></b></span></div>
<div style="background-color: white; font-family: Georgia, 'Times New Roman', serif; font-size: 13px; line-height: 18px;">
<span style="font-size: medium;">A destructive program that masquerades as a benign application. Unlike viruses, Trojan horses do not replicate themselves but they can be just as destructive. One of the most insidious types of Trojan horse is a program that claims to rid your computer of viruses but instead introduces viruses onto your computer.</span><br /><span style="font-size: medium;"><br />The seven main types of Trojan horses are:<br />>Remote Access Trojans<br />>Data Sending Trojans<br />>Destructive Trojans<br />>Proxy Trojans<br />>FTP Trojans</span></div>
<div style="background-color: white; font-family: Georgia, 'Times New Roman', serif; font-size: 13px; line-height: 18px;">
<span style="font-size: medium;">>security software disabler Trojans<br />>denial-of-service attack (DoS) Trojans</span></div>
<div style="background-color: white; font-family: Georgia, 'Times New Roman', serif; font-size: 13px; line-height: 18px;">
<span style="font-size: medium;"><br /></span><br /><span style="font-size: medium;"><br /></span><br /><div style="color: red;">
<b><u><span style="font-size: medium;">BACKDOOR:</span></u></b><br /></div>
<span style="font-size: medium;">Also called a trapdoor. An undocumented way of gaining access to a program, online service or an entire computer system. The backdoor is written by the programmer who creates the code for the program. It is often only known by the programmer. A backdoor is a potential security risk.</span><br /><br /><br /><br /><div style="color: red;">
<u><span style="font-size: medium;">Main functions of a Trojan </span></u><br /></div>
<span style="font-size: medium;">>Stealing information's such a password, credit card info, screenshot's  ect.... with the help of a keylogger</span><br /><span style="font-size: medium;">>Reading files and calender  </span><br /><span style="font-size: medium;">>Disabling firewall and antivirus</span><br /><span style="font-size: medium;">>Infect your pc as a proxy server for future attacks</span><br /><span style="font-size: medium;">>Generate fake traffic to create DOS attack </span><br /><span style="font-size: medium;">>Download spyware,ad ware ect.......</span><br /><span style="font-size: medium;">>Delete your system files</span><br /><span style="font-size: medium;">>To create and send spam messages</span><br /><span style="font-size: medium;">>Use victim pc as a botnet for DDos attack</span><br /><br /><u><br /></u><br /><u><br /></u><br /><div style="color: red;">
<u><span style="font-size: medium;">Common PORTS used by Trojan to attack</span></u></div>
<br /><span style="font-size: medium;"><span class="Apple-style-span" style="background-color: #fefdfa;"><i>BackOrifice:             </i>UDP 31337 or 31338</span></span><br /><div>
<span style="font-size: medium;"><i>Deep Throat</i>:            UDP 2140 and 3150</span></div>
<div>
<span style="font-size: medium;"><i>NetBus:</i>                      TCP 12345 and 12346</span></div>
<div>
<span style="font-size: medium;"><i>W</i><i>hack-a-Mole:</i><b><i>       </i></b>TCP 12361 and 12362</span></div>
<div>
<span style="font-size: medium;"><i>NetBus 2:</i>                  TCP 20034</span></div>
<div>
<span style="font-size: medium;"><i>GirlFriend</i>:               TCP 21544</span></div>
<div>
<span style="font-size: medium;"><i>Master’s Paradise:</i> TCP 3129, 40421, 40422, 40423, and 40426</span><br /><br /><br /><i><span style="font-size: x-small;">For more lnfo visit </span><span style="font-size: x-small;"><a href="http://www.doshelp.com/Ports/Trojan_Ports.htm" style="color: #3d85c6; text-decoration: none;">http://www.doshelp.com/Ports/Trojan_Ports.htm</a></span></i><br /><br /><br /><br /><span style="font-size: medium;"><u><span style="color: red;">Symptoms that may indicate a Trojan infection</span></u><br /><br />>Your computer screen flips upside down or inverts<br /><br />>Your wall paper or background settings change by themselves<br /><br />>Documents or messages print on your printer by themselves<br /><br />>Your windows color settings change by themselves<br /><br />>Your screen saver settings change by themselves<br /><br />>Your right and left mouse buttons reverse their functions<br /><br />>Your mouse pointer disappears<br /><br />>Your mouse moves by itself<br /><br />>Your mouse starts leaving trails<br /><br />>Your Windows Start button disappears<br /><br />>Your computer starts reading the contents of your computer clipboard<br /><br />>Your Task bar disappears<br /><br />>Your computer shuts down and powers off by itself </span></div>
</div>
</div>

TROJANS & BACKDOORS

CHAPTER-V TROJANS & BACKDOORS TROJANS: A destructive program that masquerades as a benign application. Unlike viruses, T...

