BT4 Final, Nmap and Immunity Debugger Updated : There is Something In Air

Yeah there is definatly something in the Air, as there are some major tools updates this which are kick ass starting of with the New Backtrack 4 Final release, then there the new Nmap v5.20 released and the most anticipated Immunity Debugger 1.74 released all in the just one week.

 

 

Yup, this is exciting and we are all set to use them Dude, this is Hardcore this is pretty much great week for hackers and if you see at the upcoming soft’s you would be more excited, i am talking about Endor and Hax, would be launching soon…

Backtrack 4 Final

Starting with the Backtrack 4 Final version released, the pre final release of Backtrack 4 was released in june of 2009 and its final version was released about 4 days ago. This is awesome news from the Offensive guys.

 

 

With this release includes a new kernel, a larger and expanded toolset repository, custom tools that you can only find on BackTrack, and more importantly, fixes to all (well, most..) major bugs that we knew of. This release we received an overwhelming support from the community and we are grateful to everyone that has contributed to the success of this release.

 

Download: http://www.backtrack-linux.org/downloads/

 

Nmap 5.20

Can you believe this, this new version of the most important and awesome tool is out with a new updates and i am loving it. well i got this news pretty back in my mail but was waiting to tell you guys.

The latest edition of Nmap come with some of the following Updates :-

1. 30+ new Nmap Scripting Engine scripts
2. enhanced performance and reduced memory consumption
3. protocol-specific payloads for more effectie UDP scanning
4. a completely rewritten traceroute engine
5. massive OS and version detection DB updates (10,000+ signatures)…

There are many other updates in this new version which you can view at the official change log of Nmap.

 

Download : http://nmap.org/download.html

 

Immunity Debugger 1.74

The most anticipated debugger atleast for me is out now with a new version Update and is awesome. Yepee Yeah it got the new python support in it !! i just love this bugger and the good news is that it is not pre, alpha or any f*#ed version of it, it is hardcore and is ready to download.

 

 

Immunity Debugger is a powerful new way to write exploits, analyze malware, and reverse engineer binary files. It builds on a solid user interface with function graphing, the industry's first heap analysis tool built specifically for heap creation, and a large and well supported Python API for easy extensibility.

 

Some features of Immunity Debugger :

1. A debugger with functionality designed specifically for the security industry
2. Cuts exploit development time by 50%
3. Simple, understandable interfaces
4. Robust and powerful scripting language for automating intelligent debugging
5. Lightweight and fast debugging to prevent corruption during complex analysis
6. Connectivity to fuzzers and exploit development tools...

 

Download : http://www.immunityinc.com/products-immdbg.shtml

 

Conclusion

Awesome news coming from the far end we need to work hard and this is just the begging of something cool.

 

Happy Hacking @hackerthedude

Read More

WinScanX : A Simple, Fast and Portable Windows Auditing Tool

WinScanX is a state-of-the-art Windows auditing tool designed to help you get your Windows audit done quickly. It's easy to use and no installation is required.

 

WinScanX was released recently and its the one of the best resource released in 2009 . Its Fast, Simple, Portable and efficient tool for every security professional out there. Its really pa state of art tool.

 

 

WindScanX is released in two versions, one which is free to download and use and have some features in it which includes the GUI Front-End, Command-Line Interface, Easy-to-Use Reporting, Online Documentation etc and the other PRO version includes these and Quick Domain Audit, Multi-Host Scanning.

 

  Download WinScanX here                                         WinScanX ScreenShot Here

 

Windows Audit was created by Reed Arvin in order to provide the audit and security community with tools that are efficient and easy-to-use. These tools are designed to help minimize the time it takes to gather data in a security assessment so that more time can be spent doing what the computer cannot; analyzing the data to provide solid recommendations for identified security issues...

 

Screen Shot :

 

 

Command Line Usage :

WinScanX [-abcdefgpklijmnostqurxwyzSWv123] <hostname>

<username> <password>

 

[-abcdefgpklijmnostqurxwyzSWv123]  -- required argument

<hostname>  -- required argument

<username>  -- optional argument

<password>  -- optional argument

 

If the <username> and <password> arguments are omitted, this utility will attempt to establish a NetBIOS null session and gather information via the null session.

