Jump to content

i8igmac

Dedicated Members
  • Posts

    939
  • Joined

  • Last visited

  • Days Won

    22

Everything posted by i8igmac

  1. Your meterpreter payload, is it reverse TCP? If so then you need to forward one more port to your bt5 machine, by default mtererpreter use's port 4444. I don't see why port forwarding is a bad idea Here is a tip for monitoring connection's works with linux or windows, on windows you may need to run cmd as administer Netstat -np
  2. i8igmac

    The Middler

    I would like to share a script i put together about a year ago... it was a lot of fun building and there are so many other directions i could go with this script... its a little hard to explain but here goes... first thing is starting up your arpspoof/dnsspoof and listen for traffic on port 80 (victim GET/facebook/with user123 cookies) ---> (evil-proxy GET /facebook/with user123 cookies) ---> (facebook.com) -->response(evil-proxy-MODIFY-DATA)--->response(victim) im working on a few problems right now, when you add bytes to the packet you have to change the frame length or else the page will load in the victim browser with incomplete code (the bottom half is missing) I think i just figured it out... Total length is 1500 or '05 dc' 0000 00 15 00 48 8f c5 00 1a 73 91 01 9c 08 00 45 00 ...H.... s.....E. 0010 05 dc a4 d9 40 00 40 06 0b fc c0 a8 01 88 c0 a8 ....@.@. ........ with some math ill have to change this value But here... give this a try... install ruby with eventmachine... close any application that has port 80 already in use
  3. i8igmac