SYSTEM HACKING

CDRHINDI 0 Eathical hacking, Hacking, Pentesting January 25, 2015

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px; text-align: center;">
<span style="text-decoration: underline;"><span style="font-weight: bold;"><span style="font-size: large;"><span style="color: white;">CHAPTER -IV</span></span></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px; text-align: center;">
<span style="text-decoration: underline;"><span style="font-weight: bold;"><u><i><b><span style="font-size: medium;"><span style="color: white;">[ SYSTEM HACKING ]</span></span></b></i></u></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px;">
<span style="color: white;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px;">
<span style="font-size: medium;"><u><i><b><span style="color: white;">TYPES OF PASSWORD HACKING</span></b></i></u></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px;">
<span style="font-size: medium;"><span style="color: white;"><br /></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px;">
<span style="font-size: medium;"><span style="color: white;">There are of four types of password attack</span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px;">
<span style="font-size: medium;"><span style="color: white;">1.passive online attack</span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px;">
<span style="font-size: medium;"><span style="color: white;">2.Active online attack</span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px;">
<span style="font-size: medium;"><span style="color: white;">3.Offline attack</span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px;">
<span style="font-size: medium;"><span style="color: white;">4.Non technical attack</span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px;">
<span style="font-size: medium;"><span style="color: white;"><br /></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px;">
<span style="font-size: medium;"><u><i><b><span style="color: white;">PASSIVE ONLINE ATTACK</span></b></i></u></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px; text-align: -webkit-auto;">
<span style="font-size: medium;"><span class="Apple-style-span" style="border-collapse: separate;"><span class="Apple-style-span" style="line-height: 22px; text-align: justify;"><span style="color: white;">In passive online attacks an attacker don’t contact with authorizing party for stealing password, in other words he attempts password hacking but without communicating with victim or victim account. Types of passive online attacks includes wire sniffing, Man in the middle attack and reply attack.</span></span></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px; text-align: -webkit-auto;">
<span style="font-size: medium;"><span style="color: white;"><br /></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px; text-align: -webkit-auto;">
<span style="font-size: medium;"><span class="Apple-style-span" style="border-collapse: separate;"><span class="Apple-style-span" style="line-height: 22px; text-align: justify;"><u><i><b><span style="color: white;">ACTIVE ONLINE ATTACK</span></b></i></u></span></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px; text-align: -webkit-auto;">
<span style="color: white;"><span class="Apple-style-span" style="border-collapse: separate; font-size: medium;"><span class="Apple-style-span" style="line-height: 22px; text-align: justify;">This type of attack can be directly termed as password guessing. An attacker tries number of passwords one by one against victim to crack his/her password.</span></span><span style="font-size: medium;"><span class="Apple-style-span" style="border-collapse: separate;"><span class="Apple-style-span" style="line-height: 22px; text-align: justify;"><u><i><b></b></i></u></span></span></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px; text-align: -webkit-auto;">
<span style="font-size: medium;"><span class="Apple-style-span" style="border-collapse: separate;"><span class="Apple-style-span" style="line-height: 22px; text-align: justify;"><u><i><b><span style="color: white;"><br /></span></b></i></u></span></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px; text-align: -webkit-auto;">
<span style="font-size: medium;"><span class="Apple-style-span" style="border-collapse: separate;"><span class="Apple-style-span" style="line-height: 22px; text-align: justify;"><u><i><b><span style="color: white;">OFFLINE ATTACK</span></b></i></u></span></span></span></div>
<div align="JUSTIFY" lang="en-US" style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px; margin-bottom: 0cm;">
<div>
<span style="font-size: medium;"><span style="color: white;">Offline password attacks are performed from a location other than the actual computer where the password reside or were used. Offline attacks requires physical access to the computer which stores password file, the attacker copies the password file and then tries to break passwords in his own system. Offline attacks include, dictionary attacks, hybrid attacks, brute force attack, precomputed hash attacks, syllable attacks, rule based attacks and rainbow attacks.</span></span></div>
<span style="font-size: medium;"><span style="color: white;"><br /></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px; text-align: -webkit-auto;">
<span style="font-size: medium;"><u><i><b><span style="color: white;">NON TECHNICAL ATTACK</span></b></i></u></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 12px; text-align: -webkit-auto;">
<div>
<span class="Apple-style-span" style="border-collapse: separate; font-size: medium;"><span class="Apple-style-span" style="line-height: 22px; text-align: justify;"><span style="color: white;">This type of attacks does not require any technical knowledge hence termed as non-technical attacks. This kind of attacks may include, social engineering, shoulder surfing, keyboard sniffing and dumpster diving.</span></span></span></div>
<div>
<div>
<span style="font-size: medium;"><span style="color: white;"><br /></span></span></div>
<div>
<span style="font-size: medium;"><span style="color: white;">WHAT IS ROOTKITS??</span></span></div>
<span style="color: white;"><br /></span><div>
<span style="color: white;"><span style="font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;">A rootkit is a type of malicious software that is activated each time your systemboots up. Rootkits are difficult to detect because they are activated before your system's Operating System has completely booted up. A rootkit often allows the installation of hidden files, processes, hidden user accounts, and more in the systems OS. Rootkits are able to intercept </span><span class="Apple-style-span" style="line-height: 19px;">data from terminals, networkconnections, and the keyboard.</span></span><br /><br /><span style="font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;"><i>Root kit helps hackers to maintain hidden access to the system using virus ,torjan horse, spyware ect....</i></span></span></span></div>
<div>
<span style="color: white;"><br /></span></div>
<div>
<span style="font-size: medium;"><span style="color: white;"><br /></span></span></div>
<div>
<span style="color: white;"><u><span style="font-size: medium;">STEGANOGRAPHY</span></u></span><div>
<span style="color: white;"><span style="font-size: medium;"></span></span></div>
<div style="background-color: transparent; border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; line-height: 1.6; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-width: 0px; padding-bottom: 5px; padding-left: 0px; padding-right: 0px; padding-top: 5px; vertical-align: baseline;">
