Windows Phone 8.1 Hackable #Hacking #Hacked #Windows

 

 

Do you wanna hack Nokia Lumia phone running the latest mobile operating system Windows 8.1 ?? Hackers have made it very easy for you all..!!

Just few weeks after Microsoft announced a 19 year-old critical security hole existed in almost every version of its Windows operating system, XDA-developers have discovered a new vulnerability in Microsoft’s youngest OS Windows 8.1 that could easily be exploited by hackers to hack a Nokia Lumia phone.

XDA Developers hacker who go by the name DJAmol has found a wide open hole in OS Windows Phone 8.1 which makes the operating system very easy to hack. The vulnerability allows attackers to run their application with other user's privileges and edit the registry.

DJAmol realized that simply by replacing the contents of a trusted OEM app that has been transferred over to the SD card, the app will inherit the privileges of the original app. Once done, an attacker could then delete the existing directory and create a new directory with the same name as the original App.

As a result, the third party registry editor app will gain full access to the Info and Settings in the app itself. This how the hack can be implement in a few simple steps prescribed by XDA-developers in a blog post.

• Develop your own application package and deploy it on the target device.
• Install an any application such as “Glance Background Beta” from the Window Phone app Store.
• Delete all folders under the targeted directory of the installed app, in this case, Glance background.
• Now copy the contents of your own deployed package and paste it on the targeted directory. This implies replacing the “Program Files” of the installed app with your package files.
• Finally launch the App which will run in OEM (Glance Background beta) directory using the privileges of the targeted App.

The hack is very simple and easy to implement because all it need an application from the Window app store. But thankfully, the hack has not yet escalated to a full interop unlock, as the applications which are allowed to be moved to the SD card have limited access.

XDA developers forum reported the vulnerability to the Microsoft and also warned them that the vulnerability could give higher privileges to the attackers if tried using a First Party Application, rather a third party app. By the time, we can just wait for a response from Microsoft’s part to prevent it from getting more serious.

 

Source: The Hacker News

Researchers Uncover Spying Tool Used by Governments to Hijack all Types of Smartphones #Hacking #Privacy #Spying #Hijacking #Surveillance

Purchasing malware to victimize people is illegal by laws but if the same thing any government official do, then its not!! Yes, the police forces around the World are following the footsteps of U.S. National Security Agency (NSA) and FBI.

Researchers from the Citizen Lab at the Munk School of Global Affairs at the University of Toronto and computer security firm Kaspersky Lab have unearthed a broad network of controversial spyware which is specially designed to give law enforcement agencies complete access to a suspect's phone for the purpose of surveillance.

MALWARE FOR DESKTOPS AND ALL MOBILE DEVICES

The malware, dubbed as Remote Control System (RCS), also known as Da Vinci and Galileo, is developed by an Italian company known as Hacking Team, available for desktop computers, laptops, and mobile devices. The latest version of the malware works for all phone including Android, iOS, Windows Mobile, Symbian and BlackBerry devices, but best on Android devices, and can also be installed on jailbroken iOS devices. But even if the targeted iOS device is not jailbroken, the malware uses the famous Evasi0n jailbreaking tool to install the malware easily.

The team of researchers from both Citizen Lab and Kaspersky Lab in collaboration has presented their findings during an event in London. According to the report published, the diameter of the command infrastructure supporting Hacking Team, which sells the RCS to governments and law enforcement, is very vast with 326 command-and-control (C&C) servers running in more than 40 countries.

MALWARE DEVELOPERS - ‘HACKING TEAM’

Hacking Team is a Milan-based IT company with more than 50 employees that has made a totally different place for itself selling "offensive" intrusion and surveillance software to governments and law enforcement agencies in "several dozen countries" on "six continents."