    The Middler

    I have done a lot of testing with mitm attacks, i have tested all the tools mentioned in the video and many more... my goal was to insert malicious code into 100% http tcp protocal, a good proof of concept or control point could be as simple as the use of a <iframe src="evil.com"> with all my testing, the most effective set up was dns spoofing all the traffic to my own ruby proxy running on port 66 that would modify the header fields, insert my evil code and send the packet to the client... i could never get 100% efficiency... but my lab setup was limited...
  4. These kinds of task are fun to automate your self... I have made a ruby script to find all movie files, delete duplicate, move all to another location and then delete original location... *.mkv *.avi *.iso
  5. Install irb on your droid. It's just a quick scanner I use for discovering services on my network... When I need to find my ftp server or rdp... No need to root your device... Example: nmap -p 135,139,445,5900,8080,80,21,22 192.168.1.1-255 require 'socket' Thread.start{ for ip in 1..255 for port in [135,139,445,5900,80,8080,21,22] Thread.start{ begin t = TCPSocket.open("192.168.1.#{ip.to_s}", port) rescue print "e" else t.close puts"" puts "#{ip}:#{port} open ports!!!" end} sleep 0.1 end end } Notes, if it crashes irb, set the sleep to 0.2 or higher. Your phone is limited on threads The ip address must look like this* "192.169.1.#{ip.to_s} " "192.168.#{ip.to_s}.1" "xxx.#{ip.to_s}.x.x" "#{ip.to_s}.66.66.66" You can add more ports,
  6. http://www.tutorialspoint.com/ruby/ruby_sending_email.htm You can find these examples in almost any language, I like ruby so here is how I would do it. I could maybe write something tonight. This will get you started
  7. i think my solid state hard drive crashed... so i just boot up from a live cd and tried to mount the hard drive and got this error Message from syslogd@mint at Oct 24 20:28:07 ... kernel:[ 135.498149] Oops: 0000 [#1] SMP Message from syslogd@mint at Oct 24 20:28:07 ... kernel:[ 135.498151] last sysfs file: /sys/module/crc16/initstate Message from syslogd@mint at Oct 24 20:28:07 ... kernel:[ 135.498194] Process mount (pid: 3176, ti=f3562000 task=f656a640 task.ti=f3562000) Message from syslogd@mint at Oct 24 20:28:07 ... kernel:[ 135.498195] Stack: Message from syslogd@mint at Oct 24 20:28:07 ... kernel:[ 135.498204] Call Trace: Message from syslogd@mint at Oct 24 20:28:07 ... kernel:[ 135.498276] Code: 5b 5e 5f 5d c3 55 57 89 c7 56 53 e8 42 d6 12 00 8b 5f 04 83 c9 ff 8b 77 08 8b 2d b4 97 27 c1 eb 12 8b 14 8d f0 9c 3b c1 8b 47 14 &lt;8b&gt; 04 10 99 01 c3 11 d6 41 ba 20 00 00 00 89 e8 e8 aa 48 ff ff Message from syslogd@mint at Oct 24 20:28:07 ... kernel:[ 135.498290] EIP: [&lt;c1140649&gt;] __percpu_counter_sum+0x26/0x50 SS:ESP 0068:f3563d20 Message from syslogd@mint at Oct 24 20:28:07 ... kernel:[ 135.498292] CR2: 0000000001bee000
  8. any tips on increasing traffic? im clueless!
  9. Im looking to start my own forum, there are a few questions i have, i would like to start with a server from home but im not sure how to get traffic... what services would you recommend... i have read a little bit on meta tags but read this is no promise to bring traffic so maybe i could see some examples on how you have used meta tags to increase traffic on your site... i have my own tools i code with ruby to perform small useful task for the site, so if i manage to get a forum up and fully functional i would then pay for a premaum service but are there any that include ruby?
  10. i have built a lot of my own client tools with ruby to perform small automated task's. example http, ftp, ssh... i used to host public servers for games like warcraft3 and counterstrike... i would like to build a client to connect to one of my servers to say "hello world" require 'socket' server=socket.open("192.168.1.109", "6113") server.puts("data.needed.to.establish.connection") server.recv server.puts("data.needed.to.look.as.legit.client") server.recv server.puts("and more data") server.recv server.puts("hello to all people in the public server") server.recv exit what i have done so far... ill start up wireshark to start a live capture then with my game client ill connect to the server... now im trying to reduplicate in ruby what i see in wireshark... is there a easy way to build a tool with this data i see in wireshark??? any one have experience with this?
  11. a basic understanding of how server and client software work, i think would be a good start... for example install your first ftp server and properly configure your router, then have a friend from out side your home network download some files from your first ftp server... google 'ftp server install tutorial' google 'ftp server port forwarding' google 'ftp client tutorial' once you understand the difference between a client/server, things will make sense later on... (expression crawl before you walk) i would pick a scripting language like perl/python/ruby... (RUBY!!!) i would go with ruby, i have a lot of fun working with sockets, learn how 2 computers communicate over the internet is very interesting and fun to learn... i could show you ruby example code for trojin/malware/rootkit Always lots of fun coding these! get your self 2 computers at home and practice with netcat.exe (google netcat backdoor tutorial) you would have fun with this...
  12. i thought i would share a quick example. im not sure what it is you want... you could accomplish anything with other scripting (learn ruby !!!) save autoset.txt and execute this ruby script with root, SET needs root privileges ## autoset.txt 2 1 2 xfinity.comcast.net/constantguard/Alerts/ 2 2 666 no 777 #sudo ruby script.rb if `date`[0..2] == "mon"#Monday puts "lets do somehting" Thread.new { system("xterm -e 'xterm -e './set-automate autoset.txt''") } else puts "today is not Monday!" end
  13. http://www.microsoft.com/technet/security/bulletin/MS10-090.mspx Check out the metasploit module Ms10-09 This one is extremely popular right now Look at the exploit source code.
  14. (inurl:"forum" intext:"Lincoln Lawyer" intext:"megaupload.com/?d") im looking for advice on improving this google search. if you view google with that search, you will find a working link a few pages into the search (enjoy ,-P) google outputs something like this The.Lincoln.Lawyer.DVDRip.XviD-TARGET ideees.xxx/forum/index.php?topic=376590.0 - Cached You +1'd this publicly. Undo Jul 1, 2011 – The Lincoln Lawyer (2011) Retail Date ..|.. 12-07-2011. Release Date ..|.. 28-06-2011. Source ..|. ... hxxp://xxx.megaupload.com/?d=1C02NXIN ... im looking for help on increasing the size of the response google gives me, the 3 dots after the link! maybe i can modify the search to give all links that include megaupload... any tips that would give me better results please share The.Lincoln.Lawyer.DVDRip.XviD-TARGET ideees.xxx/forum/index.php?topic=376590.0 - Cached You +1'd this publicly. Undo Jul 1, 2011 – The Lincoln Lawyer (2011) Retail Date ..| hxxp://megaupload.com/?d123451 hxxp://megaupload.com/?d123452 hxxp://megaupload.com/?d123453 hxxp://megaupload.com/?d123454 hxxp://megaupload.com/?d123455 hxxp://megaupload.com/?d123456 hxxp://megaupload.com/?d123457 i made a script that will process each link one at a time (as a free user) threw ruby sockets. the time it takes searching threw that google response manually is time consuming... a search function will complete my script 8-X
  15. Get amd 6 core, the most bang for your buck , u will love it with a good card And solid state hard drive My Linux boots up in like 1 second
  16. I just got a droid thunderbolt htc... i have not yet rooted but im curious, could you plug in a wifi adapter and install the linux drivers on a droid then start cracking wep and maybe a stronger sniffer http://cgi.ebay.com/WiFi-Adapter-Plug-Play-Linux-WiFi-Antenna-RTL-8187L-/200615641597?pt=LH_DefaultDomain_0&hash=item2eb59fc1fd
  17. Once you figure out dnspoof, check out SET website cloner with java ap, reverse meterpreter
  18. Wine works with autoit It Can be done just as easy with ruby,perl,python
  19. Auto scripting is fun and easy to learn While 1 If is_pressed("j") then Send(" {backspace} im gay") End Install autoit and check out winzip tutorial
  20. im not sure the why you want it hooked to a tv, maybe explain... i recommend xrdp
  21. this could be a fun first timers project. you should check out the scripting language autoit. if (window exists "instant messenger" with text("power on") then execute("net system power on") the syntax here is improper, this can be done with only a few lines of code with autoit you should install autoit and check out the win zip tutorial I'm sure you will have a lots of fun.
  22. Sudo apt-cache search rdp l grep server
×
×
  • Create New...