<span style="font-size: medium;"><span style="color: white;">The art and science of hiding information by embedding messages within other, seemingly harmless messages. Steganography works by replacing bits of useless or unused data in regular computer files (such as graphics, sound, text, HTML, or even floppy disks ) with bits of different, invisible information. This hidden information can be plain text, cipher text, or even images.</span></span></div>
<div style="background-color: transparent; border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; line-height: 1.6; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-width: 0px; padding-bottom: 5px; padding-left: 0px; padding-right: 0px; padding-top: 5px; vertical-align: baseline;">
<span style="font-size: medium;"><span style="color: white;">Steganography sometimes is used when encryption is not permitted. Or, more commonly, steganography is used to supplement encryption. An encrypted file may still hide information using steganography, so even if the encrypted file is deciphered, the hidden message is not seen.</span></span></div>
<span style="color: white;"><br /><br /></span></div>
</div>
<div>
<span class="Apple-style-span" style="border-collapse: separate; font-size: medium;"><span class="Apple-style-span" style="line-height: 22px; text-align: justify;"><u><b><span style="color: white;">DEFAULT PASSWORDS</span></b></u></span></span></div>
<div>
<span style="font-size: medium;"><span style="color: white;">These are the some of the default password database</span></span></div>
<div>
<span style="font-size: medium;"><span style="color: white;"><br /></span></span></div>
<div>
<span style="font-size: medium;"><a href="http://www.defaultpassword.com/?char=&action=dpl" style="text-decoration: none;"><span style="color: white;">http://www.defaultpassword.com/?char=&action=dpl</span></a></span></div>
<div>
<span style="font-size: medium;"><a href="http://www.cirt.net/passwords" style="text-decoration: none;"><span style="color: white;">http://www.cirt.net/passwords</span></a></span></div>
<div>
<span style="color: white;"><span style="font-size: medium;"><a href="http://www.virus.org/default-password%20" style="text-decoration: none;">http://www.virus.org/default-password </a></span><br /><br /><br /><b><span style="font-size: medium;"><u>HACKING TOOLS</u></span></b><br /><br /><u><span style="font-size: medium;">1.LOPHTCRACK</span></u><br /><span style="font-size: medium;">Its a password auditing and recovery software</span><br /><span style="font-size: medium;"></span><br /><span style="font-size: medium;">Download from: </span><a href="http://1337x.org/torrent/42867/0/" style="text-decoration: none;">http://1337x.org/torrent/42867/0/</a> (use torrent client to download)<br /><br /><span style="font-size: medium;">2. LCP</span><br /><span style="font-size: medium;"><span class="Apple-style-span" style="font-family: 'Times New Roman';"><span style="font-family: Arial;">Main</span> <span style="font-family: Arial;">purpose of LCP program is user account passwords auditing and recovery in Windows NT/2000/XP/2003. </span></span></span><br /><span style="font-size: medium;"><span class="Apple-style-span" style="font-family: 'Times New Roman';"><span style="font-family: Arial;">General features of this product << visit there website>></span></span></span><br /><br /><span style="font-size: medium;"></span></span></div>
<div>
<span style="color: white;"><span style="font-size: medium;"><span class="Apple-style-span" style="font-family: 'Times New Roman';"> Download from :</span><a href="http://www.lcpsoft.com/english/download.htm" style="text-decoration: none;">http://www.lcpsoft.com/english/download.htm</a></span><br /><br /><u><b><br /></b></u></span></div>
<div>
<div>
<span style="font-size: medium;"><u><b><span style="color: white;">3.Hacking windows administrator password of xp/vista/7</span></b></u></span></div>
<div>
<span style="font-size: medium;"><span style="color: white;"><br /></span></span></div>
<div>
<span style="color: white;"><span style="font-size: medium;"></span></span></div>
<span style="color: white;"><i><span style="font-size: medium;"><b>visit:</b></span></i><br /></span><div class="MsoNormal">
<u><span style="font-size: medium;"><span lang="EN-US"><span style="color: white;">4.KEY-LOGGER</span></span></span></u></div>
<span style="color: white;"><span style="font-size: medium;"></span><br /><span style="font-size: medium;"><i>more info visit: <a href="http://hckr333-sh.blogspot.com/2011/08/key-logger.html" style="text-decoration: none;">http://hckr333-sh.blogspot.com/2011/08/key-logger.html</a></i></span></span><div class="MsoNormal">
<span style="color: white;"><br /></span><div>
<span style="font-size: medium;"><span style="color: white;"><br /></span></span></div>
<div>
<u><span style="font-size: medium;"><span style="color: white;">5.USB KEYLOGGER </span></span></u></div>
<div>
</div>
<span style="font-size: medium;"><span lang="EN-US" style="line-height: 20px;"><span style="color: white;">It capture all the keystrokes by using a usb drive which contain the usb keylogger software</span></span></span></div>
<div class="MsoNormal">
</div>
<div class="MsoNormal">
<i><span style="font-size: medium;"><span style="color: white;"><span lang="EN-US" style="line-height: 20px;">Download from:</span><a href="http://www.keyghost.com/USB-Keylogger.htm" style="text-decoration: none;">http://www.keyghost.com/USB-Keylogger.htm</a> (paided s/w :( )</span></span></i></div>
<div class="MsoNormal">
<span style="color: white;"><br /><u><br /></u><br /><u><span style="font-size: medium;">6.KEYLOGGER FOR MOBILE</span></u><br /><span style="font-size: medium;"> </span><i><span style="font-size: medium;">Visit :<a href="http://mobihacking.blogspot.com/2011/08/keylogger-for-symbian-s60v3-devices.html" style="text-decoration: none;">http://mobihacking.blogspot.com/2011/08/keylogger-for-symbian-s60v3-devices.html</a></span></i><br /><br /><br /></span><div class="MsoNormal">
<u><span style="font-size: medium;"><span lang="EN-US"><span style="color: white;">7.SPYWARE</span></span></span></u></div>
<span style="color: white;"><span style="font-size: medium;"></span><br /></span><div class="MsoNormal">
<span style="font-size: medium;"><span lang="EN-US"><span style="color: white;">It will capture all the events , activities , website visited , keystroke, screenshots, from a remote machine to our machine through mail</span></span></span></div>
<span style="color: white;"><span style="font-size: medium;"></span><br /></span><div class="MsoNormal">
<span style="font-size: medium;"><i><span style="color: white;"><br /></span></i></span></div>
<div class="MsoNormal">
<span style="font-size: medium;"><i><span style="color: white;"><span lang="EN-US">Download from : </span><a href="http://1337x.org/torrent/47798/0/" style="text-decoration: none;">http://1337x.org/torrent/47798/0/</a>(use torrent client to download)</span></i></span></div>
</div>
<div class="MsoNormal">
<span style="color: white;"><br /><u><span style="font-size: medium;">8.OPENPUFF</span><i><span style="font-size: medium;"> (STENOGRAPHY TOOL)</span></i></u><br /><br /><span style="font-size: medium;">Download from :<a href="http://embeddedsw.net/zip/OpenPuffv340.zip" style="text-decoration: none;">http://embeddedsw.net/zip/OpenPuffv340.zip</a></span><br /><span style="font-size: medium;"><br /></span><br /><span style="font-size: medium;">pdf tutorial: <a href="http://embeddedsw.net/doc/OpenPuff_Help_EN.pdf%20" style="text-decoration: none;">http://embeddedsw.net/doc/OpenPuff_Help_EN.pdf </a></span><br /><i><span style="font-size: medium;"><br /></span></i><br /><i><span style="font-size: medium;"> </span></i></span></div>
</div>
</div>
<span style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 12px; text-align: -webkit-auto;"><span style="color: white;">- See more at: http://hckr333-ch04.blogspot.in/#sthash.rCu9qZmw.dpuf</span></span>
</div>