 

If the <username> and <password> arguments are both plus signs (+), the existing credentials of the user running this utility will be used.

 

Examples:

WinScanX -1 10.10.10.10

WinScanX -2 10.10.10.10 + +

WinScanX -3 10.10.10.10 administrator password

WinScanX -3 10.10.10.10 domain\admin password

WinScanX -1 WINSERVER01

WinScanX -2 WINSERVER01 + +

WinScanX -3 WINSERVER01 administrator password

WinScanX -3 WINSERVER01 domain\admin password

WinScanX -1 192.168.1-254

WinScanX -2 192.168.1-254 + +

WinScanX -3 192.168.1-254 administrator password

WinScanX -3 192.168.1-254 domain\admin password

WinScanX -1 IPInputFile.txt WinScanX -2 IPInputFile.txt + +

WinScanX -3 IPInputFile.txt administrator password

WinScanX -3 IPInputFile.txt domain\admin password

 

The passwords that are attempted for each user account are included in the Dictionary.input file.

 

The following can also be used in the Dictionary.input file:

 

<username>   -- The name of the current user

<lcusername> -- The name of the current user in lower case

<ucusername> -- The name of the current user in upper case

<blank>      -- A blank or null password

Download

 

 

 

Happy Hacking @hackerthedude

Read More

Process Hacker V1.9 Released

Process Hacker is a great tool or you can say a piece of software which acts as a more advance and more reliable software in front of default task manager. it creates a more detailed and a more understandable version of task manager.

 

You may remember we have earlier featured it in Process Hacker : Power Packed Task Manager, ok i know the spelling is wrong but don't worry about that we all are humans except the Google bot here :D.

 

Lets move on with Process Hacker, recently the people behind this software released the new Version of Process Hacker V1.9...

 

New Stuff :

• Ability to set I/O priority for processes and threads
• No more separate Assistant.exe executable required
• Signature verification now works on x64
• Now shows signer names (plus a Verified Signer column)
• Added proper x64 support to structs reader
• Added basic preprocessor to structs reader
• WOW64 modules now appear in Handle/DLL searches
• Small performance improvements
• Editing object SACLs is now possible with KProcessHacker

Process Hacker runs on both 32-bit and 64-bit Windows, but certain functionality is only available on 32-bit systems, including: Bypassing rootkits and security software when accessing processes, threads, and other objects, Viewing kernel pool limits,Viewing hidden processes, Changing handle attributes, Viewing kernel-mode stack traces and many others.

 

Screen Shots :

 

 

 

 

 

 

 

Statistics

      Process Hacker

      Main Language: C#

                      Total Lines of Code: 130,419

                      Active Contributors: 6

                      Commit Activity Timeline:
                     

Download

 

 

 

Happy Hacking @hackerthdude

Read More

Wireshark v1.2.5 Released

Wireshark is the world's foremost network protocol analyzer, and is the standard across many industries and educational institutions for security stuff. Wireshark is the world’s most popular network protocol analyzer.

 

It has a rich and powerful feature set and runs on most computing platforms including Windows, OS X, Linux, and UNIX. Network professionals, security experts, developers, and educators around the world use it regularly.

 

It is freely available as open source, and is released under the GNU General Public License version 2

Wireshark uses pcap to capture packets from supported protocols.

• Data can be captured "from the wire" from a live network connection or read from a file that records the already-captured packets.
• Live data can be read from a number of types of network, including Ethernet, IEEE 802.11, PPP, and loop-back.
• Captured network data can be browsed via a GUI, or via the terminal (command line) version of the utility, tshark.
• Captured files can be programmatically edited or converted via command-line switches to the "editcap" program.
• Data display can be refined using a display filter.
• Plug-ins can be created for dissecting new protocols.

Read More

OllyDbg Beta 2 Final Released

OllyDbg is a 32-bit assembler level analyzing debugger for Microsoft^® Windows^®. Emphasis on binary code analysis makes it particularly useful in cases where source is unavailable. x is a shareware, but you can download and use it for free.

 

OllyDbg is a 32-bit assembler level analyzing debugger for Microsoft^® Windows^®. Emphasis on binary code analysis makes it particularly useful in cases where source is unavailable. OllyDbg is a shareware, but you can download and use it for free.

