Hack Remote Computer With IP and Brute Force Attack

07:36 Posted by Hacking

FIRSTLY I WILL TELL YOU WHAT IS INTERNET PROTOCOL ??


The Internet Protocol is the principal communications protocol used for relaying datagram (packets) across an
internetwork using the Internet Protocol Suite. Responsible for routing packets across network boundaries, it is the primary protocol that establishes the Internet. 


IP is the primary protocol in the Internet layer of the Internet Protocol Suite and has the task of delivering
datagrams from the source host to the destination host solely based on their addresses. For this Purpose, IP defines addressing methods and structures for datagram encapsulation

Literally, hacking is accessing something or somebody in internet without their permission or interest. While, speaking in summary, hacking is very easy job, it is like instead of using front door, finding the hidden door of a house and hijacking the precious things. Among all the hacking, hacking via IP address is one of the most common yet powerful beginning.

You may want to hack the website and put your advertisement there or grab some database information In this type of hacking, you are playing with the web server’s computer instead of the administrator’s computer. Because, www.website.com is hosted in separate web server rather than personal computer.
Another can be accessing your friend’s computer from your home. Again this is IP based and this is possible only when your friend’s computer is online. If it is off or not connected to internet then remote IP hacking is totally impossible.
Well, both of the hacking has the same process. Let’s summarize what we must do.


  • Confirm the website or a computer you want to hack.
  • Find or trace their IP address.
  • Make sure that IP address is online
  • Scan for open ports
  • Check for venerable ports
  • access through the port
  • Brute-force username and password  


Now let me describe in brief in merely basic steps that a child can understand it.
First, getting the IP address of victim.
To get the IP address of the victim website, ping for it in command prompt.
For example,
ping www.google.com
will fetch the IP address of Google.com




This is how we can get the IP address of the victims website.
How about your friend’s PC? You can’t do www.yourfirend’sname.com, can you? Finding your friend’s IP address is little tough job, and tougher it is if he has dynamic IP address that keeps changing.
One of the widely used method to detect IP address of your friend is by chatting with him.


If u know the ip address? Is it online? To know the online status just ping the IP address, if it is online it will reply.
If the IP address is online, scan for the open ports. Open ports are like closed door without locks, you can go inside and outside easily.
Use Advanced Port Scanner to scan all open and venerable ports.
for APS Google it and download any port scanner.



Now you’ve IP address and open port address of the victim, you can now use telnet to try to access them. Make sure that you’ve telnet enabled in your computer or install it from Control panel > Add remove programs > add windows components.
Now open command prompt and use telnet command to access to the IP address. Use following syntax for connection.
telnet [IP address] [Port]



You’ll be asked to input login information.




If you can guess the informations easily then it’s OK. Or you can use some brute-forcing tools like this one.
In this way you’ll able to hack remove computer using only IP address


Read More Add your Comment 0 comments


Hack Gmail/ Yahoo /Facebook Password by brute force attack using Hydra - Backtrack

04:05 Posted by Hacking


Hi friends. Here I'm sharing another trick for noobs on How to easily hack someone's Gmail or Yahoo Password as many peoples ask me about it everyday. If you're new here then you can take a look at my previous article How to hack Gmail/Facebook Password. As me a lazy blogger also haven't posted anything on Backtrack for a long time so just thought to bind these two in a single article.
Now, if you're still using Backtrack R2 then upgrade it to R3 take a look here as me still using R2 :'( due to low bandwidth.
Additionally if you're a beginner with Backtrack then first few previous articles are highly recommended on LINUX
Alright, Lets get start..

First, lets take a quick overview about what we're going to do here. We'll apply different passwords on the target's Gmail id from a password list using Hydra which is available with Backtrack. That's why I still love it. :) It'll easily get back the password on successful login.

Requirements:
  • A password.txt file with a list of expected passwords, Either write your own or get one from here
  • Backtrack 5 (any version)
  • Internet Connection
Lets Hack something for real,

Turn on your Backtrack machine :P
Navigate to Applications > Backtrack > Privilege Escalation > Password Attacks > Online Attacks > hydra-gtk and launch the hydra tool
Now, under the Target tab set following parameters
Single target > smtp.gmail.com
port > 465
Protocol > smtp
and check > use SSL, show attempts and Be Verbose


Click on Password tab, set these parameters
Username > target email address
Password List > select the Password.txt file
check the option > try Login as password


Now move to start tab and click on start button at the bottom to begin the attack.
If everything goes well, then you'll get the password.

Note: Using a brute force attack from a Password list will never guarantee any successful result it depends how lucky you're. Hacking someones account without their permission is a crime so do use at your own risk. I'm not at all responsible in case you get your ass behind the bars.

Happy Hacking. :)

"The quieter you become, the more you are able to hear."