SYSTEM HACKING

CHAPTER -IV [ SYSTEM HACKING ] TYPES OF PASSWORD HACKING There are of four types of password attack 1.passive online attack ...

ENUMERATION

CDRHINDI 0 Eathical hacking, Hacking, Pentesting January 25, 2015

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="color: white;"><br /></span>
<div style="background-color: black; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 14px; text-align: center;">
<span style="background-color: white;"><span style="text-decoration: underline;"><span style="font-weight: bold;"><span style="color: white; font-size: large;">CHAPTER-3</span></span></span></span></div>
<div style="background-color: black; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 14px; text-align: center;">
<span style="font-size: medium;"><i><span style="background-color: white;"><span style="text-decoration: underline;"><span style="color: white; font-weight: bold;">ENUMERATION </span></span></span></i></span></div>
<div style="background-color: black; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 14px; text-align: center;">
<span style="color: white;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px;">
<span style="color: white;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 14px;">
<div style="font-family: Georgia, 'Times New Roman', serif;">
<span style="color: white; font-size: medium;">Enumeration is the first attack on target network; Enumeration is a process to gather the information about user names, machine names, network resources, shares and services ; Enumeration makes a fixed active connection to a system</span></div>
<span style="color: white; font-size: medium;"><br /></span>
<div style="text-align: center;">
<span style="font-size: medium; text-decoration: underline;"><span style="color: white; font-style: italic;"><u><i><b>Tools and techniques using for Enumeration</b></i></u></span></span></div>
<div style="font-family: Georgia, 'Times New Roman', serif;">
<span style="color: white; font-size: medium;"><b><u>CMD Command :</u></b></span><br />
<span style="color: white; font-size: medium;">There are many cmd commands are there but sorry to say its not working for all windows os(tried but failed)</span><br />
<span style="color: white; font-size: medium;">But it is so EFFECTIVE in local area connections :) </span><br />
<span style="color: white; font-size: medium;"><br /></span>
<span style="color: white;"><span style="font-size: medium;"><u>1. net use </u>: (Works only in xp and 2000) (</span><span style="font-size: medium;"><i>tested not worked)</i></span></span><br />
<span style="color: white; font-size: medium;"><i>syntax :</i> net use \\<ip address>\IPC$ ""/u:""</span><br />
<span style="color: white; font-size: medium;"><i>Example :</i> net use \\192.168.2.2\IPS$ ""/u:""</span><br />
<span style="color: white; font-size: medium;"><i>Defn :</i> It connects to its hidden inner process communication (IPS$) of 192.168.2.2 with build in anonymous user (u:) with a null password ("")</span><br />
<span style="color: white; font-size: medium;"><br /></span>
<span style="color: white;"><span style="font-size: medium;"><u>2.nbtstat   </u></span><span style="font-size: medium;">: (tested and worked )</span></span><br />
<span style="color: white;"><span style="font-size: medium;"><i>Syntax :</i> nbtstat -A</span><span style="font-size: medium;"><ip address></span></span><br />
<span style="color: white; font-size: medium;"><i>Example </i>: nbtstat -A<192.168.2.4></span><br />
<span style="color: white; font-size: medium;"><i>Use :</i> Will get the NetBIOS information and MAC address of the system</span><br />
<span style="color: white; font-size: medium;"><br /></span>
<span style="color: white; font-size: medium;"><u>3.FTP Enumeration </u></span><br />
<span style="color: white; font-size: medium;">syntax : ftp <ftp servername> </span><br />
<span style="color: white;"><span style="font-size: medium;">Example : ftp </span><span style="font-size: medium;">ftp.gnuplot.info</span></span><br />
<span style="color: white; font-size: medium;"><br /></span>
<span style="color: white; font-size: medium;"><u>4. telnet </u></span><br />
<span style="color: white; font-size: medium;">Syantax : telnet <URL/IP> <port number></span><br />
<span style="color: white; font-size: medium;">Example : telnet www.csice.edu.in 80 (http port number)</span><br />
<span style="color: white; font-size: medium;">Use : connect to a server</span><br />
<span style="color: white; font-size: medium;">PORT              NUMBER</span><br />
<span style="color: white; font-size: medium;">http                       80</span><br />
<span style="color: white; font-size: medium;">ftp                          21</span><br />
<span style="color: white; font-size: medium;">telnet                    23</span><br />
<span style="color: white; font-size: medium;">smtp                     25</span><br />
<span style="color: white; font-size: medium;">dns                        53</span><br />
<span style="color: white; font-size: medium;">tftp                        69</span><br />
<span style="color: white; font-size: medium;">finger                    79</span><br />
<span style="color: white; font-size: medium;">NetBios                137 </span><br />
<span style="color: white; font-size: medium;"> TO VIEW FULL ABOUT PORT : <a href="http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers%20" style="text-decoration: none;">http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers </a></span><br />
<span style="color: white;"><br /></span>
<span style="color: white; font-size: medium;"><br /></span>
<span style="color: white; font-size: medium;"><br /></span>
<span style="color: white; font-size: medium;"><u><b>Tools using for Enumeration </b></u></span><br />
<span style="color: white; font-size: medium;"><br /></span>
<span style="color: white; font-size: medium;"><u>1.Super scan</u></span><br />
<span style="color: white; font-size: medium;">We are familiar with the tool Super scan in chapter 2</span><br />
<span style="color: white; font-size: medium;"><br /></span>
<span class="Apple-style-span" style="border-collapse: separate; font-family: sans-serif; font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;"><span style="color: white; font-family: inherit;"><a href="http://www.mcafee.com/us/downloads/free-tools/superscan.aspx" style="text-decoration: none;">http://www.mcafee.com/us/downloads/free-tools/superscan.aspx</a></span></span></span><br />
<div>
<span style="color: white; font-size: medium;"><br /></span></div>
<div>
<span class="Apple-style-span" style="border-collapse: separate; font-size: medium;"><span class="Apple-style-span" style="color: white; line-height: 19px;"><u>2.IP Tools</u></span></span></div>
<div>
<span class="Apple-style-span" style="border-collapse: separate; font-size: medium;"><span class="Apple-style-span" style="color: white; line-height: 19px;">It gave information about </span></span></div>
<table border="0"><tbody>
<tr><td><span style="color: white; font-size: medium;"><br /></span></td><td nowrap="nowrap"><span style="color: white; font-size: medium;">local info</span></td><td><span style="color: white; font-size: medium;">- examines the local host and shows info about processor, memory, Winsock data, etc</span></td></tr>
<tr><td><span style="color: white; font-size: medium;"><a href="http://www.ks-soft.net/ip-tools.eng/mframe.htm#info.htm#page2" style="text-decoration: none;"><br /></a></span></td><td><span style="color: white; font-size: medium;">Connection Monitor</span></td><td><span style="color: white; font-size: medium;">- displays information about current TCP and UDP network connections</span></td></tr>
<tr><td><span style="color: white; font-size: medium;"><a href="http://www.ks-soft.net/ip-tools.eng/mframe.htm#info.htm#page3" style="text-decoration: none;"><br /></a></span></td><td><span style="color: white; font-size: medium;">NetBIOS Info</span></td><td><span style="color: white; font-size: medium;">- gets NetBIOS information about network interfaces (local and remote computers)</span></td></tr>
<tr><td><span style="color: white;"><br /></span></td><td><span style="color: white; font-size: medium;">NB Scanner</span></td><td><span style="color: white; font-size: medium;">- shared resources scanner</span></td></tr>
