Building, Installing & Controlling A Trojan Horse – Part 1

 

 Introduction:

In this blog series, I will  walk you through the underworld of building a “Trojan Horse” . I guess that nowadays it is easier than ever to build such a software. This tutorial is aimed at clarifying the concept and the programming mindset utilized to generate such a program. It is not intended by all means to be used in a manner that breaks any privacy laws and regulations.

Since I plan to share my long experience on the topic, I know that to cover the subject thoroughly,  I will need to divide it into several in-depth blogs, so please bear with me.

Read more

Share

WEP cracking with Asus eeepc 1005HA – BackTrack 4 Final Release (Packet Injection)

In this article, the packet injection concept will be implemented to accelerate the count of initial vectors (IVS) so that enough packets are collected to crack our 128 bit wireless WEP key.

The box we are using is Asus eeepc 1005HA with BackTrack 4 Final release.   In order to bring up the wireless card, set it to monitor mode and run kismet on this box, refer to this previous article. Read more

Share

Wi-Fi Pakcet Injection on Asus eeepc 1005HA – BackTrack 4 Final Release

The Asus eeepc 1005HA wifi chipset is Atheros AR9285 based which supports packet injection on BT4.  To test that, first download BackTrack 4 Final iso from here http://www.backtrack-linux.org/downloads/ and then install it to a USB flash memory and create your bootable live BackTrack USB drive . There are many ways to do this job, I like to use unetbootin which does all of the work for me. More details on unetbootin with downloads are available here http://unetbootin.sourceforge.net/

Once you are done with creating your bootable BT4 live USB drive, restart your computer and keep on pressing the “ESC” key on your keyboard so you can choose your bootup device, use the arrow key to select the  USB drive as your boot device and press enter. Read more

Share

Public Wi-Fi Attacks, The Sum of All Fears – Part I

Public Wi-Fi internet is not always free, and it does not have to be at a cafe’! It could be paid and it could be in a mall, airport, hotel, exhibition, train, airplane, etc. The threat is always out there, and guess what? You do not even have to be connected to protect yourself from Wi-Fi attacks! This article will be divided into several parts in order to cover most of the tools and techniques used by hackers in attacking clients on public Wi-Fi networks to collect sensitive data or to “pwn” or own and conquer a client’s box.

The first part will deal with sniffing data passing between you and the AP. Many tools are available out there that can do the job for a hacker; some are commercial while others are developed under the GNU agreement (mostly for Linux based boxes). Sniffing is usually undetectable (stealth mode)! The only exception is when you are on a Public Wi-Fi where WPA security is utilized. Read more

Share

Cracking WEP keys with Asus eeepc 1005HA & Ubuntu Netbook Remix 9.10

This short tutorial is intended to demonstrate WEP cracking on ASUS EEEPC 1005HA. Tools used are UNR 9.10, Kismet and Aircarck-ng.

Install Ubuntu Netbook Remix 9.10 as show on http://www.ubuntu.com/GetUbuntu/download-netbook. Wireless (Atheros AR9285) works out of the box, but connection is flaky. To fix, open a terminal and type ‘sudo apt-get install linux-backports-modules-karmic’, for more information please follow the link https://wiki.ubuntu.com/HardwareSupport/Machines/Netbooks Read more

Share

Automated SSL Stripping

There are many posts on the web about using SSLstrip with arpspoof. This is working fine with my BT3 box but it has some drawbacks

1- Arpspoof works on one target at a time, so if you are on a busy DHCP network, you have to use something like “netdiscover” in the passive mode and manually arpspoof new targets on the run.

Read more

Share