“It was a well-known fact for quite some time that the HackingTeam products included malware for mobile phones. However, these were rarely seen,” said Kaspersky Lab experts on the blog post. “In particular, the Android and iOS Trojans have never been identified before and represented one of the remaining blank spots in the story.”
WORLD WIDE WEB OF COMMAND-N-CONTROL SERVERS

Kaspersky Lab researchers have used a fingerprinting method to scan the entire IPv4 space and to identify the IP addresses of RCS Command & Control servers around the world and found the biggest host in United States with 64 counts of C&C servers. Next on the list was Kazakhstan with 49, Ecuador has 35, UK which hosts 32 control systems and many other countries with a grand total of 326 Command & Control servers.

"The presence of these servers in a given country doesn't mean to say they are used by that particular country's law enforcement agencies," said Sergey Golovanov, principal security researcher at Kaspersky Lab. "However, it makes sense for the users of RCS to deploy C&Cs in locations they control – where there are minimal risks of cross-border legal issues or server seizures."

RCS can be physically implanted on the victim’s device through a USB or SD card, and remotely it can be installed through spear phishing, exploit kits, drive-by downloads or network traffic injection.

Once installed on Apple iOS and Android device, the new module enable governments and law enforcement officers with larger capabilities to monitor victim devices, including the ability to:

• control phone network
• steal data from their device
• record voice E-mail
• intercept SMS and MMS messages
• obtain call history
• report on their location
• use the device’s microphone in real time
• intercept voice and SMS messages sent via applications such as Skype, WhatsApp, Viber, and much more.

"Secretly activating the microphone and taking regular camera shots provides constant surveillance of the target—which is much more powerful than traditional cloak and dagger operations," Golovanov wrote.

While, the Android module is protected by an optimizer for Android called DexGuard that made the it extremely difficult to analyze. However, most of the iOS capabilities mentioned above are also available for Android, along with the support for hijacking applications such Facebook, Google Talk, Tencent of China and many more.

The mobile modules for each are custom-built for each target, researchers said. From previous disclosures we have seen that RCS is currently being used to spy on political dissidents, journalists, human rights advocates, and opposing political figures.

Credited to: Hacker News Website

Backtracking A Keylogger #Infosec #Hacker #Hacking #Wireshark #Blackhat #WhiteHat #Keylogger #Rat

Now all keyloggers and RATs are sending data to the hacker in regular intervals (usually every 5 to 10 minutes) by using one of the two methods below:

1. Using the Emails: where hacker configures his email ID and password while creating the server. Keylogger records the key strokes in a temp file and sends it to the hacker in form of emails. But this has a limit as most free email servers like Gmail or Yahoo or Hotmail has limit of 500 composed and received mails. So most hackers use the second method.

2. FTP server: While creating the keylogger server, hackers configure their FTP server, where they receive the logs of key strokes in the form of text file(usually labeled on the

basis of current system time stamp).

Hackers keylogger server uploads the files to FTP server after every few minutes interval.

If we monitor all data packages we can easily scan for one of these and then we’ll have the hackers email info or FTP info. What can we do with this, you might ask; highly skilled hackers obviously won’t allow this as they create a completely seperate email or FTP site which leaves no traces of them, but novice skilled hackers (there’s plenty of those) will just use their own email or leaving behind information about them. An example could be that you find the name of the person from the email you backtraced – this ain’t his primary email, so there’s nothing valuable. From there you can look up his name on Google, you’ll probably find his real email on some site; then simply try to login to it using the password from the fake email (most novice skilled hackers will have the same password).

Wireshark is a very famous network scanning hack tool which is used by hackers or network forensic experts to monitor the packet flow of their network cards like Ethernet or WLAN. It records each and every packet coming and going out of your system’s Network card.

Packets is just a bunch of data. Whenever you feel anything suspicious in your system like your system is compromised or you are infected follow the steps below prior to removing the keylogger or RAT from your system.

Steps To Reverse Engineering The Email Or FTP Servers Password:

1. First of all download and install Wireshark. You can easily get this simply by Googling it.

Note: While Wireshark is getting installed, ensure that it installs the Winpcap with it otherwise it won’t work properly.