<tr><td><span style="color: white;"><br /></span></td><td><span style="color: white; font-size: medium;">SNMP Scanner</span></td><td><span style="color: white; font-size: medium;">- scans network(s) for SNMP enabled devices</span></td></tr>
<tr><td><span style="color: white;"><br /></span></td><td><span style="color: white; font-size: medium;">Name Scanner</span></td><td><span style="color: white; font-size: medium;">- scans all hostnames within a range of IP addresses</span></td></tr>
<tr><td><span style="color: white;"><br /></span></td><td><span style="color: white; font-size: medium;">Port Scanner</span></td><td><span style="color: white; font-size: medium;">- scans network(s) for active TCP based services</span></td></tr>
<tr><td><span style="color: white;"><br /></span></td><td><span style="color: white; font-size: medium;">UDP Scanner</span></td><td><span style="color: white; font-size: medium;">- scans network(s) for active UDP based services</span></td></tr>
<tr><td><span style="color: white;"><br /></span></td><td><span style="color: white; font-size: medium;">Ping Scanner</span></td><td><span style="color: white;"><span style="font-size: medium;">- pings a remote hosts over the network</span> </span></td></tr>
<tr><td><span style="color: white;"><br /></span></td><td><span style="color: white; font-size: medium;">Trace</span></td><td><span style="color: white; font-size: medium;">- traces the route to a remote host over the network</span></td></tr>
<tr><td><span style="color: white;"><br /></span></td><td><span style="color: white; font-size: medium;">WhoIs</span></td><td><span style="color: white; font-size: medium;">- obtains information about a Internet host or domain name from the NIC (Network Information Center)</span></td></tr>
<tr><td><span style="color: white;"><br /></span></td><td><span style="color: white; font-size: medium;">Finger</span></td><td><span style="color: white; font-size: medium;">- retrieves information about user from a remote host</span></td></tr>
<tr><td><span style="color: white;"><br /></span></td><td><span style="color: white; font-size: medium;">LookUp</span></td><td><span style="color: white; font-size: medium;">- looks for domain names according to its IP address or an IP address from its domain name</span></td></tr>
<tr><td><span style="color: white;"><br /></span></td><td><span style="color: white; font-size: medium;">GetTime</span></td><td><span style="color: white; font-size: medium;">- gets time from time servers (also it can set correct time on local system)</span></td></tr>
<tr><td><span style="color: white;"><br /></span></td><td><span style="color: white; font-size: medium;">Telnet</span></td><td><span style="color: white; font-size: medium;">- telnet client</span></td></tr>
<tr><td><span style="color: white;"><br /></span></td><td><span style="color: white; font-size: medium;">HTTP</span></td><td><span style="color: white; font-size: medium;">- HTTP client</span></td></tr>
<tr><td><span style="color: white;"><br /></span></td><td><span style="color: white; font-size: medium;">IP-Monitor</span></td><td><span style="color: white;"><span style="font-size: medium;">- shows network</span> <span style="font-size: medium;">traffic in real time (as a set of charts)</span></span></td></tr>
<tr><td><span style="color: white;"><br /></span></td><td><span style="color: white; font-size: medium;">Host Monitor</span></td><td><span style="color: white; font-size: medium;">- monitors up/down status of selected hosts.</span></td></tr>
<tr><td><span style="color: white;"><br /></span></td><td><span style="color: white; font-size: medium;">Trap Watcher</span></td><td><span style="color: white; font-size: medium;">- allows you to receive and process SNMP Trap messages.</span></td><td><span style="color: white;"><br /></span></td><td><span style="color: white;"><br /></span></td><td><span style="color: white;"><br /></span></td></tr>
</tbody></table>
<span style="color: white; font-size: medium;"><br /></span>
<span style="color: white; font-size: medium;">Download from : <a href="http://www.ks-soft.net/ip-tools.eng/downpage.htm" style="text-decoration: none;">http://www.ks-soft.net/ip-tools.eng/downpage.htm</a></span><br />
<span style="color: white; font-size: medium;"><br /></span>
<span style="color: white; font-size: medium;"><u><br /></u></span>
<span style="color: white; font-size: medium;"><u>3.softperfect network  scanner</u></span><br />
<span style="color: white; font-size: medium;">Features::</span><br />
<span style="color: white; font-size: medium;">>Pings computers and displays those alive.</span><br />
<span style="color: white; font-size: medium;">>Detects hardware MAC-addresses, even across routers.</span><br />
<span style="color: white; font-size: medium;">>Detects hidden shared folders and writable ones.</span><br />
<span style="color: white; font-size: medium;">>Detects your internal and external IP addresses.</span><br />
<span style="color: white; font-size: medium;">>Scans for listening TCP ports, some UDP and SNMP services.</span><br />
<span style="color: white; font-size: medium;">>Retrieves currently logged-on users, configured user accounts, uptime, etc.</span><br />
<span style="color: white; font-size: medium;">>You can mount and explore network resources.</span><br />
<span style="color: white; font-size: medium;">>Can launch external third party applications.</span><br />
<span style="color: white; font-size: medium;">>Exports results to HTML, XML, CSV and TXT</span><br />
<span style="color: white; font-size: medium;">>Supports Wake-On-LAN, remote shutdown and sending network messages.</span><br />
<span style="color: white; font-size: medium;">>Retrieves potentially any information via WMI.</span><br />
<span style="color: white; font-size: medium;">>Retrieves information from remote registry, file system and service manager.</span><br />
<span style="color: white; font-size: medium;"><br /></span>
<span style="color: white; font-size: medium;">Download from:<a href="http://www.softperfect.com/products/networkscanner/" style="text-decoration: none;">http://www.softperfect.com/products/networkscanner/</a></span><br />
<span style="color: white;"><br /></span>
<span style="color: white; font-size: medium;"><br /></span>
<span style="color: white; font-size: medium;"><u>4.Dumpsec</u></span><br />
<span class="Apple-style-span" style="border-collapse: separate; font-family: 'Times New Roman'; font-size: medium;"><span class="Apple-style-span" style="font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="color: white; font-family: Georgia, 'Times New Roman', serif;">SomarSoft's DumpSec is a security auditing program for Microsoft Windows® NT/XP/200x. It dumps the permissions (DACLs) and audit settings (SACLs) for the file system, registry, printers and shares in a concise, readable format, so that holes in system security are readily apparent. DumpSec also dumps user, group and replication information.</span></span></span><br />
<span style="color: white; font-size: medium;"><br /></span>
<span style="color: white;"><span class="Apple-style-span" style="border-collapse: separate; font-family: 'Times New Roman'; font-size: medium;"><span class="Apple-style-span" style="font-family: Verdana, Arial, Helvetica, sans-serif;"><span style="font-family: Georgia, 'Times New Roman', serif;">Download from : </span></span></span><span style="font-size: medium;"><a href="http://www.systemtools.com/cgi-bin/download.pl?DumpAcl" style="text-decoration: none;">http://www.systemtools.com/cgi-bin/download.pl?DumpAcl</a></span></span><br />
<span style="color: white; font-size: medium;"><br /></span>
<span style="color: white; font-size: medium;"><u>5.Enumerate systems using default password </u></span><br />
<span style="color: white; font-size: medium;">Many devices like router, switches, hubs,.......... uses default password; in this website its a collection of default passwords</span><br />
<span style="color: white; font-size: medium;"><br /></span>
<span style="color: white; font-size: medium;">Visit: <a href="http://www.phenoelit-us.org/dpl/dpl.html" style="text-decoration: none;">http://www.phenoelit-us.org/dpl/dpl.html</a></span></div>
</div>
<span style="background-color: black; color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 14px; text-align: -webkit-auto;">- See more at: http://hckr333-ch03.blogspot.in/#sthash.OyOeg2EX.dpuf</span>
</div>

