Skip to main content

Posts

Showing posts from September, 2021

Windows Hacking | Fast Track |

This is just another way of hacking Windows, and there are many more ways to do this. This is a video posted for educational purposes only. Metasploit was used for this video. First, we need to create a payload for windows. We then send it to the victim's computer and take control of that computer. (Must be sent by email or software.)  

How to deceive targets - 16

A good hacker is an expert. Being under the radar enables him to remain undetected By pretending to be a network administrator. He uses it to make a hacker do this method of cheating or disguise. Spoofing As you have read in the previous chapter, deception is the use of deception techniques by hackers Mimic or pretend to be another person, organization, software, or website. This is the same as Intent to bypass the target’s security protocol to access the target’s information Hackers want it. Here are some of the most common deception techniques used by hackers: 1. IP spoofing This technique is to mask the IP address of the computer that the hacker is using in order to To trick the network into thinking that a legitimate user is communicating with the target computer. arrive In doing so, hackers will imitate another IP address or range to satisfy the Network administrator. This spoofing hacker technique works by looking up the IP addresses used by trusted hosts. After finishing Therefo

Hacking Tools - 15

Both ethical hackers and criminal hackers can use a large number of hacking tools, which can be used to Attack or protect specific systems. These tools can be crowd-sourced from the Internet through forums And other online centers specifically for hackers. As a beginner ethical hacker, it is very important to learn the most commonly used detection tools Possible vulnerabilities, test and manage actual hacking attacks. Here are 8 most popular tools Used by hackers today: 1. Angry IP Scanner (ipscan) Most often referred to by experienced hackers as ipscan, this tool is used to track computers in the following ways Their IP address and listening port to check the gateway that can direct them directly Enter the target computer system. This tool is also often used by system engineers and Administrators to check for possible vulnerabilities in the systems they serve. This tool is open source, can be used across platforms, and is known as one of the best tools. Effective hacking tools are ava

About The Attack - 14

When you deeply understand the thinking of hackers, you may realize that there are two types of hackers You will definitely encounter-passive and active. Know the types of attacks they carried out Will prepare you to install the correct way to protect the system you are trying to protect Security Protocol. What is a Passive Attack? A passive attack is an attack wherein the hacker waits for the perfect opportunity to penetrate your system. This type of attack is typically done in order for a hacker to observe your networking structure, the type of software you use, or any security measures that you have already installed. Passive attacks typically happen when a hacker monitors possible system vulnerabilities without making any changes to the data that he targets. You can think of this attack as a hacker’s means of researching his target in order to launch a more effective attack. Passive attacks are classified into: 1. Active reconnaissance This happens when an intruder listens right in

Look at System Vulnerabilities -13

Once you can see how people can hack into your computer’s security system, you will Be able to figure out what an attacker might want to target on your computer. If you don't know Different vulnerabilities on most computer systems, you can find information about vulnerabilities Database such as 1. US-CERT Vulnerability Description Database ( kb.cert.org ) 2. Common vulnerabilities and exposures ( cve.mitre.org/cve ) 3. NIST National Vulnerability Database ( nvd.nist.gov ) These websites document all known system vulnerabilities, which will enable you to make the right assessment for your system. Once you are making the assessment, you can use different tools to administer vulnerability management. Depending on what vulnerabilities that you managed to find, you can use the information you found about the system and identify what attack is most likely to happen. These attacks can be done to do the following:         1. Take a screenshot while opening a confidential file         2. Ac

System Scanning - 12

Once you know how to proactively collect information about your network, you will know how Criminal hackers may launch attacks on your network. Here are some You can do the following to see how vulnerable your system is: 1. Use the data you find in the Whois search to see the correlation between the hostname and IP address Layout. For example, you can verify information about certain internal hostnames, operating protocols, Running services, open ports, and applications are displayed in the web search, which may give you some idea About how criminal hackers quickly penetrate into your system. 2. Scan your internal hosts and understand what malicious users might access. Remember, the attacker May come from within your organization and set up a shop on one of your hosts, which may be very difficult Pointed out. 3. Check the ping utility of the system, or use a third-party utility to ping different addresses at the same time. You can use things like NetScan Tools, fping (if you are using

Mapping the Network - 11

When you want to make a solid plan on how to make an ethical hacking plan, one of them The first thing you need to know is how much other people know about your network. Although you might think that you are completely anonymous on the Internet, and your computer keeps leaving footprints at that point For you and the system, you are using. To better understand how much information about you or your domain is available to the public, you can You may want to look at the following: Whois Whois is an online tool that you can use to check whether a domain name is available. However, it can also be Used to view registration information about existing domains. This means it is very likely Your email address and contact information are being broadcast online. Whois also provides information about the DNS server your domain is using and information about Technical support from your service provider. It also has a tool called DNSstuff, which does the following. Show which hosts handle emails for

WMAP Web Scanner | Metasploit

  WMAP is a feature-rich web application vulnerability scanner that was originally created from a tool named SQLMap. This tool is integrated with Metasploit and allows us to conduct web application scanning from within the Metasploit Framework.  See more =  https://www.offensive-security.com/me...

How To Hack A Public CCTV System.

  This is a simple practical video using Metasploit.It is designed to be accessible from any CCTV system in the world (public). This is implemented by a website called shodan.  This includes how to hack several common CCTV systems using Kali Linux and one of its tools. This is really for educational purposes only. Do not use this to do bad things. I am not responsible for that. Knowledge only Link =  https://www.shodan.io/

What did the others see? - 10

 By first looking at the vulnerabilities of the system you need to test, you can better understand What a potential criminal hacker might see from the outside. To do this, you need to look at what kind of Whenever someone uses your network, your system will leave a trail. You can collect these footprints by doing the following: 1. Search online for the organization you work for. If you are performing a test on Your personal system, search for items relevant to you. 2. Detect possible open ports or run a complete network scan to determine specific system reports Outsiders may see your device. Since you have the system you want to test, you can Use local port scanners and shared discovery tools available on Windows, such as LANguard or GFI. After that, you can perform more specific searches online. Try to find the following: 1. Patent or trademark 2. SEC documents 3. Acquisitions and previous mergers 4. Press releases about the most important purchases and changes in your organization 5.