2. Now go to the “Capture”-button in the top menu of the Wireshark and select the interface (means your network card which can be Ethernet or WLAN).

3. It will now start capturing the packets through that Network card.

What you have to do is just keep capturing the records for atleast 30 minutes for getting the best results.

After 30 minutes, stop capturing the packets.

4. Now you need to filter your results, for this go to the filter box and type FTP and SMTP one by one.

Note: if you get records for FTP then hacker has used FTP server and if you didn’t get FTP that means the hacker has used SMTP, so give SMTP in Filter box.

5. As you scroll down you will find the “FTP username” and “Password”

for victims ftp account in case FTP server is used. And if hacker has used SMTP then you will find “email address” and its “password” that hacker has used to create the server.

NOTE: This won’t work in all cases, but it’s certainly worth trying. You would definitely want to know who is snooping for information a round you:sometimes it's the last person you'll ever suspect

Happy Hunting *Smiling* 

 

Turning Mozilla Firefox Into A Hacking Machine {And Secure In Some Way}!! ;D #Mozilla #Firefox #Hacking #Infosec #Hackers

Internet is an amazing virtual world where you can "virtually" do anything: gambling, playing, watching movies, shopping, working, “VoIPying”, spying on other people and for sure auditing remote systems.

The security testers’ community has a large panel of security tools, methodologies and much more to perform their pentests and audit assessments. But what happens if you find yourself weaponless.

No more Top 100 security tools, no more LiveCDs and no more exploitation  frameworks. A security auditor without toolbox is like a cop without gun.

Nevertheless, there is maybe a way to rescue yourself from this nightmare situation.

The magical solution could be Firefox and its extensions developed by hackers and coders. If you don’t want to do the work  below then there is a open source browser based security framework called mantra which comes with preconfigured with all the above extensions + many more. You can download it from H3R3 . Yeah!!

Here is a list of useful security auditing extensions:

*Information Gathering*

Whois And Geo-location

Ø ShowIP : Show the IP address of the current page in the status bar.

It also allows querying custom services by IP (right mouse button) and Hostname (left mouse button), like whois, netcraft.

ØShazou : The product called Shazou (pronounced Shazoo it is Japanese for mapping) enables the user with one-click to map and geo- locate any website they are currently viewing.

Ø HostIP.info Geolocation : Displays Geolocation information for a website using hostip.info data. Works with all versions of Firefox.

ØActive Whois : Starting Active Whois to get details about any Web site owner and its host server.

ØBibirmer Toolbar : An all-in-one extension. But auditors need to play with the toolbox. It includes (WhoIs, DNS Report, Geolocation, Traceroute, Ping). Very useful for information gathering phase.

  

*Enumeration / Fingerprinting*

Ø Header Spy : Shows HTTP headers on statusbar.

Ø Header Monitor : This is Firefox extension for display on statusbar panel any HTTP response header of top level document returned by a web server. Example: Server (by default), Content Encoding, Content- Type, X-Powered-By and others.

*Social Engineering*

ØPeople Search and Public Record : This Firefox extension is a handy menu tool for investigators, reporters, legal professionals, real estate agents, online researchers and anyone interested in doing their own basic people searches and public record lookups as well as background research.

 *Googling And Spidering*

ØAdvanced dork : Gives quick access to Google’s Advanced

 Operators directly from the context menu. This could be used to spider a site or scan for hidden files (this spider technique is used via scroogle.org)

Ø SpiderZilla : Spiderzilla is an easy- to-use website mirror utility, based on Httrack-Download from H3R3

ØView Dependencies : View Dependencies adds a tab to the "page info" window, in which it lists all the files which were loaded to show the current page. (useful for a spidering technique) Security Assessment / Code auditing

*Editors*

Ø JSView : The ’view page source’ menu item now opens files based on the behaviour you  choose in the jsview options. This allows you to open the source code of any web page in a new tab or in an external editor.

