CounterMeasures for IP ADDRESS

What is an IP Address ::   An Internet Protocol address (IP address) is a numerical label assigned to each device (e.g., computer, printer) participating in a computer network that uses the Internet Protocol for communication.


Since these numbers are usually assigned to internet service providers within region-based blocks, an IP address can often be used to identify the region or country from which a computer is connecting to the Internet. An IP address can sometimes be used to show the user's general location.

ok let get to know the ip address in a layman and very simple way ::

IP address is like a phone no. or the house no. When you have to talk to person you dial his no. in same way when you connect to internet you get a no., from which people connects to you and talk to you that no. which connect to you in internet is known as IP address.

If a person what to share a book, he takes your address now that address is know as your identity in same way is person want to share something about on internet then it uses your IP address .

In the world of internet, ip address is your identification


HOW IP ADDRESS HELPS IN HACKING

1) It helps to connect to your computer and then helps in entering in to your computer

2) If person knows your ip address then remote shutdown (means your computer can be shutdown) by the person

3) Virus can be uploaded to your computer and you will not get to know

4) Sensitive data can be hacked and can to be transferred form your computer to another or person itself

5) Blues Port Scanner – This program will scan the IP address that you chose and identify open ports that are on the target box.

6) Your ip address can be used for ip spoofing and with your ip hacking can be made and when ip is trace you will  be the witness or theaf


HOW TO KNOW YOUR IP ADDRESS

1) Open your run command (by pressing window key + r) then type cmd

                       a command prompt window will open and type ipconfig (press enter)

2) Or go to this website :: http://whatismyipaddress.com/

How to Protect your IP address

The most common method to protect your IP address is to use a proxy server in one form or another.


WHAT IS PROXY SERVER

A proxy server is a computer that offers a computer network service to allow clients to make indirect network connections to other network services. A client connects to the proxy server and then requests a connection, file, or other resource available on a different server. The proxy provides the resource either by connecting to the specified server or by serving it from a cache. In some cases, the proxy may alter the client's request or the server's response for various purposes.

Basically proxy server is masking or hiding your identity behind the fake id

To keep machines behind it anonymous (mainly for security)



Software or uses proxy servers to Protect your IP address ::

Ultrasurf is the software which protects your ip and even provide you proxy server

Hide IP Platinum Next Gene v1.52 Download => Hide IP Platinum crack + serial key

super hide ip download => Super hide ip crack + serial key

There Some proxy servers that helps to protect your ip address ::

1) http://www.bestproxysites.com/

2) http://www.proxysites.com

3) http://newipnow.com/

4)http://www.antiwebfilter.com/web-proxies/      good one

5) http://surfmo.com/

There are many more just ask the google baba........

Open purely blocked websites

Open purely blocked websites in your colleges or school or in your office any where

                                                                      OR

open your websites were ever you want even it is blocked tightly :)


here the tricks goes like this

Take out the the ip address of the website

Do like this

open run command type cmd
a command prompt will open

type in there

ping (space) <the website name>

here the example

ping facebook.com

when a line comes "Ping statistics for 69.63.181.12:"  this is facebook's ip address

** if you type the ip address in address bar like this http://69.63.181.12 facebook will open

now open your calculater (window + R ) type calc press enter to reveal the secret

Decimal to  octal form

Convert the ip address which is in decimal form into octal form..

here what to do

type down the ip address

open scientific calculater

select Dec type the first part and then select Oct

and write it down

here is the way

69 = 105
63 = 77
189 = 275
11 = 13

now when you have taken out all values out

now at the address bar type http://0105.077.0275.013    all the values proceeding with 0.


Decimal to  Hexadecimal form

Convert the ip address which is in decimal form into Hex form..

here what to do

type down the ip address

open scientific calculater

select Dec type the first part and then select Hex

and write it down

here is the way

69 =  45
63 =  3F
189 = BD
11 =  0B

now at the address bar type http://0x453FBD0B   the first value proceeding with 0x

** You can do it with any of your favorite website **

##  AND the most simple is use Proxy Server as i told you earlier

TO know about Proxy Server = Click on me

##  You can use google translater

Goto to Google translator = Click on me

type the website name convert it into anyother language and open it simple


## Use anonymizer.ru

to goto the website = Click on me

MetaSPLOIT BASICS

                           METASPLOIT

>Metasploit Framework is an open source project created by HD Moore in 2003  acquired by Rapid 7 LLC on October 21,2009.
>Which includes hundreds of exploits and payloads.
>It is considered one of the best penetration tools with support for vulnerability assessment using Nessus and other famous tools.
>Its written in Ruby....
>Metasploit supports all platforms including Windows, Linux and MAC Os
*************
use nmap in metassploit => NMAP in metasploit click on me :)
METERPRETER BASICS => LEARN how to use METERORETER Click on me :)
Cross Site Scripting => Click on me :)
***************************************

Metsaploit Framework these
> MsfGUI
> Msfcli
> Msfweb
> Metasploit Pro
> Armitage

The library architecture in Metasploit is as follows:

> Rex: This is the basic library used is Metasploit for various protocols, transformations and socket handling. It supports SSL, SMB, HTTP, XOR, BASE64, and random text...

>Msf :: Core: This library defines the framework and provides the basic application interface for Metasploit.

>Msf::Base This library proviedes a simplified and friendly applcation interface for the the Metasploit Framework

*) cd /opt/metasploit/msf3 to enter the metasploit framework directory -> ls

> The important directories listed are
data
external
tools
plugins
scripts

cd data/ => contains meterpreter exploits wordlists templates & many more

cd meterpreter/ => .dll files (.dll files as well as other interesting things, which are typically required to enable the Meterpreter Functionality called post exploitation.)

