How to Make Basic Lab Setup For Hacker

In this tutorial we will discus how you can setup a lab for yourself to practice hacking on your system. At very basic level a hacker is in need of 2-3 systems with a Wired LAN or Wireless LAN. But if you are the one who has started just like me with just one laptop or computer then possibly there's no way you can match this setup. So following was my solution to start practicing with only one laptop or PC meeting above criteria of multiple computers connected in LAN. At most basic level following are your requirements.

Requirements:

A Computer:

First of all a computer which must have minimum following configuration.

A processor with 1.7GHz clock speed,

120GB + Hard disk

2GB RAM, Please note than your RAM must be above 1GB for practicing. If your RAM is less than 1GB or 1GB I 'll highly recommend you buy 512MB module extra or 1GB gigs for you.

A Virtual PC Emulator:

A virtual PC emulator is needed since I assumed you don't have multiple PC's to setup your lab, even if you have it I would prefer to advice you to use a Virtual PC Emulator. There are several options to pick from but our pick is “Oracle's Virtual Box”. Reason its open source means free, low on resources, supports all kind of network types, no problem to setup screen options, it automatically setups resolution once you install guest installation and have nearly all that features that a professional virtual PC emulator may have. Following is download link to virtual box latest version.

http://www.virtualbox.org/wiki/Downloads

A professional choice is VM-Ware. You can purchase it from following link if you want to run it on Mac.

VMware Fusion 3

Though VM-Ware have several advantages over Virtual Box, virtual box is just good to go. Prefer it if you want to shed money.

An Online Synchronization Service:

If you think even that needs shedding money, then I want to assure there's again a free alternative available, its name is Drop Box. Go to www.dropbox.com and create your personal free account then download its setup file and install for synchronization.

A Static IP Address:

Now that will be problem to get a static IP address since a static IP Address may cost you nearly $100 I.e approximately Rs.5000. But don't worry about it we have a free alternative solution to counter problem of static IP. So when there'll be need I 'll clear how to tackle it else even if you have money to shed I will not recommend it.

A PC restore utility:

There are no free alternative to PC Restore Utilities so we will work out on evaluation version. Download Farconics Deep Freeze from following link

http://www.faronics.com/en/DownloadEvaluationEditions.aspx

IP Address Hiding Utility:

Proxy Servers, Anonymizors and VPS are some IP address hiding options. We will discuss them when their need will come in to play.

High Speed Internet Connection:

Of course when you want to learn hacking you need a high speed Internet connection. Opt for a USB dongle by BSNL, TATA, Reliance as mobile broadband and BSNL land-line broadband is just much better option. If you don't have high speed connection and you work on slower connection like GPRS and dial-ups its hard to learn hacks done over Internet.

Procedure:

Before you proceed create a separate partition for installation of Virtual system, the partition must be at least 15GB in size. First of all download latest version of Oracle's Virtual Box and install it on your system. While installation it'll ask several times about installing various components just press OK for all of them because you'll need them all.

Watch following video tutorial on how to setup and install OS in Virtual System.

Once installation is done virtual box will come up with several pop ups when you'll be using it, please read each pop up because they are your tutorials to master “Virtual System Environment”. Please please please, don't skip any of those pop ups. When your installation will be over you'll see virtual system isn't really working in full screen. To tackle it run virtually installed system click on devices and “Install Guest Additions”. From next time it will run in full screen.

Setting up virtual system is done, now jump up to the next part start your virtual system open web browser of virtual system and download Drop-Box application and sign in to it. Now onwards whenever you'll download any software for hacking paste it into Drop Box default folder, it'll synchronize it with your online storage. After installing and signing up Drop Box download Deep Freeze don't install it now. Shut down your Virtual System and copy virtual hard disk as backup in another folder, start system and install Deep Freeze, before installing it read its online manual so that you should not get problem using it. Now when your Deep Freeze evaluation time expires just delete older hard disk and copy the backup and start over again. This will keep your evaluation copy last forever. If you haven't yet understood what we actually did with virtual box then I should clear we just setup a Virtual LAN for our practice using just a single computer. So you can't now boast you don't have a LAN to practice or a remote host to practice. You can run two virtual systems simultaneously if you have at least 2GB RAM. This not only solves our problem of private LAN to practice but it indirectly also offers you remote host to attack on. Our personal say is don't install virtual system on Windows XP or Vista, get Windows 7 or Server 2008.

Lab setup tutorial is over now go and setup your systm to get started. Please ask if you have got any problems related to setup, if everything is fine please don't forget to convey me. Thanks for reading keep visiting.

Read More

How to make your blog attractive to web traffic

be attracting the adequate volume of web traffic. You need to generate substantial web traffic in order to increase your chances of making a sale or getting good advertising revenue. Irrespective of the purpose of your blog, it is necessary to make it attractive for the visitors to be able achieve a loyalty base.

Search engine optimization is one approach that can be utilized to make your blog more attractive. It involves the use of keywords and phrases. The idea behind the keyword utilization lies in the fact that it will help you get high page rankings on the search engine.

The fact that not many people will even go as far as the second page of the search results, it is important to be listed on the first page to be able to capture a good number of web traffic.