Read More Add your Comment 0 comments


Brute Force on Porn Sites

22:34 Posted by Hacking

Heyy guys, I have recently bruteforced bangbros and thought that I would make a tutorial on how I did it. It's quite a simple method that should take 1-4 hours depending on how many accounts you want.
First of all, here is your download link: http://www.[removed].com/?d=9BK04DQ9
(I just put all the tools into seperate archives and then the 4 archives into one archive so you don't have to download 4 different things.)
Step 1:
Open Athena and click start. After about 10-15 minutes you will have more than enough logins.
Step 2:
Copy the "combos.txt" that will be in your Athena directory somewhere easy to find. (maybe create a "Bruteforcing" folder on your desktop)
Step 3:
Open Proxy Leecher and make sure one of the boxes is ticked, then press the amber arrow to start leeching. When it is finished it will try to automatically check the proxies but we have another program for this so just stop it and click "View the proxy list leeched by FPL" and then File-> Save as and save it to your bruteforcing folder.
Step 4:
Open Proxy Checker folder(If you have AVG you may need to disable Resident Shield) and open OCX and open Registrator.exe then click register. After this has completed open up proxy checker and load your saved proxy list. Then, click start and when it has finished, save it as something like "checked proxies" so you know what list to use.
Step 5:
Open CforceV1.01.exe and click "Pro." Then, in the "Main URL" box type "http://members.bangbros.com/" and click analyse. After that had finished click bruteforce.
Step 6:
Now click on "Auto" and first of all load your proxy list and then your combo list (It is very self explanatory what to click.)
Step 7:
Finally, click start and when it has finished (I had just over 80000 combos and it took 3 hours) look on the red list at the side. The ones that say "401 Denied" or whatever are not working but the ones that say "Members area" are working so all you have to do is write them down and boom. Bangbros accounts. :)

A big thank you to all the people who created the software I used and and TuT's I used to help me start Bruteforcing, I hope this helped.

I TOOK THE TIME TO TYPE THIS UP AND UPLOAD THE TOOLS, PLEASE TAKE THE TIME TO COMMENT


Read More Add your Comment 1 comments


Bruteforce your enemy and recover the password

21:04 Posted by Hacking



So, I guess you want to crack hotmail accounts? Well I'm here to show you.
Fed up of downloading bruteforcing applications? Ones that don't work? Or you're scared they may be backdoored?

Let's use a tool that is legitimate for breaking the security on logins.
This tool is called Hydra.

You can download it from..
http://www.thc.org/thc-hydra/

Because I use GNU/Linux, this tutorial will be based on Ubuntu 12.04.
Don't worry if you use Windows, the commands are pretty much the same.

Open a terminal and type...
Code:
sudo apt-get install hydra

If you prefer a GTK/GUI version.
Code:
sudo apt-get install hydra-gtk

Only the command line/terminal version is covered in this tutorial.
I want you to use less of GUI's, we are using Linux after all :)

Let's go!
So.. if you type..
Code:
hydra

You'll get a list of options to choose from,
We want to attack the SMTP - which is the mail server, for hotmail.
Because Hotmail runs on SSL connections, we need to specify the SSL port when attacking.

The full command looks like this..

Make sure you FIRST change to the wordlist directory, if you saved the 14 million pass to the Desktop..

Code:
cd ~/Desktop

Code:
hydra -V -S -l Emailaddress@hotmail.com -P "14 million pass.txt" -e ns -o "Cracked!" -t 8 pop3.live.com pop3 -s 995

These options mean...
Quote:hydra - We use the application name.

-V - This shows the output of passwords it checks, you can also add -Vv for extra verbosity [errors, warnings etc - Not really recommended, as it just floods the window]

-S - Use an SSL connection [Needed!]

-P The dictionary list we will use to attack the given Hotmail address [ I will post a link to a 14 million wordlist, perfect for cracking!]

-e ns - try "n" null password, "s" login as pass

-o "Cracked" - Once the password has been cracked, it will store it in a nice file called "Cracked" [Note your directory!]

-t 8 - The number of tasks to use, 8 is fine, any more could cause too many passwords checking and overload the times it gets to check each individual password.

Server - Service - pop3.live.com pop3 - We want to use Hotmail's pop3 server with the service pop3!

-s 995 - This is the SSL port [Needed!]

Upon hitting enter, it should start cracking!
If you get errors, like timeout errors, re-check your terminal command, an error isn't because the bruteforce doesn't work, it just means there is something wrong with the command (Unless Hotmail put a security lock on!)

Here is a picture of me Cracking!
[Image: f4xQa.jpg]

Here is the 14 million wordlist.
Code:
http://www.mediafire.com/?1whma3u7aev3985

If you want to resume the attack at a later day, use the command..
Code:
hydra -R

Not using this command will overwrite the recovery file and start from the beginning.

