HACK any PC on a LAN

HACK any PC on a LAN

In this topic i am going to tell you how to hack a PC on a Local Area Network(LAN).
A LAN is a computer network covering a small physical area, like a home, office, or small groups of buildings, such as a school, or an airport. The whole process of inter connecting computers in such a small physical area is called as Local Networking.
In a Local Networks we can share files, folders, local web server or play game.
we can list all online user in LAN with help of command "net view"

"net view > pclist.txt" Command save list of alive computer name in a file called pclist.txt inside current directory.
But I will not recommend this method because if any user has chosen Private Network instead of Home Network or have turned off Network Discovery then his PC name will not show in the Network.
To discover number of online user in network simply use IP Scanner. There are many free IP scanner available on internet like Angry IP Scanner,Advance IP Scanner etc.
you can get Advance IP Scanner from this link
http://www.radmin.com/products/utilities/ipscanner.php

Suppose "arif" is computer name we are using have an IP address 192.168.1.5.
suppose we scanned our Local Area Network, and after scanning our Network we found 10 hosts alive, We are not interested in all of the 10 hosts, rather we are interested in Hacking MANU's computer.
With the help of advance IP Scanner which resolves the PC name display the corresponding IP address, so after resolving host names of all computer we found a computer named "MANU" and has the IP address 192.168.0.20.
Packet Sniffing tools help you to hack MANU's computer.
Sniffing is the method in which you spy all the network packets, and analyze the network traffics
A packet sniffer, referred as a network monitor or network analyzer, can be used legitimately by a network or system administrator to monitor and troubleshoot network traffic.
But a sniffer can also be used illegitimately to capture data being transmitted on a network.
Hackers use these tools to steal data flown across the network, hackers can capture all the packets transmitted through the network, and analyze the contents. Sniffers can log the Email user-name and passwords, Cpanel Passwords, Bank passwords etc some famous sniffing tools are Cain and Abel, Ettercap, Wireshark, Ethereal etc, these softwares are availabe to download on internet, and all these are freeware.
just search from Google you will get many sniffing tools.To get "cain and abel" tool click on this link http://www.oxid.it/cain.html
we not only hack MANU's PC but also monitor internet activity like which site she often visits etc.
with help of "Cain and Abel" from Oxid.it which has several good features like Sniffing, Arp poisoning, MITM, Hash Cracking(Dictionary + Rainbow Table) Windows NTLM password cracking etc.

To understand features of "cain and abel" tool look at this video

http://www.youtube.com/watch?v=tMNPjMsjpfQ

we can monitore few sites which MANU's visits, and may be we can get user-name and password of some sites, but we will have a problem in Hacking MANU's Hot mail, Yahoo, Facebook etc, and that is because Cain and Abel does not sniff packets sent over Secure Sockets Layer(SSL).

We can still sniff SSL packets by using some other tools, the best tool i would recommend you is Ettercap, It is also available for Unix system.To understand features of Ettercap watch this video (size 317mb )
http://infinityexists.com/2008/08/03/episode-20-ettercap/

if this Dose not work find open ports in MANU's PC, then Enumerate the Service, find vulnerable service, Exploiting Vulnerable service, Privilege escalation

Basic Networking and Hacking Commands

Basic Networking and Hacking Commands

Here I am going to tell some useful basics Commands for a Networking on a "Command Prompt"(CMD).
In case you don’t know how to get CMD open , then click on Start, then Run, then type “cmd" without quotes.

Lets start with some simple commands

1) ping : It sends a message to a computer anywhere on the network/internet, and if the computer is connected you will get a response. If the computer is not connected to the network/internet you wont get a response.

Examples
ping 192.168.1.4 (192.168.1.4 is the IP address is you want to check whether it is connected or not )
or
ping www.myworld.com
(www.myworld.com is the website you want to ping, if you don’t know the IP).

There are many ption with this commands
ping /? this help command give more option with description
2) nslookup : This command have different functionalities. The name nslookup means "name server lookup".
This is used find Domain Name System (DNS) details, including IP addresses of a particular computer, MX records for a domain and the NS servers of a domain.
Examples
nslookup www.google.com

Server: mumns4.mtnl.net.in (This is your nearest DNS server of your service provider with IP address)
Address: 59.185.3.12

Non-authoritative answer:
Name: google.com (This is a DNS server name of website you want to know)
Address: 209.85.153.104

Another function of nslookup is to find out mail server and its IP address
Now MX records(Mail eXchange record) is an entry in a DNS database that points to the mail server for that domain.In a small company, the MX record typically directs all e-mail to the same domain. However, a company may handle e-mail using a different domain name,in this case the MX record is configured route to the mail server.

nslookup (enter)
set type=mx (enter)
yahoo.com (This command will give you the mail servers IP address of yahoo.com.)