> wordlist directory -> directory in the data directory. This directory contains the list of usernames and paswords for different services such as HTTP, Oracle, Postgres, VNC, SNMP and more.

> To update the metasploit -> msfupdate

Exploits 
An exploit is a computer program that takes advantage of a particular vulnerability
> cd /opt/metaspoit/msf3/modules/exploits -> ls -> cd windows (going into windows) -> ls
so view the code of any exploit we type -> cat <exploitname> -> cat ms08_067_netapi.rb

Auxiliary
Auxiliary are exploits without payload.

> There are different types of auxiliary modules such as
scanner for protocols
Networks protocol fuzzers
Port scanner modules
wireless
Denial service modules
Server modules
Administrative access exploits and so on.

**) ls -> ftp -> cat <modules name> to see the exploit

PAYLOADSA payload is a piece of software that runs after a system is compromised. The payload us typically attached to and delivered with an exploit

*) 3 different types of payloads
> Singles
> Stagers
> Stages

Stages : The main role of stages payload is that they use tiny stager to fit into small exploitation spaces. During exploitation, an exploit developer has a very limited amount of memory that he can play with. The stagers use this space and their work is to pull down the rest of the stages payload.
Stages are the type of payload that are downloaded and executed by the stagers payload such as Meterpreter, VNC server and so on.

Singles : Singles are self contained payloads for a specific tasl such as creating a user, binding a shell, and so on.

Stagers :  The stagers use the space and their work is to pull down the rest of the stages payload.
Stagers are payloads that makes a connection between the attacker ad the victim machine.
Example
If i want to inject a meterpreter payload we cannot fit the entire Meterpreter DLL into one payload, so the entire process is broken up into two parts. The first is the smaller payload  called stagers. After the stagers are executed they make a network connection between the attacker and the victim.
Over this network connection a larger payload is delivered to the victim machine and this larger payload is known as stages.


> Payloads are categorized according to OS such as AIX, BSD, Windows, Linux and so on.

EXPLOITATION

Exploitation refers to the ar of compromising a computer system. The basics of computer exploitation involves a deep understanding of the vulnerabilities and payloads.
An exploit is a piece of well-written code, compiled and executed on a trageted system, which may compromise that system.

An exploit usually targets a known vulnerability, a flaw in a service or a poorly written code.

BASIC TERMS OF EXPLOITATION

> Vulnerability : A vulnerability is a security hole in software or hardware, which allows an attacker to copromisea system. A vulnerability can be as simple as a weak password or as complex as a Denial of Service attack

> Exploit : An exploit refers to a well known security flaw or bug with which  a hacer gains entery intoa system. An exploit is the actual code with at attacker takes advantage of a particualar vulnerability.

> Payload : Once an exploit exectes on the vulnerable system and the system has been compromised, the payload enables us to control the system. The payload is typically attached to the exploit and delivered.

> Shellcode : This is a set of instructions usually used as a payload when the exploitation occurs.

> Listener : A listener works as component waiting for an incoming connection.

======================
KEEP safe ur ANDROID => CLICK ON me ;)
10 PROXY Websites => Click on me :))
=============================================

The Biggest question of how exploitation actually works ?????

Heres' the SECRETS FINALLY REVEALED

An attacker basically sends an exploits with an attached payload to the vulnerable system.
The exploit runs first and if it succeeds, the actual code of the payload runs.
After the payloads runs, the attacker gets fully privileged access to the vulnerable system, and then he may download data upload malware, virus, backdoors or whatever he wants.

How to compromising a system

Step 1 : Scan the IP Address to find
                           open ports -> operating system -> services
Step 2 : Identifying a vulnerable service and finding an exploit in Metasploit for that particular service.

Step 3 : Is the exploit is not available in Metasploit :: go for through the internet databases such as
>> www.securityfocus.com
>> www.exploitdb.com
>> www.1337day.com

Step 4 : After successfully finding an exploit

Step 5 : we launch exploit and compormise the system.


Tools used

> Port scanning are Nmap (Network Mapper),Autoscan, Unicorn Scan and so on.

Syntax for nmap
  nmap -v -n ip address

-v verbose -> to get verbose output
-n -> parameter to disable reverse DNS resolutions

Syntax for intense scan by nmap
  nmap -T4 -A -v ip address

====================
NMAP tutorials => Click on me :)
Recover JPEG FILES => CLick on me :))
==================================================

After gathering information -> opne msfconsole -> search dcom (it searches all of the windows RPC Related exploits in its database.........

Searching for an exploit in Metasploit through the
syntax
search <servie name> command
© Pprasoon nigam
Note : if the exploit is not available in Metasploit, then we have to search the Internet exploit database for that particular exploit.

>> How to search for an exploit on these online services
open this website => www.1337day.com
  Search for exploits on the Windows RPC service
find the exploit and save it

Now we exploit the target machine

as we know that scanned the IP address and found all the ports
and exploit one those ports

launch the terminal -> type gcc <exploit name with path > -o <exploitname>
for example
gcc dcom.c -o dcom

./<filename>

use exploit/windows/smb/ms08_067_netapi (in msf console) and press enter

then show options
RHOST (remote host)

set RHOST ip address

exploit
MORE metasploit BASICS and HACKING => METERPRETER => Meterpreter Click on me :)