Hope you guys like.
Please, if you share this, give me credits :)


Read More Add your Comment 1 comments


How To Brute Force - Tutorial

00:46 Posted by Hacking

How to Brute Force a website which contains normal HTTP Login Form.
That means it has an entry for a username and a password.
We will do so by using a program called Brutus.
In order to do so, you must find a website that 1) Contains only Username and Password fields,
and 2) Allows unlimited attempts at guessing a specific password.
In order to test if the website allows this, try multiple incorrect passwords for a random username and see what response you get after x amount of attempts. If you get no redirect page and you are not limited in the number of login attempt,
chances are the website is vulnerable to Brute Forcing.

Before we get started you might be wondering what Brute Forcing is; 
 it is simply testing a list of passwords to a list of usernames and hopefully you will have matched a username and password combination that is correct.
There are many disadvantages in using this method to hack,
such as time (you need to test thousands if not millions of combination) and most websites now have features that limit the number of incorrect guesses at one’s password,
or make a human verification field mandatory when logging in. Let’s get started.

What You Will Need:

1) Click Here Download Brutus
2) Click Her Download Password List

3) You will need a proxy or VPN that changes your IP address for all programs,
not just your web browser. I would suggest using CyberGhost VPN or Hot Spot Shield.
They are pretty easy to use and are well documented so if you need help using them,
please search or go to their websites.

Getting Started:

An example of a simple form Login is one as follows (which i just created in HTML as a means to demonstrate such) I am not going to give any real websites just to avoid any conflict.
Once you have found a website that looks similar to that, test it a few times to makes sure it doesn’t limit how many times you type in an incorrect password. Once you have verified that it may be vulnerable to Brute Forcing,
lets get started.



Step One: Start Brutus:



Leave the target field alone for the moment and where it says type choose HTTP (Form) You will see that below it a new option has appeared called “Modify Sequence.” Press this.

Step Two: Specifying Your Target:

Find the URL that links directly to the login page of the website.
For example: http://www.website.com/login;
Insert that URL into the Target Field. After doing so press learn from settings.
You will now see something similar to the following screen:



As you see, On the left hand side it states “Field Name” that gives options such as username and password.
Select the Username under the Field Name list and press the button that says Username.
Do the same with the password and hit password.
This lets Brutus now where to input its list.
Press accept and it will return you to your previous screen.
If, when you were testing you got a message that says,
“Incorrect login” or something similar,
copy it and paste it under the HTML Response boxes.
Press Okay when your complete. We need to do one more thing before we start.

Step Three: Setting the Word lists

The Next step is fairly simple.
Go to the option that says “User File” and select the text file that contains the usernames you would like to Brute Force.
The beside under “Pass File” specify your password list.
Before you hit Start make sure all the optional variables are set to your satisfaction (the default are usually fine);
start your proxy, make sure your IP address is masked than hit Start.
Allow the program to run for as long as you want or until it has completed and hopefully you have gotten some passwords !


Read More Add your Comment 1 comments


How To Crack IIS FTP Password Using Brute-Force

00:45 Posted by Hacking


Ftp is an application or service or protocol which can be used to transfer files from one place to another place ,

it really comes very handy during transfer of files from a local box to a remote one .
Suppose someone get access to your FTP then he/she can cause nightmare for you by uploading unappropriate images or files etc.
Here we will discuss how we can crack the password of IIS installed FTP service in Windows.
 What is Brute-Force?

Brute-Force is a type of attack in which every possible combination of letters,
digits and special characters are tried until the right password is matched with the username. The main limitation of this attack is its time factor.
The time it takes to find the proper match mainly depends on the length and complexity of the password.Here I will be using this attack to crack the password.So,lets start….

Requirements:

1. The tool we will be using ” BrutusA2” Click Here to Download BrutusA2
2. You need to know the target suppose “ftp://123.123.xx.xxx”

Procedure:

Step 1. Here I have shown an authentication page of an FTP service in the image below and in the following steps we will crack its password using brutus.

Step 2. Now open up “Brutus” and type your desire target ,
select wordlist and select “FTP” from the drop down menu and click start.
If you are confused then follow the image below.



Step 3.The time it takes as I mentioned above depends on the complexity and length of the password.So after clicking the start button wait for the time as mentioned in the tool.The password will be displayed as shown above.


Read More Add your Comment 1 comments


 

WhoIsAmoungUS

Trace


IP Lookup powered by Find IP Address

Copy Restrict

About Me

Hacking
View my complete profile

Scroll Button

Popular Posts

Counter

© 2014 Hacking-The Art of Exploitation All Rights Reserved Vishal S Sangwa A Ethical Hacker White Hat Hacker