3) tracert : The tracert displays each host that a packet travels through as it tries to reach its destination.
each host is considered as hop you can see how many “hops” from the website you are way with this command:
Example
tracert 209.85.153.104
or
tracert google.com



4)arp : This command display and modifies the IP to Physical Address translation table used by "Address Resolution Protocol".
Address Resolution Protocol protocol used to obtain a node's physical address. Suppose a node (source) wants to communicate with target node. Source sends arp request with target IP address target responds by sending its physical address.
Examples
arp -a (Displays current ARP entries table.)

There are many option with this commands
arp /? this help command give more option with description.


5)netstat (network statistics): is used displays network connections (both incoming and outgoing), routing tables, and a number of network interface statistics.
Examples
netstat -a (Displays all active TCP connections and the TCP and UDP ports on which the computer is
listening).

There are many option with this commands
netstat /? this help command give more option with description.

6) ipconfig :(internet protocol configuration) displays all current TCP/IP network configuration values like IP address ,subnet mask,gateway etc.
Examples
ipconfig (display only the IP address, subnet mask and default gateway).
ipconfig /all (Display full configuration information including DHCP ,DNS address ,physical address etc.
ipconfig /release (this will release your IP)
ipconfig /renew (this will renew your iP)


There are many option with this commands
ipconfig /? this help command give more option with description.

7) nbtstat : This command will show you the netbios name of the target.
nbtstat is use to troubleshoot NetBIOS name resolution problems. When a network is functioning normally, NetBIOS over TCP/IP (NetBT) resolves NetBIOS names to IP addresses. The nbtstat command removes and corrects preloaded entries.
Examples
nbtstat -a computername (displays local NetBIOS name table for that computer as well as the MAC
address of the adapter card).
nbtstat -A < IP address > (command performs the same function using a target IP address rather than a
name).
nbtstat - c (option shows the contents of the NetBIOS name cache, which contains NetBIOS name-to-IP
address mappings).
nbtstat -n (displays the names that have been registered locally on the system by NetBIOS applications
such as the server and redirector).
There are many option with this commands
nbtstat /? this help command give more option with description.
8) net use : This command connects / disconnects the computer from a shared resources such as other computers, printers and drives, or allow to view the information about current computer connections. In addition, it provides other functionalities as well. Net use is used to display a list of network connection information on shared resources.
If you will use net use command without any parameters, you will retrieves a list of network current connections.

There are many option with net use see the option in image.The with this bracket [ ] is optional.

examples

net use \\ IP address\IPC$ “” /user:administrator (this command will allow you to connect to the target
as administrator)

Now if you want to connect to the target and browse the entire C drive, then use this command:
net use K: \computername\C$ (this will create a virtual drive on your “my computer” folder)

Note : Keep in mind that this will only works if the target doesn’t have an administrator password set.
or you will have to provide administrator password within a command.

To hack administrator password of any pc on LAN use "Cain and Abeil" tool (see video of my previous post )

This command makes use of the SMB (server message block) and the NetBios protocol on port 139 or 445. By default, in the basic windows XP configuration, it is enabled. Thus, users can connect and disconnect from shared resources such as computers, printers and drives.


It also connects to the IPC$ (interprocess communication share). This is so called the null session connection, which allows unauthenticated users. The basic use for connecting anonymously is: net use \\ IP address\IPC$ “” /u:””. For example, if this is typed in the command prompt: net use \\192.168.1.101\IPC$ "" /u:"", you would be connecting to the share IPC$ of the network 192.168.1.101 as an anonymous user with blank password. If successfully connected to the target machine, a lot of information can be gathered such as shares, users, groups, registry keys and more. This would provide a hacker with a lot of information about a remote user.

What are the Ports number?

What are the Ports number?



On computer and telecommunication devices, a port is generally a specific physical connection to some other devices, usually with a socket and plug of some kind. Typically, a personal computer is provided with one or more serial ports and one parallel port. The serial port supports sequential, one bit-at-a-time transmission to peripheral devices such as scanners and the parallel port supports multiple-bit-at-a-time transmission to devices such as printers.

