How to Break in and Stay in

NOTE:This is only meant for educational purposes

In this tutorial i explain how easy it can be for one to hack into your computer or network and maintain his access at any later time. The art of hacking comes only when you can break in and stay in. Most attacks are realized as soon as they take effects, and the victim is likely to block or patch the attack. In such a case yo will need to have a way through which you can still get in without having to run a pile of exploits on the victims box. We look at how useful Meterpreter services (metsvc) can be and how you can crack password hashes in a few seconds. I demonstrate the use of filter files with ettercap to make a spoofed attack.

Installing spoonwep2 and spoonwpa on BackTrack 4

Incase you need more visual help on installing spoonwep and spoonwpa, you can watch the video.

First you'll need to download Spoonwep2 and Spoonwpa in the /tmp/ dir:

cd /root/Desktop

mkdir /tmp/{spoonwep2,spoonwpa}

wget hxxp://shamanvirtuel.googlepages.com/SWPA.lzm

wget hxxp://neovortex.kodings.googlepages.com/spoonwep2.lzm

lzm2dir SWPA.lzm /tmp/spoonwpa

lzm2dir spoonwep2.lzm /tmp/spoonwep2

code:

cp -rpv /mnt/sdc1/spoonwpa/usr /

cp -rpv /mnt/sdc1/spoowep2/usr /

This will create two files so that spoonwep and spoonwpa can be able to detect the interfaces

Spoonwep

echo "
#!/bin/bash
chmod 777 /usr/local/bin/wifispoonfeeder/
rm /bin/sh
ln -s /bin/bash /bin/sh
spoonwep
sleep 1
while ! [ -e /usr/local/bin/wifispoonfeeder/spoonwep/tmp/wscapture-01.csv ]
do
sleep 1;
done
ln -s /usr/local/bin/wifispoonfeeder/spoonwep/tmp/wscapture-01.csv /usr/local/bin/wifispoonfeeder/spoonwep/tmp/wscapture-01.txt 2>/dev/null
rm /bin/sh
ln -s /bin/dash /bin/sh " >/usr/bin/spoonwep.sh


Spoonwpa

echo "
#!/bin/bash
chmod 777 /usr/local/bin/wifispoonfeeder/
rm /bin/sh
ln -s /bin/bash /bin/sh
spoonwpa
sleep 1
while ! [ -e /usr/local/bin/wifispoonfeeder/spoonwpa/tmp/wscapture-01.csv ]
do
sleep 1;
done
ln -s /usr/local/bin/wifispoonfeeder/spoonwpa/tmp/wscapture-01.csv /usr/local/bin/wifispoonfeeder/spoonwpa/tmp/wscapture-01.txt 2>/dev/null
rm /bin/sh
ln -s /bin/dash /bin/sh " >/usr/bin/spoonwpa.sh

Now make it executable:
chmod 755 /usr/bin/{spoonwep.sh,spoonwpa.sh}



You want to make sure that they appear in the BackTrack menu. So let us change the desktop file and edit the command:
mv /usr/local/share/applications/spoonw* /usr/share/applications/



Open up spoonwep.desktop in any text editor of your choice and change the line Exec giving:

[Desktop Entry]
Comment=
Exec=spoonwep.sh
GenericName=
Icon=cache
Name=SpoonWep2
Path=
StartupNotify=true
Terminal=0
TerminalOptions=
Type=Application
X-KDE-SubstituteUID=false
X-KDE-Username=
Categories=BT-Radio-Network-Analysis-80211-Cracking

For Spoonwpa:

[Desktop Entry]
Comment=
Exec=spoonwpa.sh
GenericName=
Icon=cache
Name=SpoonWpa
Path=
StartupNotify=true
Terminal=0
TerminalOptions=
Type=Application
X-KDE-SubstituteUID=false
X-KDE-Username=
Categories=BT-Radio-Network-Analysis-80211-Cracking

Lets update our menus. From the command line type:
update-menus


Your Spoonwep2 and Spoonwpa is all set and ready to use.

Metasploit backdooring

With metasploit, it's possible to get any windows binary file and use it as a backdoor on a victims computer. You can gain metapreter shell at any point. All that needed is to embed the metasploit payload into any executable that you want.

Bluetooth discovery with Ruby

#!/usr/bin/ruby

#file: whereib.rb

deviceid = '00:0E:6D:29:38:EB'

devicename = 'Nokia 6600'

count = 0

while count <>

if `hcitool name #{deviceid}`.chomp == devicename

puts devicename + ' IN RANGE'

puts Time.now

else

puts devicename + ' OUT OF RANGE'

puts Time.now

end

sleep 7

end

Best of Linux Network Tools via (apt-get install)

I collected a list of some of the best Linux networking tools that you can easily install via apt-get. I will be updating the list with time. So you can always check by for more. Hope it helps.

1. ngrep - grep for network traffic
install: sudo apt-get install ngrep


2. Tcptrace - Tool for analyzing tcpdump output
install: sudo apt-get install tcptrace


3. Netdude - NETwork DUmp data Displayer and Editor for tcpdump trace files
install: sudo apt-get install netdude


4. Dsniff - Various tools to sniff network traffic for cleartext insecurities
install: sudo apt-get install dsniff


5. Hping3 - Active Network Smashing Tool
install: sudo apt-get install hping3


6. Snort - Flexible Network Intrusion Detection System
install: sudo apt-get install snort


7. Tcpdump - A powerful tool for network monitoring and data acquisition
install: sudo apt-get install tcpdump

Bluetooth hack 2010 [2nd demo with latest phones]

Backtrack 4 tools on Ubuntu

For some of us who have found flexibility in using ubuntu, we lost option with the introduction of the increadible Backtrack distro. For thoses who are woundering what it is............you can cheack it out for your self here. Things is that it would take you forever downloading each interesting tool thats on backtrack to ubuntu. Just like ubuntu, backtrack has repositories where it updates all it's tools for it's users. So this is how you can simply get a ubuntu-backtrack touch on the same box.

First, you need to import the archive GPG key into your system

ronnie@blindsecurity:~$ wget -q http://archive.offensive-security.com/backtrack.gpg -O- | sudo apt-key add -

Now add the repository:

ronnie@blindsecurity:~$ sudo echo "deb http://archive.offensive-security.com pwnsauce main microverse macroverse restricted universe multiverse" > /etc/apt/sources.list

You can also add the Test repository(Only if you are a developer and know what you are doing). It's not meant for the ordinary users.
ronnie@blindsecurity:~$ sudo echo "deb http://sun.offensive-security.com/repotest/ ./" >> /etc/apt/sources.list