 

OllyDbg is the king of software debugging and cracking. OllyDbg is used mainly and is popular because of its really amazing utility in software debugging and cracking as well. You might have heard of this software allot times.This is BETA 2 version on OllyDbg  2. So it means it may contains some Bugs in it.

 

 

Please read it carefully :

1. OllyDbg 2.0 is rewritten from scratch.
2. No, plug-in are not yet implemented.
3. Yes, they will be implemented again - presumably in v2.02.

 

NOTE : A release will follow soon !

Read More

Httpry : Specialized Packet Sniffer And Logger

Httpry This is a specialized packet sniffer designed for displaying and logging HTTP traffic.
Its a C scripts that actually lets you powerfully organize and Log , sniff etc easily and

is really great in terms of Packet Sniffing.

This script is designed only to capture, parse, and log the traffic. It is not intended to perform analysis.

It can also run as a daemon, or in real time. Running in real time, all the logs will be dumped in the terminal.

When running as a daemon, all the traffic is logged into a separate file. Its good i must say.

 

Download

Read More

John Matherly Launches Shodan : A Computer Search Engine

John Matherly is a Serial webapp developer and entrepreneur and is great in developing cool and very useful programs whether its web based or its a platform based.

Recently John Matherly launched a new service to his website named SHODAN , he says its a web app which lets you search Servers, Routers etc and even computers and other IP addresses and the great thing is it works on the web giving the user the so called portability to the hacker like us.

Its real usability comes with its use, its just like Google in our hacking world.
You can search a computer on a network.

This webapp uses a spider to crawl the WebPages or servers and have many capabilities this can be seen as when you search for any IP address or even server the search shows the crawled pages as the Headers , so you can easily make out this…

Now you would ask how do i use it -
Well its pretty simply.

• Country : 2-letter country code
• Hostname : full or partial host name
• Net : IP range using CIDR notation (ex: 18.7.7.0/24 )
• Port : 21, 22, 23 or 80

For example : get all web (port:80) hosts running 'apache' in Switzerland (country : CH) that also have '.ch' in any of their domain names:

 

Screen Shots

 

 

 

Thanks John Matherly

You can visit his site Here
Follow Him on Twitter

Read More

Angry IP Scanner : Best IP And Port Scanner For Hackers

Angry IP Scanner is the greatest tool ever released for Hackers. Well this tool is used by every hacker in the world for the startup it is the best software available as last in the IP and Port Scanner. 
 
Its the most powerful scanner i have ever used till yet and the most important thing is its really simple to use and comes in handy you can put it in your pen drive and take it anywhere which make a portable and more useful.

You might have heard of this tool many times in many hacking article.
I am personally a big fan of this Angry IP Scanner . Well you should always have it in your bag pack when ever you need to go and hack anything. 

What is Angry IP Scanner?

 
Angry IP Scanner (or simply ipscan) is an open-source and cross-platform network scanner designed to be fast and simple to use. It scans IP addresses and ports…

It is widely used by network administrators and just curious users around the world, including large and small enterprises, banks, and government agencies.

It runs on Linux, Windows, and Mac OS X, possibly supporting other platforms as well.

Screen Shots

 

 

 

 

Download

Download

 

Happy Hacking @hackerthedude

Don't forget to subscribe to our RSS Feeds

Read More

Office Mal Scanner : Scan All Your Documents From Malicious Codes

OfficeMalScanner v0.5 is a Ms Office forensic tool to scan for malicious traces, like shell code heuristics, PE-files or embedded OLE streams.

Found files are being extracted to disk. It supports disassembly and hexview as well as an easy brute force mode to detect encrypted files. Next to this, an office file is being scanned for VB-macro code and if found, it will be extracted for further analysis.

The "inflate" feature extracts Ms Office 2007 documents into a directory and marks potentially malicious files. Also included in this package is a tool called MalHost-Setup, some kind of MS Office runtime emulation environment to debug shell code in malicious documents in real time.

NOTE : IT Only Support MS Office Till Now

 

Download

 

Screen Shots :-

 

 

Happy Hacking @hackerthedude

Read More

Peer Block : Safeguard Yourself From Harmful Server’s

Have you ever heard of a software called Peer Guardian . So do you know what it is actually well here is the guide for you guys.