In programming, a port is a "logical connecting place" and specifically, the protocols of the Transport Layer of the Internet Protocol Suite(like TCP/UDP) uses a numerical identifier of the endpoints for host-to-host communications. Such an endpoint is known as a port and the identifier is the port number.
Higher-level applications that use TCP/IP such as the Web protocol, Hypertext Transfer Protocol, have ports with preassigned numbers. These are known as "well-known ports" that have been assigned by the Internet Assigned Numbers Authority (IANA). Other application processes are given port numbers dynamically for each connection. When a service (server program) initially is started, it is said to bind to its designated port number. As any client program wants to use that server, it also must request to bind to the designated port number.Port numbers are from 0 to 65535.

Ports 0 to 1024 are reserved for use by certain privileged services. For the HTTP service, port 80 is defined as a default and it does not have to be specified in the Uniform Resource Locator (URL).

Ports 1024 to 49151 are registered ports that companies and other users register with the Internet Corporation for Assigned Names and Numbers (ICANN) for use by the applications that communicate using the Internet's Transmission Control Protocol (TCP) or the User Datagram Protocol (UDP).

Ports 49151 to 65535 Besides the well-known port numbers and the registered port numbers, the remaining ports in the port number spectrum are referred to as dynamic ports or private ports.Before the arrival of ICANN, the port numbers were administered by the Internet Internet Assigned Numbers Authority (IANA).

Official: Port/application combination is registered with IANA .
Unofficial: Port/application combination is not registered with IANA.
Conflict Port: is in use for multiple applications.

If you want to know the port number for a specific web service (program), look here:
http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers

The MAC Addressing And Spoofing

The MAC Addressing And Spoofing

The MAC address is "Media Access Control " address which is the unique identifier assigned to network interface cards(NICs) by the manufacturer for the purpose of identification. It may also known as an Ethernet Hardware Address, Adapter Address or Hardware Address.
MAC addresses are 12-digit hexadecimal numbers (48 bits in length). By convention, MAC addresses are usually written in one of the following two formats:

MM:MM:MM:SS:SS:SS

MM-MM-MM-SS-SS-SS
The first half of a MAC address contains the ID number of the adapter manufacturer. These IDs are regulated by an Internet standards body. The second half of a MAC address represents the serial number assigned to the adapter by the manufacturer.In the example,

00:A0:C9:29:B8:36The prefix 00A0C9 indicates the manufacturer is Intel Corporation.

MAC Spoofing is a technique of changing an assigned Media Access Control (MAC) address of a networked device to a different one. The changing of the assigned MAC address may allow the bypassing of access control list on servers or routers either hiding a computer on a network or allowing it to impersonate another computer.
MAC spoofing is the activity of altering the MAC address of network cards .
In windows change of MAC address can be change by editing the registry or via "My Network Places" . To change the MAC address via Network Places
go to properties of "local Area Connection", press configure.. button then go toadvance tag
In advance tag select Local Administrative Address ,
select value radio button and insert any MAC address you want.
To alter the MAC via the registry, open the Windows Registry Editor and change the appropriate values.
The value " NetworkAddress" is located in a subkey underHKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002BE10318}.

Here’s 6 Great Tricks for Windows 8 that You Probably Don’t Know

Here’s 6 Great Tricks for Windows 8 that You Probably Don’t Know...&*&*&*&*&*

We’ve covered a lot of tips, tricks, and tweaks for Windows 8, but there are still a few more. From bypassing the lock screen to instantly taking and saving screenshots, here are a few more hidden options and keyboard shortcuts.

Whether you love Windows 8, hate it, or just wish Metro would go away, these options will help you make Windows 8 work the way you want it to.

Disable the Lock Screen

Windows 8 shows a lock screen when you restart your computer, log out, or lock it. It’s very pretty, but it just adds one more keystroke to the login process. You can actually disable the lock screen entirely, although Microsoft hides his option very well

This option is located in the Group Policy Editor. To launch it, type “gpedit.msc” at the Start screen and press Enter.In the Group Policy Editor, navigate to Computer Configuration\Administrative Templates\Control Panel\Personalization.Double-click the “Do not display the lock screen” option, set it to Enabled, and click OK.The next time you restart your system, log out, or lock the screen, you’ll see the login screen instead of the lock screen
. 

Combine this with skipping the Start screen and you can boot to a login screen and log straight into the desktop, just like on previous versions of Windows. The desktop will be the second screen you access instead of the fourth.