ENUMERATION

CHAPTER-3 ENUMERATION Enumeration is the first attack on target network; Enumeration is a process to gather the information abo...

SCANNING

CDRHINDI 0 Eathical hacking, Hacking, Pentesting January 25, 2015

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: center;">
<span class="Apple-style-span" style="color: red; font-size: medium;"><b><u><span style="font-size: large;">CHAPTER-2</span></u></b></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: center;">
<span class="Apple-style-span" style="color: red; font-size: medium;"><b><u><i>SCANNING</i></u></b></span><br /><span class="Apple-style-span" style="color: red; font-size: small;"><b><u><i><br /></i></u></b></span><br /><span class="Apple-style-span" style="color: red; font-size: small;"><b><u><i><br /></i></u></b></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px;">
<span style="font-size: medium;">Scanning is the second phase of hacking</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px;">
<span style="font-size: medium;">By scanning we can find out:</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px;">
<span style="font-size: medium;">                                           >Which all servers are alive (AKA)</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px;">
<span style="font-size: medium;">                                           > Specific ip address</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px;">
<span style="font-size: medium;">                                           >Operating system</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px;">
<span style="font-size: medium;">                                           >System architecture </span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px;">
<span style="font-size: medium;">                                           >Service running on each system</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px;">
<span style="font-size: medium;">Types of scanning</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px;">
<span style="font-size: medium;">                                           >Port Scanning</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px;">
<span style="font-size: medium;">                                           >Network Scanning</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;">                                           >Vulnerability Scanning</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><b><u>Port scanning:</u></b></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;">port is the open door</span><span class="Apple-style-span" style="font-size: medium;">s to the syst</span><span style="font-size: medium;">em; where the information's go and come to the system</span></div>
<div style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; line-height: 1.6; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-width: 0px; padding-bottom: 5px; padding-left: 0px; padding-right: 0px; padding-top: 5px; text-align: -webkit-auto; vertical-align: baseline;">
<span class="Apple-style-span" style="font-size: medium;"><b>Types of port scans:</b></span></div>
<ul style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; list-style-type: none; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; text-align: -webkit-auto; vertical-align: baseline;">
<li style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; vertical-align: baseline;"><span class="Apple-style-span" style="font-size: medium;">>Vanilla: the scanner attempts to connect to all 65,535 ports</span></li>
<li style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; vertical-align: baseline;"><span class="Apple-style-span" style="font-size: medium;">>Strobe: a more focused scan looking only for known services to exploit</span></li>
<li style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; vertical-align: baseline;"><span class="Apple-style-span" style="font-size: medium;">>Fragmented packets: the scanner sends packet fragments that get through simple packet filters in a firewall</span></li>
<li style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; vertical-align: baseline;"><span class="Apple-style-span" style="font-size: medium;">>UDP: the scanner looks for open UDP ports</span></li>
<li style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; vertical-align: baseline;"><span class="Apple-style-span" style="font-size: medium;">>Sweep: the scanner connects to the same port on more than one machine</span></li>
<li style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; vertical-align: baseline;"><span class="Apple-style-span" style="font-size: medium;">>FTP bounce: the scanner goes through an FTP server in order to disguise the source of the scan</span></li>
<li style="border-bottom-width: 0px; border-left-width: 0px; border-right-width: 0px; border-top-width: 0px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0px; outline-width: 0px; padding-bottom: 0px; padding-left: 0px; padding-right: 0px; padding-top: 0px; vertical-align: baseline;"><span class="Apple-style-span" style="font-size: medium;">>Stealth scan: the scanner blocks the scanned computer from recording the port scan activities.</span></li>
</ul>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><b><u>Network scanning</u></b></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span class="Apple-style-span" style="font-size: medium; line-height: 19px;">Network scanning is a procedure for identifying active hosts on a network; </span><span class="Apple-style-span" style="font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;">Scanning procedures, such as ping sweeps and </span></span><span class="Apple-style-span" style="font-size: medium; line-height: 19px;">port scan</span><span class="Apple-style-span" style="font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;"> s, return information about which </span></span><span style="font-size: medium;">I</span><span class="Apple-style-span" style="font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;">P addresses map to live h</span></span><span class="Apple-style-span" style="font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;">osts </span></span><span class="Apple-style-span" style="font-size: medium; line-height: 19px;">that are active on the Internet and what services they offer</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span class="Apple-style-span" style="font-size: medium; line-height: 19px;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span class="Apple-style-span" style="font-size: medium; line-height: 19px;"><b><u>Vulnerability Scanning</u></b></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span class="Apple-style-span" style="font-size: medium; line-height: 19px;">The automated process of proactively identifying vulnerabilities of computing systems in a network in order to determine if and where a system can be exploited or threatened; </span><span class="Apple-style-span" style="font-size: medium; line-height: 19px;">Vulnerability scanning typically refers to the scanning of systems that are connected to the Internet</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: center;">
<span style="font-size: medium;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: center;">
<span class="Apple-style-span" style="font-size: medium; line-height: 19px;"><span style="color: red;"><u><i><b>Techniques using for scanning</b></i></u></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px;">
