Fadu Hack: Lan Hacking

What is Snort?

<div dir="ltr" style="text-align: left;" trbidi="on">
<h2 style="text-align: left;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiu9cs0S6XzqGP_AJrrNRwJkJaAAqhrWpUGLtQ3pbEN60G8woul0IwXbaWIjcqc0JXgcZwQZAIAahUD9dsKAOwomzCzDeN0U4_FPxYcRgU-LYURjRXb-_Mc-WmSIciXeuN3QIKB9v2tU2nF/s1600/bg_SnortTM.png" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="176" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiu9cs0S6XzqGP_AJrrNRwJkJaAAqhrWpUGLtQ3pbEN60G8woul0IwXbaWIjcqc0JXgcZwQZAIAahUD9dsKAOwomzCzDeN0U4_FPxYcRgU-LYURjRXb-_Mc-WmSIciXeuN3QIKB9v2tU2nF/s320/bg_SnortTM.png" width="320" /></a>What is Snort?</h2>
It is an open source intrusion prevention system capable of real-time traffic analysis and packet logging.<br />
With over 4 million downloads and nearly 500,000 registered users, it is the most widely deployed intrusion prevention system in the world.<br />
By leveraging the flexibility of the Snort rules language, Talos is able to provide detection and prevention capabilities well in advance of an actual threat.<br />
<h3 style="text-align: left;">
Get Started</h3>
<h4 style="text-align: left;">
Step 1</h4>
Find the appropriate package for your operating system and install.<br />
<a href="http://i1-news.softpedia-static.com/images/news2/Snort-3-0-Released-in-Alpha-Stage-467313-2.jpg" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"><img border="0" height="112" src="http://i1-news.softpedia-static.com/images/news2/Snort-3-0-Released-in-Alpha-Stage-467313-2.jpg" width="200" /></a><br />
Windows<br />
<blockquote class="tr_bq">
execute: Snort_2_9_7_5_Installer.exe</blockquote>
Downloads<br />
<blockquote class="tr_bq">
<a href="https://www.snort.org/downloads/snort/Snort_2_9_7_5_Installer.exe">Snort_2_9_7_5_Installer.exe</a></blockquote>
<h4 style="text-align: left;">
Step 2</h4>
Sign up and get your Oinkcode. We recommend that everyone subscribe to get the latest detections. For those unable to subscribe, creating an account on Snort.org will still give you access to the registered user rule packages.<br />
<h4 style="text-align: left;">
Step 3</h4>
Stay current with the latest updates using <span style="background-color: red;">PulledPork</span><br />
Community rules<br />
<blockquote class="tr_bq">
wget https://www.snort.org/rules/community<br />
tar -xvfz community.tar.gz -C /etc/snort/rules</blockquote>
Downloads<br />
<blockquote class="tr_bq">
<a href="https://www.snort.org/downloads/community/community-rules.tar.gz">community-rules.tar.gz</a><br />
<a href="https://www.snort.org/downloads/community/opensource.tar.gz">opensource.tar.gz</a></blockquote>
<h4 style="text-align: left;">
Step 4</h4>
<a href="https://www.snort.org/documents">Read Docs</a><br />
For more details please reference our install guides on the documents page.</div>

What is Snort?

What is Snort? It is an open source intrusion prevention system capable of real-time traffic analysis and packet logging. With over 4 mi...