Organize your project - 09

  These should be the systems, applications, and devices on which you should perform the test: 1. E-mail, print, and file server 2. Firewall 3. Database, Web, and Application Server 4. Client/Server Operating System 5. Tablets, laptops, and workstations 6. Switches and routers Now, the number of tests you can perform will depend on how many devices and systems you need Perform your test. If your network is small, then you can test every peripheral device. However, the whole The hacking process can be flexible and should depend on what makes the most sense to you. If you experience problems with peripherals or systems that should be tested first, consider the following factors: 1. The type of operating system or application running on your system 2. Classification and quantity of key information stored in your computer system 3. Systems and applications located in the network. When should you start hacking? Depending on when you choose to launch a test attack, every attack will succeed.

2017 Equifax data breach

  Date = The crisis began in March 10, 2017   Location = USA   Parties involved = Chinese state-sponsored hackers ( Four Chinese military officers were also charged.)   Effect = A data breach that reveals the personal information of 147 million people. Their names, addresses, date of birth, Social Security numbers, and driver's license numbers have been revealed. A small subset of records - about 200,000 in order - includes credit card numbers; This group may consist of people who have paid Ecifax directly to order to view their own credit report. ( The company has entered into global agreements with the Federal Trade Commission, the Consumer Financial Protection Bureau, and 50 U.S. states and territories. That includes up to $ 425 million in aid to help victims of data breaches. ) How it Happen =  The company was initially hacked through a consumer complaint portal. The attacker used a well-known vulnerability that should have been patched but was not patched due to a malfuncti

Mapping your Abilities - 08

When looking for vulnerabilities, you don’t need to check every security protocol you have Install on all your devices at the same time not only will this be confusing, but it may also cause Some problems because there are too many things on your plate. Where possible, let you make your tests easier to manage by breaking the test project into more actionable steps. To make it easier for you to decide which system to use first, ask yourself the following questions: 1. Which systems will cause the most trouble or cause the most problematic losses when under attack? 2. Which parts of your system are most vulnerable to hacker attacks? 3. Which parts of your system are the least recorded, rarely checked, or you know almost nothing? Once you have completed the goal creation and identified the most vulnerable part of the system, you can Now you can decide which ones you should test first. By understanding the results you want to achieve and making An actionable plan where you can set your exp

Goal setting - 07

You need to establish your own hacking target by discovering vulnerabilities in your own system in order to Establish sufficient security to protect them from attacks. Since you have to fight a very cunning enemy, You need to develop very specific goals and schedules to determine when you can start hacking your system. Important note: Remember, before creating a plan, you need to make sure you have all Credentials of the test system. Also, make sure you document the ethical hackers and systems you have tested And provide copies of documents to manage. This will ensure that you have In any case you need to protect yourself when you find the system is threatened or when something happens An accident occurred during your investigation. If you are testing your own system, record everything, including all software peripherals you use Tested and the type of test you performed are required. This will ensure that you have followed all The right steps, if you need to go back to your steps, you

Establishing a Hacking Plan - 06

When you want to protect your system, you need to know where you might be attacked by hackers. This means that in order to catch a thief, you need to think like a person. Now that you know what hackers might be looking for when scanning, you know Where to start creating your security points and where you should test for vulnerabilities. At this point, you understand why a particular hacker might pinpoint a particular organization, individual, Or a separate device as the target. Any smart hacker will target the following vulnerabilities: 1. Users or administrators who may leave the target device unattended 2. Weak or unchanged passwords that may be used on all sync devices 3. Equipment owners who do not understand the complexity of their own systems or do not understand the latest systems Security Protocol When you think about how to manage your computer and Internet connection, you think Most of the systems you use every day are not as safe as you hope. hacker Knowing this, so they can

Things That Hackers Search For - 05

 For a moment, walk into the mind of criminal hackers. If you want to steal information or destroy The system, you know that you can get value from it. 1. Organizational design, filing, and registration Malicious hackers usually perform online searches to find possible targets and are the best of them Candidates for attack are those organizations that provide detailed descriptions of devices Can access, including the type of software and hardware they install. Once the hacker knows Someone has access to possible vulnerabilities in the organization’s technical security, and they will get Thoughts about whom they should attack first. Any hacker can obtain this very useful information through a simple online search. Through online mining, you can find all-SEC registrations, public tenders, publicly accessible documents, subscribers, etc. you can Even search for all the people involved in a particular organization, the time the website was published, and Webmasters are involved in creating

How Hackers Find Their Targets - 04

Criminal hackers may be one of the most strategic researchers you will encounter in the field of the technology world. In order for hackers to obtain as much valuable data as possible in one attack, they will wait Let the perfect victim appear in their raid, study their prey, and then design the attack they think is the best Can focus on their skills. Black hat attacks can target one person or several people at the same time, but in most cases, hackers Operate in a specific niche market. A hacker wants to find a loophole in the banking system Online because this will give them access to millions of deposits and they can steal these deposits through their system. Some people value personal information and continue to conduct personal attacks. Some people prefer to deface the login page And spread their capabilities through website security. Some people choose to hack into accounts so that they can remain anonymous and use the service without paying a penny. Regardless of the criminal ha