Ø Cert Viewer Plus : Adds two options to the certificate viewer in Firefox or Thunderbird: an X.509 certificate can either be displayed in PEM format (Base64/RFC 1421, opens in a new window) or saved to a file (in PEM or DER format – and PKCS#7 provided that the respective patch has been applied - cf.

Ø Firebug : Firebug integrates with Firefox to put a wealth of development tools at your fingertips while you browse. You can edit, debug, and monitor CSS, HTML, and JavaScript live in any web page.

Ø XML Developer Toolbar: Allows XML Developer’s use of standard tools all from your browser.

*Headers Manipulation*

Ø HeaderMonitor : This is Firefox extension for display on statusbar panel any HTTP response header of top level document returned by a web server. Example: Server (by default), Content Encoding, Content- Type, X-Powered-By and others.

Ø RefControl : Control what gets sent as the HTTP Referrer on a per- site basis.

Ø User Agent Switcher : Adds a menu and a toolbar button to switch the user agent of the browser.

*Cookies Manipulation*

Ø Add N Edit Cookies : Cookie Editor that allows you add and edit "session" and saved cookies.

ØCookieSwap : CookieSwap is an extension that enables you to maintain numerous sets or "profiles" of cookies that you can quickly swap between while browsing.

Ø httpOnly : Adds httpOnly cookie support to Firefox by encrypting cookies marked as http Only on the browser side.

Ø Allcookies : Dumps ALL cookies (including session cookies) to Firefox standard cookies.txt file.

 *Security Auditing*

Ø HackBar : This toolbar will help you in testing SQL injections, XSS holes and site security. It is NOT a tool for executing standard exploits and it will NOT teach you how to hack a site. Its main purpose is to help a developer do security audits on his code.

Ø Tamper Data : Use “tamper data” to view and modify HTTP/HTTPS headers and post parameters.

Ø Chickenfoot : Chickenfoot is a Firefox extension that puts a programming environment in the browser’s sidebar so you can write scripts to manipulate web pages and automate web browsing. In Chickenfoot, scripts are written in a superset of JavaScript that includes special functions specific to web tasks.*Misc*

 *Hacks For Fun*

Ø Greasemonkey : Allows you to customize the way a webpage displays using small bits of JavaScript (scripts could be download here)

Ø Encryption Fire Encrypter : FireEncrypter is a Firefox extension which gives you encryption/decryption and hashing functionalities right from your Firefox browser, mostly useful for developers or for education & fun.

*Malware Scanner*

Ø QArchive.org web files checker : Allowing people to check web files for any malware (viruses, trojans, worms, adware, spyware and other unwanted things) inclusions.

Ø Dr.Web anti-virus link checker :

Ø This plugin allows you to check any file you are about to download, any page you are about to visit

Ø ClamWin Antivirus Glue for Firefox : This extension scans every downloaded file automatically with ClamWin.

*Anti Spoof*

Ø refspoof : Easy to pretend to origin from a site by overriding the URL referrer (in a http request). — It incorporates this feature by using the pseudo-protocol spoof:// .. Thus it’s possible to store the information in a "hyperlink" – that can be used in any context... like html pages or bookmarks.

Thanks For Visiting

 

Metasploit Framework Expert #Metasploit #Hacking #Infosec #Vulnearbility #Exploit #Overflow #Pentesting

Metasploit is?

It is an open source penetration testing framework, used for developing and executing attacks against target systems. It has a huge database of exploits, also it can be used to write our own 0-day exploits.

Hacking through Metasploit is done in 3 simple steps: Point, Click, Own.

Before I go into the details of The Metasploit Framework, let me give you a little idea of some basic terms (may seem boring at first, but you must be knowing them)

Vulnerability: A flaw or weakness in system security procedures, design or implementation that could be exploited resulting in notable damage.