How to use sslstrip in kali linux

<div dir="ltr" style="text-align: left;" trbidi="on">
<b>Intro</b> – In this tutorial we will use sslstrip for stealing password from any PC which is connected in LAN. SSLStrip basically hijacks HTTP traffic. Now a days its little difficult to steal password of some website. <br />
<br />
1. How to open<br />
A. GUI Method<br />
<blockquote class="tr_bq">
Application →Kali Linux → Information gathering → SSL Analysis → sslstrip</blockquote>
<div style="text-align: center;">
<img height="358" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhLPVMNk8im_E-6d8cdSR5b2Y5mOIufA1S_jXojIpdCSVkNOuOnNg_-PcZp2V67HS_yqeoTji3vWj_p6eh97rZoz8of9gozQQlAZrHEkaDP-qjeHpe69bQ7aMi9BAP3KGsTQx8kl9T5iOBZ/s640/1_new.jpg" width="640" /></div>
B. Open terminal type<b> sslstrip –h</b> this command will open sslstrip with help option<br />
<div style="text-align: center;">
<img height="325" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2naU7MX0vqjSGEwsYh65Tc7GuRk4RC9UxxwRF9zXPs5906buYwME9BOHYtxj2JqKrG3H9ohv1IIAhy4kX25Kk-XdBbAY1kk2Dz7U-YePN7VuoBBEgcuwWHe8ejqIafeles22l5eImAU_7/s640/1b_new.jpg" width="640" /></div>
Before starting sslstrip we need to do some other works for trapping our target<br />
a.       IP forwarding<br />
b.      IP table for redirect 80 to 8080<br />
c.       Finding Gateway IP<br />
d.      Finding Target IP<br />
e.      Arpspoof<br />
<br />
2. This command is used to enable IP forwarding.<br />
<blockquote class="tr_bq">
Syntax – echo ‘1’ > /proc/sys/net/ipv4/ip_forward</blockquote>
<div style="text-align: center;">
<img height="129" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZqWAtYqIrzpojLs3gu_pOOhryMCxJ5RcJ_DRQM3LsXrgUqV2sB1Vg_x7lyxyKKEZ1coOuZc3MU4WEgF_-KulL7n0MSzfpDUmmTzWbu8cQrnSfptLAcFM1pV-3WZdhWRp0TxjiG9DV4KM7/s640/2_new.jpg" width="640" /></div>
3. This command is use to redirect requests from port 80 to port 8080 to ensure our outgoing connections (from SSL Strip) get routed to the proper port.<br />
<blockquote class="tr_bq">
Syntax – iptables –t nat –A PREROUTING –p tcp –destination-port 80 –j REDIRECT –to-port 8080</blockquote>
<div style="text-align: center;">
<img height="74" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgO8ReA148XhNSM3fL273Yk4Zh1_YnFdU21VvZd4KHR8fGzAUscLvQvrC4BNDQJOZLWQkcVyLm1Gi483D3Bh5fImJE1Fe8QNHebRiChspjENspevzX8mkpMHhia-iMn-pHqVX3omdBmd88h/s640/3_new.jpg" width="640" /></div>
4. This command is used to find out gateway IP.<br />
<blockquote class="tr_bq">
Syntax – netstat -nr</blockquote>
<div style="text-align: center;">
<img height="117" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEikI2TuEKCtTTpzb3nt5Kvce3mBEg77YjuzsmQBJrzaglyiZUP_UZMABiAXT2aw5m-LwxYwAu7Co07WkboyRJ1Ogy2140q63lQTx_oZwnH46SeWmMXF_bTGO8kDh6XM8Gk9mrCxVwQwAEQS/s640/4_new.jpg" width="640" /></div>
5. This is our Target OS Windows XP, by using ipconfig we got the target IP. I know you are thinking if I want to trap a unknown LAN PC then how will we find out the IP address. Well its not more difficult some Social engineering can do your job. Come to the point on sslstrip tutorial. So note down the target IP.<br />
<div style="text-align: center;">
<img height="321" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigYc0FaSIbDyrx_3fCLo3KvzIwiAvkCuETqPhdUDXM6n7ako9irEtO94levEzryYfkab6kkBno6GXLgYBBUQQnu2hBQzDvbfeOn6BDckk1BJl4zSHEQuwuimCEVsz2XMPCewUQXk2ZOsJr/s640/5_new.jpg" width="640" /></div>
6. This command is use to redirect all network HTTP traffic through our computer using ARPSpoof (don’t forget to enable IP forwarding before this)<br />