<span class="Apple-style-span" style="font-size: medium; line-height: 19px;"><span style="color: red;"><u><i><b></b></i></u></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><u><b>ICMP Scanning</b></u></span><span class="Apple-style-span" style="border-collapse: separate; font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;"><b> <i>(internet control messaging protocol scanning)</i></b></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span class="Apple-style-span" style="border-collapse: separate; font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;">it is used to find whether the system is alive </span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span class="Apple-style-span" style="border-collapse: separate; font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;">we can find it in may ways</span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span class="Apple-style-span" style="border-collapse: separate; font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;"><u>1. ping </u></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span class="Apple-style-span" style="border-collapse: separate; font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;">go to cmd --> ping 192.168.70.14 or ping www.csice.org</span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span class="Apple-style-span" style="border-collapse: separate; font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;"><u>2.Angry ip scanner</u></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span class="Apple-style-span" style="border-collapse: separate; font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;">Scans the systems available in a given input range</span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span class="Apple-style-span" style="border-collapse: separate; font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;"> : <a href="http://www.angryip.org/w/Download" style="color: #073763; text-decoration: none;">http://www.angryip.org/w/Download</a></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><i><u><span style="color: red;"><b>checking for open ports (which all service are running and all...........)</b></span></u></i></span></div>
<div class="separator" style="background-color: black; clear: both; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: center;">
<span style="font-size: medium;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL8QU_3F1LZ8BoPcTZ9Str23JwzXBExYLFViI73emSKe7cpsn10OsJzLxOUZsOPwC4wQm4_Fe6cAojQnU6xhYjmoi5k7WYX3IiSXOwnIhN5Aq_4pZmm8GF-O1wk7dIaxYqyWlAfdmd9Ps/s1600/03fig01.jpg" imageanchor="1" style="color: #073763; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="215" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL8QU_3F1LZ8BoPcTZ9Str23JwzXBExYLFViI73emSKe7cpsn10OsJzLxOUZsOPwC4wQm4_Fe6cAojQnU6xhYjmoi5k7WYX3IiSXOwnIhN5Aq_4pZmm8GF-O1wk7dIaxYqyWlAfdmd9Ps/s320/03fig01.jpg" style="border-bottom-style: none; border-color: initial; border-image: initial; border-left-style: none; border-right-style: none; border-top-style: none; border-width: initial; position: relative;" width="320" /></a></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;">                                                        <i>fig-1:TCP 3 way handshaking </i></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><u>Terms:</u></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;">SYN ::<i>  </i>Synchronize; used to initialize connection between client and server </span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;">ACK::  Acknowledgement ; used to establish connection between two hosts</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><span style="color: red;"><i>Tools using for port scanning</i></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span class="Apple-style-span" style="border-collapse: separate; font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;"><u>1,Superscan</u></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span class="Apple-style-span" style="border-collapse: separate; font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;">Powerful tool from mcafee; TCP portscanner, pinger, hostname resolve</span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span class="Apple-style-span" style="border-collapse: separate; font-size: medium;"><span class="Apple-style-span" style="line-height: 19px;"><a href="http://www.mcafee.com/us/downloads/free-tools/superscan.aspx" style="color: #073763; text-decoration: none;">http://www.mcafee.com/us/downloads/free-tools/superscan.aspx</a></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><u><span class="Apple-style-span" style="border-collapse: separate;"><span class="Apple-style-span" style="line-height: 19px;">2. Zen map</span></span></u></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;">Powerful tool to detect o/s, version detection ,ping sweep, portscaning ect..........</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><a href="http://nmap.org/download.html%20" style="color: #073763; text-decoration: none;"><span style="color: black;">http://nmap.org/download.html </span></a></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><span style="color: red;"><i></i></span></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;">3.<u>net scan tools pro </u></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;">Its a paid software </span><span style="font-size: medium;"> with 15 days demo version</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><a href="http://www.netscantools.com/nstprodemorequest.html" style="color: #073763; text-decoration: none;">http://www.netscantools.com/nstprodemorequest.html</a></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><u>4. wups</u></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;">a powerfull UDP port scanner  (works only in 32 bit systems)</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><a href="http://ntsecurity.nu/toolbox/wups/" style="color: #073763; text-decoration: none;">http://ntsecurity.nu/toolbox/wups/</a></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;"><br /></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;">5.Net Scan Tool Suite Pack</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: medium;">A collection of tools; portscanners , flooders, webrippers ,mass e-mailers</span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<br /></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
IF U WHERE USING LINUX MAIL ME I WILL TEACH U HOW IT ALL DO IN LINUX</div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<br /></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<br /></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: xx-small;"><i>Reference: CEH slides 5th and 6th edition,</i></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: xx-small;"><i>                   McGraw.hill, hacking exposed network security secrets and solution 6th edition </i></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: xx-small;"><i>                   <a href="http://google.co.in/" style="color: #073763; text-decoration: none;">google.co.in </a></i></span></div>
<div style="background-color: black; font-family: Georgia, 'Times New Roman', serif; font-size: 14px; text-align: -webkit-auto;">
<span style="font-size: xx-small;"><i>                   defn from : <a href="http://wikipedia.org/" style="color: #073763; text-decoration: none;">wikipedia.org</a></i></span></div>
<span style="background-color: black; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 14px; text-align: -webkit-auto;">- See more at: http://hckr333-ch02.blogspot.in/#sthash.T23A0VKE.dpuf</span>
</div>

