Showing posts with label Cyber Forensics. Show all posts
Showing posts with label Cyber Forensics. Show all posts

Thursday, April 9, 2015

How to Encrypt Your DNS for More Secure Browsing



We’ve been touting the benefits of third-party DNS servers for a while now, but one additional benefit that might be of interest is the ability to encrypt all of your DNS requests, further protecting you from anybody spying on you in the middle.
DNSCrypt, from the great team at OpenDNS, is the simple solution that we’ll use to add encryption between your computer and the DNS server. It’s a lightweight solution that works on either Windows or Mac — sadly no mobile support so far.
What this tool is actually doing is creating an encrypted connection to any of the supported DNS servers, and then creating a local DNS proxy on your PC. So when you try to open howtogeek.com, your browser will send a regular DNS query to the 127.0.0.1 localhost address on port 53, and that request will then be forwarded through the encrypted connection to the DNS server.

Sunday, December 21, 2014

Man In The Middle Attack With Kali Linux


It’s one of the simplest but also most essential steps to “Conquering” a network. Once a hacker has performed a “Man In The Middle” attack (MITM) on a local network, he is able to perform a number of other “Side-kick” attacks. This includes, cutting a victim’s internet connection; intercepting Emails, logins, and chat messages; and many others.
And only one tools is needed for this attack:
An install or Live boot of Kali Linux, a well-known OS containing a collection of hundreds of penetration testing tools.

If you have that, then proceed to the tutorial below, and we’ll demonstrate how to perform this powerful attack.

Sunday, November 16, 2014

Denial-of-service Attack – DOS using hping3 with spoofed IP in Linux



In computing, a denial-of-service (DoS) or distributed denial-of-service (DDoS) attack is an attempt to make a machine or network resource unavailable to its intended users.
Although the means to carry out, the motives for, and targets of a DoS attack vary, it generally consists of efforts to temporarily or indefinitely interrupt or suspend services of a host connected to the Internet.
As clarification, distributed denial-of-service attacks are sent by two or more persons, or bots, and denial-of-service attacks are sent by one person or system. As of 2014, the frequency of recognized DDoS attacks had reached an average rate of 28 per hour.
Perpetrators of DoS attacks typically target sites or services hosted on high-profile web servers such as banks, credit card payment gateways, and even root nameservers.
Denial-of-service threats are also common in business, and are sometimes responsible for website attacks.

Sunday, August 31, 2014

Advanced Networking Commands


In one of our previous tutorials, you've learned how to use basic commands in Command Prompt. Now it's time to take things to the next level and show how to use some of the more advanced commands. The first set of advanced commands contains useful network commands which facilitate the following: viewing information about your network devices and connections (assigned IP Address, the MAC of the network card), checking the availability of a certain host and displaying a wealth of networking and ports information
.

Retrieving Information about Your Network Connection

To obtain detailed information about your network connection, use the ipconfig command. Type ipconfig in Command Prompt and press Enter. As you can see below, a list with the network devices existing on your system and their IP addresses is displayed. You get also details such the default gateway, subnet mask or the state of the network adapter.

Thursday, August 14, 2014

Hack Security Features in Remote PC



First Hack the Victim PC Using Metasploit 

Once you got the meterpreter session use ‘shell ‘command to get command prompt of the target



Sunday, June 29, 2014

Change ALL Files Extension in Remote PC (Confuse File Extensions Attack)



First Hack the Victim PC Using Metasploit 




Once you got the meterpreter session use ‘shell ‘command to get command prompt of the target

Sunday, June 8, 2014

How To Bypass Antivirus Detection Making An Executable FUD



So in this tutorial we will show you step by step on how to make a virus Fully Undetectable from all the antiviruses. Their are lots of approaches, however here we will take a look at how to make an executable FUD using msfencode.

Requirements
  • Metasploit ( Kali Linux )
Attention
We are using some harmless test files but don’t infect people with any real viruses. That would be a crime.
Purpose
Antivirus protects machines from malware but not all of it .there are ways to pack malware to make it harder to detect. well use metasploit to render malware completely invisible to antivirus.
Creating a Listener
This is a simple payload that gives the attacker remote control of a machine. It is not a virus ant won’t spread, but it is detected by antivirus engines. In Kali Linux in a Terminal windows execute these commands:

msfpayload windows/shell_bind_tcp LPORT=2482 X > /root/listen.exe

ls -l listen.exe

Sunday, May 11, 2014

Metasploit Modules Post Windows Gather {Computer Forensics Tutorial}




Now Open Kali Linux terminal type msfconsole
 
Once you got the meterpreter session 

1)      arp_scanner
The "arp_scanner" post module will perform an ARP scan for 
a given range through a compromised host.



Monday, May 5, 2014

Metasploit Windows Post Capture Modules {Computer Forensics Tutorial}




Now Open Kali Linux terminal type msfconsole

Once you got the meterpreter session

keylog_recorder

The "keylog_recorder" post module captures keystrokes on the compromised system. Note that you will want to ensure that you have migrated to an interactive process prior to capturing keystrokes.



Sunday, May 4, 2014

How to Gather Microsoft Outlook Saved Password in Remote PC



Windows Gather Microsoft Outlook Saved Password Extraction

This module extracts and decrypts saved Microsoft Outlook (versions 2002-2010) passwords from the Windows Registry for POP3/IMAP/SMTP/HTTP accounts. In order for decryption to be successful, this module must be executed under the same privileges as the user which originally encrypted the password.


Exploit Targets
Microsoft Outlook 2003, XP
Microsoft Outlook 2007
Microsoft Outlook 2010

Now Open Kali Linux terminal type msfconsole
 
Once you got the meterpreter session

Thursday, May 1, 2014

{ New Tutorial } How To Stay Anonymous Online


This Tutorial Will cover the fallowing:

- Using Fake Identity
- Using Search Engine anonymously
- Using VPN / Proxy and more...

Fake Identity

Why use fake identity? Well it is a really good way to hide your real identity online for example, if you are creating key loggers it isn't
the best idea to use your everyday E-mail to receive logs.

Firstly, You have to build an idea of who you want to be. Without proof, you can claim to be virtually anyone.
Well it isn't exactly hard you can just make the info up by yourself or you can use online id generators I recommend any of the fallowing:

Tuesday, April 15, 2014

Forensics of Remote PC (Part 2)



Once you got the meterpreter session use ‘shell ‘command to get command prompt of the target.

Now type wmic /? Displays help


wmic cpu list full – get Name, Caption, MaxClockSpeed, DeviceID, and etc status

Forensics of Remote PC (Part 1)



Once you got the meterpreter session use ‘shell ‘command to get command prompt of the target

How to Find System Boot Time and Install Original Date
Systeminfo – Displays detailed configuration information about a computer and its operating system, including operating system configuration, security information, and product ID, and hardware properties, such as RAM, disk space, and network cards.


Contact Form

Name

Email *

Message *