When determining the most appropriate keywords for your blog, it is essential to do an extensive research on selecting the right keywords that represent your niche well. It is advisable to avoid keywords with high competition, because in case you select them you will be competing with a large number of well established sites and this will only make the goal of ranking extremely difficult and very expensive.

The content that you write on your blog should be something meaningful. If you fill your blog with low quality content, the visitors will get turned off and they will not hesitate to press the back key and move away from your blog. It is important to stress that the first few seconds are very critical to be able to capture the hearts and minds of your visitors. Your aim as a blogger is to increase the web traffic that will stay longer on your blog and visit more than a page.

 The selection of the keywords is critical to the success of your blog. The keywords should reflect what your blog is offering. You cannot use keywords on diet, and when your visitors finally end up visiting your blog, they are faced with content on cars.

When you select the keywords, you are making a promise to your potential web traffic that you will deliver what they are looking for. In is important to live up to your promise. Do not make empty promises as this will be a direct turn off to your visitors. Avoid at any cost negative comments about your blog.

Always remember that your ultimate purpose is to get high page rankings in the search engine through the use of your keyword. The keyword has to be reflected in the content of the blog.  

It is worth noting that a long title will not really provide high page rankings, the title should be eye catching and interesting.

Another approach of making the blog increasingly attractive is by acquiring simple links. This can be achieved by going through other blogs that are in your niche and leaving meaningful comments. Avoid spamming and writing unrelated comments, this will lead to your comments to get deleted, and only get you and your blog a bad reputation.

Ensure that you do not overuse the keyword in the content as this may break the flow of the information provided. Read through the content to eliminate any kind of grammatical errors as visitors can easily be put off by such things. Follow the above and you will start noticing a good improvement of the number of web traffic visiting your blog.

Read More

How To Bypass Any Windows Password Using ISO Tools

In this section we will discus about how to bypass Windows logon password using ISO tools. ISO image/tool is nothing but a CD/DVD image, you have to burn all these ISO images to a CD/DVD to make them work.

KON BOOT:

KON BOOT currently known as most powerful ISO password breaking tool since it can't only bypass Windows password during log on but can also bypass Linux passwords during log on. The powerful feature of KON BOOT is that it does not ask for password nor it resets it, just boot with CD and any OS installed in your Hard Disk will boot without asking for password, reboot again and all passwords will remain intact, so your victim can never suspect about someone just had look in his/her PC. I still don't know how this works but surely its an awesome master piece.

Download KON BOOT

Countermeasure: Use some good Full Disk Encryption tool like Best Crypt or its free alternative True Crypt.

OphCrack:

OphCrack is one of the best known tool for Windows Password Recovery. At present it also supports some Linux flavors. OphCrack uses Rainbow Tables technique to recover Windows passwords. In Rainbow Tables method the password hash is compared to per-compiled hash database once the hash matches you get password.

Download OphCrack

Countermeasure: Use very strong password like this q@2Db4LevIl). No rainbow table utility can ever crack this kinda password.

Offline NT Password And Registry Editor:

Offline NT Password And Registry Editor does not recover password but it deletes password hash from SAM file removing password forever. Tool is text based and hence can be difficult for beginners to operate.

Download Offline NT Password And Registry Editor

Countermeasure: Use a Full Disk Encryption tool.

Note: Each and every tool described here can crack all available versions of Windows. My personal say is to use OphCrack.

Read More

How To Save Your Facebook Account

So now its our final touch to “SAVE YOUR FACEBOOK ACCOUNT”. Before we proceed again I want to notify you that every online facebook cracking tool that I found in Google search were just scams. I'll not advice any of you to try them just because they will just waste your time.

The final way how an attacker can hack your facebook account by creating a facebook application and sending you request to use it. Please note that hacking facebook does not always include hacking passwords, it may also include getting your e-mail ID, telephone numbers and list of your friends along with their e-mail ids. If you have used any facebook application then you might remember that every application asks for access to your personal information, if you grant access application can take over every possible information that is available on your account.

You may have came across some applications like “Who visited your facebook account”, “Get Free Mobile Recharge”, “Unknown Secrets Of Girls/Boys” and “Get 1000$ wire transferred to your account”. Now even facebook don't have any mechanism to know who visited your profile then how an application will know, free mobile recharge is no doubt is bluff and that secret thing about girls/boys shows you nothing. All these applications just spam on everyone's wall of your friend list and and then they get tempted to use it and it again spams their friend list. Never believe these kinda applications they are just scamming stuff. The last but not the least is that 1000$ wire transfer, no doubt you are biggest fool if you believe that application really works. I think there is no need to explain what it really does.

At last I will just ask you to keep yourself safe from all these kinda facebook applications. If you don't use any application anymore just delete that application from your profile. If any new method will arrive which will claim its possibility to hack facebook then I ll come back with a solution. Thank you, have a nice time and keep visiting.