Take & Save Screenshots Instantly

Windows 8 has a new hotkey combination that lets you take and save screenshots instantly. To take a screenshot, hold the Windows key down and press the Print Screen key. Your screen will flash and Windows will save a screenshot to your Pictures folder as a PNG image file.

You might assume that WinKey+Alt+Print Screen would take and save a screenshot of the current window, but it doesn’t. Maybe this will be implemented in the final version of Windows 8.

We’ve also covered other new keyboard shortcuts in Windows 8.

Prevent Files From Opening in Metro

If you prefer to use Windows 8’s desktop and try to avoid  Metro, you may be surprised the first time you double-click an image file in Windows Explorer and get kicked back into Metro. By default, Windows 8 launches images, videos, and music in Metro apps – even if you open them from the desktop.

To avoid this, launch the Default Programs control panel by pressing the Windows key to access Metro, typing “Default Programs,” and pressing Enter.
Click the “Set your default programs” link.

In the list of available programs, select the “Windows Photo Viewer” application and click the “Set this program as default” option.

Repeat this process for the “Windows Media Player” application. You can also set the desktop version of Internet Explorer as your default Web browser from within Internet Explorer.

Of course, if you have a preferred image viewer or media player, you can install it and set it as the default application instead.

Display Administrative Tools

By default, Windows hides the Event Viewer, Computer Management and other Administrative Tools from the Start screen. If you use these applications frequently, you can easily unhide them.

From the Start screen, mouse over to the bottom or top right corner of the screen and click the Settings charm. You can also press WinKey-C to view the charms.

Click the “Settings” link under Start and set the “Show administrative tools” slider to “Yes.”The Administrative Tools will appear on the Start screen and in the All Apps list.

Control Automatic Maintenance

Windows 8 has a new scheduled maintenance feature that automatically updates software, runs security scans, and performs system diagnostics at a scheduled time. By default, the maintenance tasks run at 3am if you aren’t using your computer. If you’re using your computer at the scheduled time, Windows will wait until the computer is idle.

To customize this time, open the Action Center from the flag icon in the system tray.

You’ll find Automatic Maintenance under the Maintenance category. Click the “Change maintenance settings” link to customize its settings
.
From this screen, you can set the time you want to run automatic maintenance tasks. You can also have Windows wake up your computer to run maintenance tasks, if it’s asleep.Customize Search Applications

Metro apps can appear as options when you use the search feature.

You can control the apps that appear here and trim down the list. First, click the Settings charm from anywhere on your system and click the “More PC settings” link

From the PC settings screen, click the Search category and use the sliders to hide apps from the search screen.

Do you have any other Windows 8 tricks to share? Leave a comment and let us know

Samsung Galaxy Note II Launched in India

Samsung Galaxy Note II Launched in India

Samsung has launched Samsung Galaxy Note II in India for Rs39900.

Galaxy Note II has a 1.6GHz Quad-core Exynos processor, a 5.5-inch Super AMOLED HD display with Gorilla Glass 2 and has a resolution of 1280×720 pixels. It also has 2GB of RAM, a 8-megapixel rear camera that can shoot 1080p video, a 1.9-megapixel front facing camera, and a huge 3,100 mAh battery.Galaxy Note II will be available in three memory variants of 16GB, 32GB and 64GB and will also have a microSD slot.

Important Specifications:

Features                 Samsung Galaxy Note II

Processor                 1.6GHz Quad-Core Exynos processor
RAM                        2GB
Display                     5.5-inch Super AMOLED HD (Non-Pentile) 1280×720
Camera                     8-megapixel rear camera, 1.9-megapixel front facing
Input device               S-Pen
Operating System       Android 4.1 Jelly Bean with     TouchWiz Nature UX
Battery                       3,100 mAh
Expansion                 Micro-SD card slot up to 32GB of storage
Memory Options        16GB/32GB/64GB

Sony Xperia Tipo Launched in India for Rs 9999Sony Xperia Tipo Launched in India for Rs 9999

Sony Xperia Tipo Launched in India for Rs 9999

Sony has launched the Xperia Tipo in India for Rs 9,999. It runs on Android 4.0 Ice Cream Sandwich. The phone is available in single-SIM and dual-SIM variants. The dual-SIM model costs Rs 10,449.

It has a 3.2-inch display with scratch-resistant mineral glass, a 800MHz single-core Qualcomm Snapdragon processor, a 3.2-megapixel camera, 1,500 mAh battery, 2GB internal memory, up to 32GB of expandable memory , and free 50GB of Box cloud storage.