Automating WPA handshake

It is a well known fact that in order to capture a wpa handshake, you need to issue a lot of commands, and the process itself of getting a handshake can take a long time sometimes. What about automating the whole process !! and getting a very quick wpa handshake !!! well the solution comes with the "besside-ng" utility which comes in backtrack with the aircrack-ng suite
All that you have to do is to get a bssid and issue the following command: besside-ng -b bssid mon0 and all the magic happens in seconds


here is demonstartion of the process with this video link:

Read more

Creating a special wordlist for a given victim

Today i'm going to introduce you to a very useful tool in Backtrack that helps you create a word-list that contains all the possible password combinations for a given victim. It simply creates a target-specific wordlist for password brute-forcing. After running the utility, it will ask you some questions about the victim,this same information will be used to make some word combinations for the right password. Though this method is not 100% sure, it helps a lot and gives almost a 80% chance to get the right password.


First,type the following command to access the utility


root@bt:~# cd /pentest/passwords/cupp

root@bt:~# cd /pentest/passwords/cupp: ./cupp.py

Here is a preview of what it looks like:

This option is used for help:

For the moment, we are going to use the "i" option:

At this level, you will be prompted to feed the utility with all possible information you can provide such as names, wife /girlfriend etc... Note that not all fields are necessary; you can skip any field by typing enter, here is an example:

Wen finished, you'll have a txt file that contains some possible word combinations, that the victim may have used for his/her password:

In this example, i'm going to use "cat" to view the file contents, by using the following command


root@bt:~# cat ahmed.txt


And finally, here is the outcome:

Hope you enjoy Read more

Generating a phone number wordlist

I noticed that many people are so lazy to generate their own password for their wifi connection, that they just use their phone number as a password. Of course, this is hard to be found in a downloadable wordlist dictionary. So i present you the way to generate a wordlist phone number with the Backtrack utility: crunch.

First, move to this directory:

root@bt:~# cd /pentest/passwords/crunch  

 ./crunch 8 8 -t 20%%%%%% -o /root/Desktop/phonenumbers.txt  

- Notice that 8 8 means: start with 8 numbers and finish with all the possible combinations of 8 numbers

- You can change 8 by the number of digits that correspond to phone numbers in your country, like 10 10 etc

- 20 is the number of the phone provider i have chosen, you can replace this by the number of your convenience

- %=corresponds to the all the possible combinations from 0 to 9

- The number of %s must fit the number of characters of the phone number, for eg: if your phone number if 10 digits you must type % 10 times

- "-t" means to crunch that this a phone number and that he must not alter the phone number indicator, which is here (20)

Read more

NOTICE

Welcome dear visitor:

If you found yourself  here in this blog, it simply means that you already know what you are looking for. But before going further, you have to know these terms:

--This blog is meant as a walk through and a guided tutorial for the linux environment
-All the content provided in this blog is meant for EDUCATIONAL PURPOSES only.
-All the tutorials were stricly conducted in the LAN (local area network).
-The tutorials are defensive-oriented & should never be extended to offensive purposes in any case, PLEASE don't be stupid and always remeber that the more a martial artist develops his skills, the more he fears the harm he can cause.
-The blog teaches you how malicious people do, in order to be able to protect yourself.
-I will never be responsible for any harm you make to any machine, or any damage you cause to your own machine.


If you like these humble tutorials provided in this blog or found them useful in any way, i would be very grateful if you do me the favor of clicking "like" on my facebook page, i really need your support. Thanks.

Just a few days, and i will set up the RSS feed, and twitter link. Read more

How to install flash player for firefox

Many Backtrack users have a difficulty on how to install flash player for Firefox. In order to that, you will need first of all to purge the current flash player by going through these steps:

root@bt:~# apt-get purge flashplugin-nonfree flashplugin-installer gnash gnash-common mozilla-plugin-gnash swfdec-mozilla
root@bt:~# rm -f /usr/lib/firefox/plugins/*flash*
root@bt:~# rm -f /usr/lib/firefox-addons/plugins/*flash*
root@bt:~# rm -f /usr/lib/mozilla/plugins/*flash*
root@bt:~# rm -f ~/.mozilla/plugins/*flash*so
root@bt:~# rm -rfd /usr/lib/nspluginwrapper

The next step is to download the new flash player from the official website: http://get.adobe.com/flashplayer/?no_redirect (download the tar.gz file)

Now we move to the installation:

root@bt:~# mkdir -p ~/.mozilla/plugins

root@bt:~# mkdir flash

root@bt:~# mv -f install_flash_player_11_linux.i386.tar.gz flash/

root@bt:~# cd flash/

root@bt:~/flash# tar xvfz install_flash_player_11_linux.i386.tar.gz 

root@bt:~/flash# cp -f libflashplayer.so ~/.mozilla/plugins/

Now, everything is ok, you can test now by playing a youtube video for example.


          This tutorial is done with reference to: http://www.backtrack-linux.org/wiki/index.php/Install_Flash_Player


Read more

How to install google chrome

To install chromium browser in Backtrack, you have to go through these following steps:



root@bt:~# apt-get install chromium-browser

now, chrome is installed in your system, but there is a little problem !!! you want be able to run it as "root". You can fix it this way:

root@bt:~# cd /usr/lib/chromium-browser

root@bt:~# hexedit chromium-browser

-Tab "ctrl s", type geteuid and press "enter"

-Replace "geteuid" with "getppid" then press "ctrl x"

Now, you should be able to run chrome as root.


Read more

Installing flash player for chrome

Now, that you have installed chromium browser in your system, you need to install adobe flash player also. Download flash player tar.gz from adobe.com: http://get.adobe.com/flashplayer/?no_redirect. The last version up to writing this article is: "install_flash_player_11_linux.i386.tar.gz"

To install it, we need to extract the downloaded file:

root@bt:~# tar -zxvf install_flash_player_11_linux.i386.tar.gz

Next, we need to copy the "libflashplayer.so" into chrome's plugin folder:

root@bt:~# cp libflashplayer.so /usr/lib/chromium-browser/plugins/


Now, flash player is enabled in your chomium browser . Read more

IDM for Linux !!

Everyone relies on the famous "apt-get" command to install  packages, or update their systems. Unfortunately "apt" only uses one single connection which makes the process quite slow.This is why many Linux users were looking for an alternative for Internet download manager or trying to run it with wine in vain.
The solution comes with a wonderful utility, which is in fact a script named "fast". This utility can be considered as the Linux IDM version. It allows multiple connections simultaneously and can boost your downloading speed to the max.

-First you need to download the script (clean) from here: http://www.mattparnell.com/linux/apt-fast/apt-fast.sh

-Uncompress the file with this command to make it executable:


root@bt:~# chmod +x apt-fast.sh

-Move it now to the user bin directory:



root@bt:~# mv apt-fast.sh /usr/bin/apt-fast.sh

Now, all what is left is to run "fast" instead of "get", for example:

root@bt:~#apt-fast update

root@bt:~#apt-fast install chromium-browser

Read more