SCANNING

CHAPTER-2 SCANNING Scanning is the second phase of hacking By scanning we can find out: ...

FOOTPRINTING

CDRHINDI 0 Eathical hacking, Hacking, Pentesting January 25, 2015

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<div style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px; text-align: center;">
<u><b><span class="Apple-style-span" style="color: red; font-size: medium;">CHAPTER-1</span></b></u></div>
<div style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px; text-align: center;">
<i><u><span class="Apple-style-span" style="color: red; font-size: small;"><b>FOOTPRINTING</b></span></u></i><br /><br /></div>
<div style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">
<i></i></div>
<div style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">
Footprinting is the first and most convenient way that hackers use to gather information<br />about computer systems and the companies they belong to. The purpose of footprinting to<br />learn as much as you can about a system, it's remote access capabilities, its ports and<br />services, and the aspects of its security. </div>
<div style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">
<i style="font-style: normal;"><br />In order to perform a successful hack on a system, it is best to know as much as you can,<br />if not everything, about that system. While there is nary a company in the world that<br />isn't aware of hackers, most companies are now hiring hackers to protect their systems.<br />And since footprinting can be used to attack a system, it can also</i><i style="color: red; font-size: x-large; font-style: normal; font-weight: bold;"> </i>be used to protect it.<br />If you can find anything out about a system, the company that owns that system, with the<br />right personell, can find out anything they want about you.</div>
<div style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">
<br /></div>
<div style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px; text-align: center;">
<span class="Apple-style-span" style="color: red; font-size: small;"><b><u>Techniques used for footprinting</u></b></span></div>
<div style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">
<span class="Apple-style-span" style="font-family: inherit;"><u><b>Ping Sweep</b></u>: </span></div>
<div style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">
<span class="Apple-style-span" style="font-family: inherit;">Ping a range of IP addresses to find out which machines are awake.</span></div>
<div style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">
<span class="Apple-style-span" style="font-family: inherit;"><br /></span></div>
<span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">how to ping?</span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">go cmd type ping {then address}</span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">Eg:  </span><i style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">ping 192.168.70.14 or ping www.csice.org</i><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><i style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><br /></i><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><i style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><span class="Apple-style-span" style="font-style: normal;"><span class="Apple-style-span" style="font-family: inherit;"><b><u>TCP Scans:</u></b> </span></span></i><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span class="Apple-style-span" style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><span class="Apple-style-span" style="font-family: inherit;">Scan ports on machines to see which services are offered. TCP scans </span><br /><span class="Apple-style-span" style="font-family: inherit;">can be performed by scanning a single port on a range of IPs, or by scanning a </span><br /><span class="Apple-style-span" style="font-family: inherit;">range of ports on a single IP. Both techniques </span>yield<span class="Apple-style-span" style="font-family: inherit;"> helpful information.</span></span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span class="Apple-style-span" style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><span class="Apple-style-span" style="font-family: inherit;"><br /></span></span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span class="Apple-style-span" style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><span class="Apple-style-span" style="font-family: inherit;"></span></span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><div class="first-para" style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">
<span class="Apple-style-span" style="font-family: inherit;"><b class="bold"><u>Open Source Footprinting:</u></b></span></div>
<span class="Apple-style-span" style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><span class="Apple-style-span" style="font-family: inherit;">It is the easiest and safest way to go about finding information about a company. Information that is available to the public, such as phone numbers, addresses, etc. Performing whois requests, searching through DNS tables are other forms of open source footprinting. Most of this information is fairly easy to get, and within legal limits. One easy way to check for sensitive information is to check the HTML source code of the website to look for links, comments, Meta tags etc.</span></span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span class="Apple-style-span" style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><b><i><u>Tools using:</u></i></b></span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span class="Apple-style-span" style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">The best tool to get the information about the website is by using whois</span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span class="Apple-style-span" style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">go to </span><a href="http://www.allwhois.com/" style="background-color: white; color: #0b5394; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px; text-decoration: none;">http://www.allwhois.com/</a><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><a href="http://www.internic.net/whois.html" style="background-color: white; color: #0b5394; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px; text-decoration: none;">http://www.internic.net/whois.html</a><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><a href="http://www.uwhois.com/" style="background-color: white; color: #0b5394; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px; text-decoration: none;">http://www.uwhois.com/</a><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">enter the web address then u get the contact number and all about the website</span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">To trace an </span><b style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><u>E-MAIL </u></b><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><i style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><b>eMailTrackerPro</b></i><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"> : It analyzes the e-mail header and provides the IP Address of the machine that sent the e-mail. This can then be used to track down the sender. This is especially helpful in preventing spamming and spoofing</span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><u style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><b>To knw where all servers u where connected now </b></u><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">use the tool : </span><b style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">callerip</b><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><b style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><u>TO KNW THE TIMELINE OF A WEBSITE</u></b><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">Enter the url in :</span><a href="http://www.archive.org/index.php" style="background-color: white; color: #0b5394; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px; text-decoration: none;">http://www.archive.org/index.php</a><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"> , http://www.thememoryhole.org/</span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><b style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><u>Get company's information</u></b><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">Use search engines such as </span><a href="http://google.com/" style="background-color: white; color: #0b5394; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px; text-decoration: none;">google.com</a><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"> or </span><a href="http://wikipedia.org/" style="background-color: white; color: #0b5394; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px; text-decoration: none;">Wikipedia.org</a><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><b style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><u>To study the company's location and infrastructure from a remote place</u></b><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">use google earth</span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">download it from: </span><a href="http://www.google.com/earth/index.html" style="background-color: white; color: #0b5394; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px; text-decoration: none;">http://www.google.com/earth/index.html</a><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><b style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><u>To get information about a person in that company</u></b><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><b style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><u>.</u> </b><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">use social networking sites like : </span><a href="http://www.facebook.com/" style="background-color: white; color: #0b5394; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px; text-decoration: none;">http://www.facebook.com/</a><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"> , </span><a href="http://www.myspace.com/" style="background-color: white; color: #0b5394; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px; text-decoration: none;">http://www.myspace.com/</a><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"> ect...........</span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><b style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">. </b><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">use websites like : </span><a href="http://www.blackbookonline.info/" style="background-color: white; color: #0b5394; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px; text-decoration: none;">http://www.blackbookonline.info</a><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">/  ,</span><a href="http://www.peoplesearch.com/" style="background-color: white; color: #0b5394; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px; text-decoration: none;">http://www.peoplesearch.com/</a><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">  ect.........</span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">these help to get the bank details , credit card details, mobile numbers , past history , ect..................</span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><b style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><u>To trace the path of website</u></b><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">Use    avast internet securtiy-->network utlities</span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">or use  neo trace</span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><b style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><u>DNS Enumeration </u></b><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">By using </span><b style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"><i>sam spade</i></b><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;"> we can do dns in windows</span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">or in cmd : type (nslookup servername)</span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;">if u want to know how dns is do in Linux please e-mail me</span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: xx-small;"><i>Reference: CEH slides 5th edition,</i></span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: xx-small;"><i>                   McGraw.hill, hacking exposed network security secrets and solution 6th edition </i></span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: xx-small;"><i>                   <a href="http://google.co.in/" style="color: #0b5394; text-decoration: none;">google.co.in </a></i></span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: xx-small;"><i>                   defn from : <a href="http://wikipedia.org/" style="color: #0b5394; text-decoration: none;">wikipedia.org</a></i></span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /><span style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: xx-small;"><i><b>This can be downloaded from torrent </b></i><a href="http://torrentz.eu/" style="color: #0b5394; text-decoration: none;">http://torrentz.eu/</a> or </span><span class="Apple-style-span" style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: xx-small;"><b><i>mail me : eldho@live.in</i></b></span><br style="background-color: white; font-family: Georgia, Utopia, 'Palatino Linotype', Palatino, serif; font-size: 15px; line-height: 21px;" /></div>

FOOTPRINTING

CHAPTER-1 FOOTPRINTING Footprinting is the first and most convenient way that hackers use to gather information about computer syst...