Exploit: A piece of software that take advantage of a bug or vulnerability, leading to privilege escalation or DoS attacks on the target.

Overflow: Error caused when a program tries to store data beyond its size. Maybe used by an attacker to execute malicious codes.

Payload: Actual code which runs on the compromised system after exploitation

A non-exhaustive list of topics on the tutorial videos includes:

•Metasploit Basics and Framework Organization
•Server and Client Side Exploitation
•Meterpreter - Extensions and Scripting
•Database Integration and Automated Exploitation
•Post Exploitation Kung-Fu - Exploring the system, Privilege escalation, Log deletion and AV / Firewall bypass
•Token stealing and impersonation, Backdoors and Rootkits, Pivoting and Port forwarding, Railgun and Custom Scripting, Backdoor an Executable
•Ruby Primer for Hackers
•Writing Metasploit Modules - Auxiliary and Exploit
•Exploit research with Metasploit- Buffer Overlows, SEH, DEP Bypass, Return Oriented Programming
•Social Engineering Toolkit (SET) and Armitage
•Scenario Based Hacking using Metasploit
 

TUTORIAL VIDEOS ARE ABSOLUTELY FREE.

 The advantages about this video tutorials is that they explain Metaspoilt into details; and you can learn at your own pace in each step; no hurries-Click On Your Desirable topics-(In Bracket)

1. Metasploit Framework Expert Part 1 (Exploitation Basics)
2. Metasploit Framework Expert Part 2 ( Why Metasploit? )
3.  Metasploit Framework Expert Part 3 ( Meterpreter Basics )
4.  Metasploit Framework Expert Part 4 (Framework Organization)
5.  Metasploit Framework Expert Part 5 (Post Exploitation Kung-Fu)
6.  Metasploit Framework Expert Part 6 (Post Exploitation Privilege Escalation)
7.  Metasploit Framework Expert Part 7 (Killing Av And Disabling Firewall)
8.  Metasploit Framework Expert Part 8 (Stdapi And Priv Extensions)
9. Metasploit Framework Expert Part 9 (Token Stealing And Incognito)
10. Metasploit Framework Expert Part 10 (Espia And Sniffer Extensions In Post Exploitation)
11.  Metasploit Framework Expert Part 11 (Post Exploitation Backdoors)
12.  Metasploit Framework Expert Part 12 (Pivoting After Post Exploitation)
13.  Metasploit Framework Expert Part 13 (Port Forwarding As Part Of Post Exploitation)
14. Metasploit Framework Expert Part 14 (Client Side Exploits)
15.  Metasploit Framework Expert Part 15 (Backdoors And Rootkits In Post Exploitation)
16.  Metasploit Framework Expert Part 16 (Exploit Research With Metasploit)
17.  Metasploit Framework Expert Part 17 (Railgun Basics)
18. Metasploit Framework Expert Part 18 (Railgun Adding Functions)
19.  Metasploit Framework Expert Part 19 (Railgun Adding New Dlls)
20.  Metasploit Framework Expert Part 19A (Railgun Adding New Dlls On Windows 7)
21. Metasploit Framework Expert Part 20 (Resource Scripts)
22.  Metasploit Framework Expert Part 21 (Database Support)
23. Metasploit Framework Expert Part 22 (Using Plugins)
24.  Metasploit Framework Expert Part 23 (Meterpreter Api Basics)
25.  Metasploit Framework Expert Part 24 (Meterpreter Scripting Migrate Clone)
26. Metasploit Framework Expert Part 25 (Meterpreter Scripting Process Name Search)

Tools website-Click H3R3

Sorry Guys but I just need 15 Seconds from you guys-create some cash flow that will keep my hobbie of blogging about Infosec, Hacking,Techie Stuff running-
You already know the drill: if you're stuck or puzzled just check out the pictures below
 Skip Ad's where you  click to after 5 Seconds-Thanks Again For Visiting :)