<blockquote class="tr_bq">
Syntax – arpspoof –i interface –t target IP –r gateway Ip</blockquote>
Ex – arpspoof –i eth0 –t 192.168.71.128 –r 192.168.71.2<br />
<div style="text-align: center;">
<img height="232" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhFXy0OGs_Hn3CqOxuQr20fqEz_fUFRdhiK8-6iL0TItWjHPrfbMPrLDbXVPtIvThXq-TtRkPzNp50UY1BgHk9Y3pX8WBA2fqG86_Jp6Q5Qde8RD7R6BsIbRxHkyhH3rT33XIqAunhGzXeM/s640/6_new.jpg" width="640" /></div>
7.  Now we need to open a new terminal because this terminal is running arpspoof and we can’t stop it right now.<br />
<img height="237" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9CzlbCkdcJuNeJ3yJqQ0gtae1b9IcYb2JjLhuDZrYZXDcdpIM5GIerdMbS1DBu-T9LhptCpu8LtVmewMgHJEBT_PaYZZYdLGixPPgcrfUJA8KHZxQSNc2n-7ktQWCz5WYMLVR0OFLWa_z/s640/7_new.jpg" style="text-align: center;" width="640" /><br />
8.  In new terminal use this command , This command is used to listening port. "-l" tells the system to listen on specified port.<br />
<blockquote class="tr_bq">
Syntax – sslstrip –l 8080</blockquote>
<div style="text-align: center;">
<img height="192" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhCD_0gxfaAtqXQ0A2UXw89TXwjttdfB-uHpjIMOrLYmijgGVFulnUtZtjSL3xGOAbGI2JMIMs0taqkoj9RRLm4ow_svWNuV7j1wC1EEfZOTDkWY5z6unaghjQ-tKL16g16Qb-rvCepiB0E/s640/8_new.jpg" width="640" /></div>
9. Now come to the target OS and open www.gmail.com  and enter your username and password than click on sign in. Its normally like we are use for checking our gmail.<br />
<div style="text-align: center;">
<img height="424" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgLgx3rAmjeDYxQ9N_EHlrd763yimthGC_0kwTVVIDVe9d5B8kRpw6fhjydwi0roCse09ryaSxLDvU8X0hc9Ppv0hP5ztc2dL6TkmxVGVT89BajV4-7IaGgCEZAsieWMQX74HWWS4AYoCpm/s640/9_new.jpg" width="640" /></div>
10. after clicking sign in on target os come to the attacker PC (Kali Linux). You will see sslstrip capture some data after finishing the capture press ctrl + C for stopping sslstrip. Data automatically save in a file named sslstrip.log.<br />
<div style="text-align: center;">
<img height="393" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvRqasJR_f87D678GIrrZY13weMe_sNzkvC-D6ZbQWqYlca09Fy1_Wu3DbVRKw_52D-HzrVBXM87YBmDNBD_fuU1xL5QhNhR8uI_-D4YxLz0s8PSpPnnYbJs2oo1jT1x4KCc4lmxYiFhPN/s640/10_new.jpg" width="640" /></div>
<div style="text-align: center;">
<br /></div>
<div style="text-align: center;">
<img height="290" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZGXUyVVpZ_9rGEhSbdnnuPXfm_bZwCXuHjx8JKaBWIUYZkQ13qtl4L3CUMWFt357xHBCIXAzIRNyk2uZOdeKMhWsW-Ii7e6YXR01kFW8DhQYYvjaWRFnGYNVrLd6ejV6qNwVT7nMC5x0M/s640/10a_new.jpg" width="640" /></div>
11. Here use ls command so you can see the saved file as sslstrip.log.<br />
<div style="text-align: center;">
<img height="129" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhB6MAxlatcbQA5Y1YieXZVgTozOEaCU9W2oVCRiEeWcSxnR-OeXuwaHxzNaitb_gbfNXsoPmskj3a8XhuQfrhu9yJqLxVtwzoF17jWIFVupscI-g8xwUTuq6sK3XXbdF-P-UamSACxA0WH/s640/11_new.jpg" width="640" /></div>
12. use cat and open your sslstrip.log file and watch carefully. Hmm there is your victim email id and password as shown in image.<br />
<blockquote class="tr_bq">
Syntax – cat sslstrip.log</blockquote>
<div style="text-align: center;">
<img height="197" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjA5R9VRpweHuAQYG0iVqF7aHeOguZIHsSJAVRbtleJxLtlismmXKyu48850_d9a2CBBeWSZa4dME_PVJwi8PK8k1JpbHqoy1dhCzjU5XNWizpPiI1lbGHyTgfA0Xt8e7aiBv1A3STUvNvy/s640/12_new.jpg" width="640" /></div>
All in one(do like this)</div>