Read More

How To Hack Facebook Account Using Wireshark

In this tutorial we will have out look on how you can hack facebook account using wireshark. First of all I must clear you even though you'll get access to victim's account you'll not get his/her password, next this trick will work only on LAN with hub. It will also work on LAN with switch but you'll have to perform ARP poisoning, click on link to know more. Here surely I 'll not discus how to use wireshark please read our previous tutorials to know how to use wireshark.

For this hack you'll need wireshark which is a packet sniffing tool, Mozilla Firefox web browser and add n edit add-on for Mozilla Firefox. Now I assume you have all above components for hacking facebook and you are connected in a hub based LAN or LAN which has been ARP poisoned. So now click on capture button and start capturing packets.

Now using command line shell ping www.facebook.com to get its IP address, filter all IP packets having IP address of www.facebook.com and search for HTTP protocol followed by GET /home.php, this may vary depending on region and time/zone but don't bother try to search all packets with HTTP GET for cookies.

Now from packet details window expand the packet information for above packet and you'll get 8-10 different cookies that are stored by www.facebook.com on victim's PC. Right click and copy all cookies names and values in notepad.

Now open Mozilla Firefox browse to tools and open Cookie editor. Add each cookie to your cookie folder using Cookie editor.

 After adding each value, your cookie editor will show you following values in cookie list for facebook.

Now close Cookie editor and open Facebook, you'll find yourself logged into the victims account.

Defense against this attack:

A system administrator should use tools used for countering sniffing.

Don't log-in into your accounts if you know your LAN is not protected and if you want to log-in better use a tunneled connection.

Download Wireshark from http://www.wireshark.org/.

Download Add N Edit Cookies from Add-Ons Mozzila

Read how to use wireshark.

What is ARP poisoning ?

What is sniffing ?

Read More

How To Create Ghost Image Of Disk For Free

Ghost images are cloned hard disks that can be used for backup purposes and backing up data. Are you among the people who always get bothered by following questions.

How to create disk image without software or free?

How to create ghost image of hard disk for free?

or

How to clone a disk for free?

If yes then you are the person who want to backup complete disk along with OS. So lets see how we can create hard disk image or ghost image or disk clone without using those highly priced ghost creating software.

Requirements:

Ubuntu Live CD/DVD, A hard disk with more capacity than the one you want to clone and some basic knowledge of Linux.

Procedure:

Linux provides disk dumping feature, this feature can be used for creating complete backup of any possible storage media. And we will use this feature of Linux command shell to create ghost images. While writing this tutorial I am assuming that you want to backup a hard disk which already have an OS installed in it.

Boot from Ubuntu Live CD/DVD

Now mount the hard disk you want to take backup on /mnt folder

Now take backup using following commands,

[root@localhost~]dd if=/dev/sda1 of=/mnt/image.img

this will create complete image of hard disk partition sda1, next you must take backup of partition table,

[root@localhost~]#dd if=/dev/sda of=/mnt/partitiontable.img count=0 bs=512

or

[root@localhost~]#dd if=/dev/sda of=/mnt/partitiontable.img count=0 bs=1024

Now while restoring first restore partition table on new hard disk

[root@localhost~]#dd if=/mnt/partitiontable.img of=/dev/sda count=0 bs=512

or

[root@localhost~]#dd if=/mnt/partitiontable.img of=/dev/sda count=0 bs=1024

Finally restore ghost image,

[root@localhost~]#partprobe /dev/sda

[root@localhost~]#dd if=/mnt/image.img of=/dev/sda1

Now please note that when you'll create ghost image no matter what amount of data you have in disk your ghost disk will be of actual size of source hard disk, that means if your source hard disk is 40GB in size then your ghost hard disk will also be of 40GB. If you think above tutorial was little geeky then even I don't take different view from you, yes its really little geeky but believe me its not that difficult. If you loved reading this post please subscribe to our email list. Thanks for reading keep visiting.

Read More

L0phtCrack 6 | Session Management

This is last part to L0phtCrack tutorial here we will discus how to manage password cracking sessions in L0phtCrack. To set specific password cracking session click on “session options” from “Auditing”. Following window will open in front of you
.

As you can see for each session L0phtCrack offers, all kind of password attacks including dictionary attacks for all possible language dictionaries, hybrid attack, precomputed hash or rainbow tables attack and even brute force attack.

To perform dictionary attack on password hash you will need a standard open dictionary file for the language you want to perform attack. You can add your own dictionary files, by default English dictionary is used. Now you might ask where I can find other language dictionary and the answer is, since the dictionary format is open, any open dictionary language file will work, if you get problem finding dictionary then download OpenOffice.org extract its cab file, search for “*.dic” and pick up dictionary you want.

Next is if you want to use precomputed hash for password cracking you can do so by enabling “precomputed” option then importing rainbow table file in it. Sooner or later we will cover how to create your own rainbow table and how to create a password dictionary till then if you want to try precomputed hash, you can download rainbow table files from http://www.freerainbowtables.com/en/tables/

Last option is brute force attack, I think there's no need to tell what is does but to use brute force attacker you surely need to buy L0phtCrack because trails version does not allow you to use brute force attack against password hashes. I hope I was easy covering all parts of L0phtCrack tutorial if you still have any problem don't hesitate to ask.

Read More