introduction of Information security & ethical hacking ppt

Information security & ethical hacking

More PowerPoint presentations from Sahil Rai

© HaCkHiPp0-TeaM.

R0oTx:Sahil_Rai, Manish Pathak (1337C001), p7771 (p@nku k@p0or) 

Continue Reading

Hacking Wireless Networks

Hacking Wireless Networks

More PowerPoint presentations from Sahil Rai

Continue Reading

DNS Network Mapper Backtrack

dnsmap 0.30 - DNS Network Mapper by pagvac (gnucitizen.org)

usage: dnsmap <target-domain> [options]
options:
-w <wordlist-file>
-r <regular-results-file>
-c <csv-results-file>
-d <delay-millisecs>
-i <ips-to-ignore> (useful if you're obtaining false positives)

e.g.:
dnsmap target-domain.foo
dnsmap target-domain.foo -w yourwordlist.txt -r /tmp/domainbf_results.txt
dnsmap target-fomain.foo -r /tmp/ -d 3000
dnsmap target-fomain.foo -r ./domainbf_results.txt

© HaCkHiPp0-TeaM.

R0oTx:Sahil_Rai, Manish Pathak (1337C001), p7771 (p@nku k@p0or) 

Continue Reading

DNS Information Gathering Tool

DNS Information Gathering Tool


1) Get the host’s addresse (A record).
2) Get the namservers (threaded).
3) Get the MX record (threaded).
4) Perform axfr queries on nameservers and get BIND versions(threaded).
5) Get extra names and subdomains via Google scraping (Google query = “allinurl: -www site:domain”).
6) Brute force subdomains from file, can also perform recursion on subdomain that have NS records (all threaded).
7) Calculate C class domain network ranges and perform whois queries on them (threaded).
8) Perform reverse lookups on net ranges ( C class or/and whois net ranges) (threaded).
9) Write to domain_ips.txt file ip-blocks

Thanks To visit Hack Hippo i Hope you like it, if you have any doubt feel free comments.

© HaCkHiPp0-TeaM.

R0oTx:Sahil_Rai, Manish Pathak (1337C001), p7771 (p@nku k@p0or) 

Continue Reading

How to use whois in Backtrack

How to use whois in Backtrack

Steps : open terminal and just type this command apt-get install update 

Step 2: whois (target website name )

      Ex: whois secinside.in

Thanks To visit Hack Hippo i Hope you like it, if you have any doubt feel free comments.

© HaCkHiPp0-TeaM.

R0oTx:Sahil_Rai, Manish Pathak (1337C001), p7771 (p@nku k@p0or)

Continue Reading

Nmap Top 10 Commands

10 nmap Commands

#1 Scan a single host or an IP address (IPv4)

nmap 192.168.1.1
Or
nmap secinside.in

Output 

#2 Nmap Syn Stelth Scan

 nmap -v -A secinside.in

Output

#3 Nmap Complete Network Host Scann

nmap -sP 192.168.1.0/24

#4 Only show open (or possibly open) ports

nmap --open 192.168.1.1

nmap --open secinside.in

#5: Scan a host using UDP ping

nmap -PU 192.168.1.1

#6: Scan a host when protected by the firewall

nmap -PN 192.168.1.1

nmap -PN secinside.in

#7: Show all packets sent and received

nmap --packet-trace 192.168.1.1

nmap --packet-trace secinside.in

#8: Display the reason a port is in a particular state

nmap --reason 192.168.1.1

nmap --reason secinside.in

#9: How do I detect remote operating system?

You can identify a remote host apps and OS 

using the -O option:

nmap -O 192.168.1.1

nmap -v -O 192.168.1.1

nmap -O secinside.in

#10: How do I scan specific ports?

#15: How do I scan specific ports?

map -p [port] hostName

## Scan port 80

nmap -p 80 192.168.1.1

## Scan TCP port 80

nmap -p T:80 192.168.1.1

## Scan UDP port 53

nmap -p U:53 192.168.1.1

## Scan two ports ##

nmap -p 80,443 192.168.1.1

## Scan port ranges ##

nmap -p 80-200 192.168.1.1

Thanks To visit Hack Hippo i Hope you like it, if you have any doubt feel free comments.

© HaCkHiPp0-TeaM.

R0oTx:Sahil_Rai, Manish Pathak (1337C001), p7771 (p@nku k@p0or)

Continue Reading

What is social engineering?

What is social engineering?

         

Social engineering is the use of deception and manipulation to obtain confidential information. It is a non-technical kind of intrusion that relies heavily on human interaction and often involves tricking people into breaking normal security procedures. Social engineers rely on the fact that people are not aware of the value of the information they possess and are careless about protecting it.

In anti virus computer security software, social engineering is generally a hacker's clever manipulation of the natural human tendency to trust. The hacker's goal is to obtain information that will gain him/her unauthorized access to a system and the information that resides on that system. Typical examples of social engineering are phishing e-mails or pharming sites.

Examples of social enginering

One example of malware using social engineering tricks were the Japan Earthquake scams that have been discovered in March 2011. In one of these cases, scammers were spreading malicious links to “dramatic” videos of the disaster. So, when you searched for news on the earthquake or tsunami you ended up clicking on a link that actually downloaded malware onto your PC or took you to a phishing site that asked for personal information. In addition to sending spam emails and poisoning search results with dangerous links, cybercrooks are also posting donation requests and links to malware on social networking sites. Therefore, you could have your money and credit card, as well as your identity information, stolen.

Another example is the Tax Related Identity Theft Scams. Cases of stolen tax returns have surged over the past five years, leaving many identity theft victims struggling to recover their lost refunds. Approximately 155 million tax forms are filed annually. This provides identity thieves with an opportunity to steal from Americans who are just trying to pay their taxes correctly. A recent Scripps Howard News Service investigation analysed more than 1.4 million ID theft records from the U.S. Federal Trade Commission from 2005 through early 2010.  In it they found that fraud complaints about stolen tax return-related identity theft jumped from 11,010 complaints in 2005 to 33,774 in 2009. That’s nearly 300%.

Attacks on the rise

Despite increases in the number and capability of botnets for distributed denial of service (DDoS) attacks, social engineering remains one of the largest cyber security threats to IT infrastructure. Throughout 2010, experts witnessed various attacks that used the two most popular social networks - Facebook and Twitter - as launching pads. In 2011, not only will hackers continue to use these networks, but it is predicted that they will also be used more for distributed attacks.

Continue Reading