How to use sslstrip in kali linux

Intro – In this tutorial we will use sslstrip for stealing password from any PC which is connected in LAN. SSLStrip basically hijacks HTTP...

Raspberry Pi Based Device Provides Anonymous WiFi which can send signal upto 2.5 miles

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="background-color: white; border: 0px; font-stretch: inherit; margin-bottom: 1em; padding: 0px; text-align: left; vertical-align: baseline;">
<div style="text-align: center;">
<img alt="proxyham-raspberry-pi-anonymous-wifi" height="379" src="http://d2brer6wwumtdu.cloudfront.net/wp-content/uploads/2015/07/02161655/proxyham-raspberry-pi-anonymous-wifi.jpg" width="640" /></div>
<span style="font-family: Ubuntu, Arial, sans-serif;"><span style="font-size: 18px; line-height: 28.7999992370605px;">IP address is the most important thing for tracing any person in cyber world.If         the person hunting you gets to know your IP address, it means you are done.       But, Ben Caudill has made a device that will put your final IP address 2.5 miles     away.</span></span><br />
<span style="font-family: Ubuntu, Arial, sans-serif;"><span style="font-size: 18px; line-height: 28.7999992370605px;">So if a person or group monitors on you and get your IP address,They will come on the sceneand he will  find a ProxyHam device transmitting WiFi signal.</span></span><br />
<span style="font-family: Ubuntu, Arial, sans-serif;"><span style="font-size: 18px; line-height: 28.7999992370605px;">According to Caudill, technologies like Tor and its alternatives could provide anonymity but the flaws still exists i.e. a direct connection between your IP address and physical location. So, if your IP address is discovered, everything is over for you.This is where ProxyHam comes into play. It acts a “hardware proxy” that routes local traffic through a distant WiFi network. Thus, detecting the true traffic source becomes more difficult.</span></span><br />
<div style="text-align: center;">
<img alt="proxyham-raspberry-pi-anonymous-wifi-" height="407" src="http://d2brer6wwumtdu.cloudfront.net/wp-content/uploads/2015/07/02161649/proxyham-raspberry-pi-anonymous-wifi-.jpg" width="640" /></div>
<span style="font-family: Ubuntu, Arial, sans-serif; font-size: 18px; line-height: 28.7999992370605px;">At Def Con, the device will be demonstrated and the full code along with hardware specifications will be made freely available. This comprises of a WiFi enabled Raspberry Pi computer with three antennas. One is used to connect to a source WiFi network (some public WiFi) and the other two are used to transmit the signal at 900 MHz frequency. The users would have to plug a 900 MHz antenna to their computer to pick up the signal.</span><br />
<span style="font-family: Ubuntu, Arial, sans-serif;"><span style="font-size: 18px; line-height: 28.7999992370605px;">Caudill tells Motherboard: “We consider this the last or worst case scenario, the absolute fallback plan if everything else fails.”</span></span></div>
</div>

Raspberry Pi Based Device Provides Anonymous WiFi which can send signal upto 2.5 miles

IP address is the most important thing for tracing any person in cyber world.If the person hunting you gets to know your IP addr...

Fadu Hack

Top Ad unit 728 Ã— 90

What is Snort?

How to use sslstrip in kali linux

Raspberry Pi Based Device Provides Anonymous WiFi which can send signal upto 2.5 miles

Buy a cup of coffee

Popular Posts

Labels

Blog Archive