Peer Guardian is Phoenix Labs’ premier IP blocker for Windows.
Peer Guardian integrates support for multiple lists, list editing, automatic updates, and blocking all of IPv4 (TCP, UDP, ICMP, etc), making it the safest and easiest way to protect your privacy on P2P.

Now that was about the old Peer Guardian; But after sometime the developers of this great software realized they could not take this software more, and after the Norton Antivirus Proved it a virus the developers closed the Peer Guardian. 

Now comes our newly born Peer Block . Now lets see what its developers say about it :-

PeerBlock lets you control who your computer "talks to" on the Internet.

By selecting appropriate lists of "known bad" computers, you can block communication with advertising or spyware oriented servers, computers monitoring your p2p activities, computers which have been "hacked", even entire countries!

They can't get in to your computer, and your computer won't try to send them anything either. And best of all, it's free!

 

Over 100,000 downloads served!

Now seeing that its seems to me a promising software…

Screen Shot’s

 

 

 

Download

 

Download

 

Further Reference

Home Page

FAQ

What IS PeerBlock?

How does it do that?

Peer Guardian

 

Happy Hacking @hackerthedude

Read More

Ophcrack Guide : Hack Any Password In Windows

There might be many times you have heard of Ophcrack, now what is actually it well is a popular to crack passwords in windows.

Many Hackers out there love this tool and you should also, Tools like this made hacking possible in this world of security’s.

What is ophcrack ?

Ophcrack is a free Windows password cracker based on rainbow tables.
It is a very efficient implementation of rainbow tables done by the inventors of the method.
It comes with a Graphical User Interface and runs on multiple platforms....

Ophcrack is an open source (GPL licensed) program that cracks Windows passwords by using LM hashes through rainbow tables.

 

The program includes the ability to import the hashes from a variety of formats, including dumping directly from the SAM files of Windows. It is claimed that these tables can crack 99.9% of alphanumeric passwords of up to 14 characters in usually a few minutes.

*Source Wikipedia

Features:

1. Runs on Windows, Linux/Unix, Mac OS X, ...

2. Cracks LM and NTLM hashes.

3. Free tables available for Windows XP and Vista.

4. Brute-force module for simple passwords.

5. Audit mode and CSV export.

6. Real-time graphs to analyze the passwords.

7. LiveCD available to simplify the cracking.

8. Loads hashes from encrypted SAM recovered from a Windows partition, Vista included.

9. Free and open source software (GPL).

Screenshot

Download

XP free small (380MB)
formerly known as SSTIC04-10k

Success rate: 99.9%
Charset: 0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ

md5sum: 17cfa3fc613e275236c1f23eb241bc86

XP free fast (703MB)
formerly known as SSTIC04-5k

Success rate: 99.9%
Charset: 0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ

md5sum: f6f5536975b57c891ed5f2de702a02bd

XP special (7.5GB)
formerly known as WS-20k

Success rate: 96%
Charset: 0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ !"#$%&'()*+,-./:;<=>?@[\]^_`{|}~ (including the space character)

Happy Hacking @hackerthedude

Read More

Hacking with Sub 7 : Hack Any Computer with Sub 7 Backdoor Full Guide

So, lets talk about one the most famous hacking tool i.e Sub 7.
Well most of you wont be knowing that sub7 is Shutted Down due to its over usage and its mainly usage for Illegal Work.

Sub7, or SubSeven or Sub7Server, is the name of a popular backdoor program.

It is often used for causing mischief, such as hiding the computer cursor, changing
system settings or loading up pornographic websites. However, it can also be used for more serious criminal applications, such as stealing passwords and credit card details. Its name was derived by spelling NetBus backwards ("suBteN") and swapping "ten" with "seven".

Files

1. SubSeven.exe - is the file you open and use to control your server (VICTIM)

2. Server.exe - is the file you send to your victim to control him

3. EditServer.exe - is the file you will use to configure the server you chose to use (edit the server)

4. ICQMAPI.DLL - is not necessary to know about but it lets you use the ICQ functions with the client/server.

 

Screen Shots

 

 

 

 

 

 

History

 

It was originally designed by someone with the handle 'mobman', whose whereabouts are currently unknown. No development has occurred in several years and the website was updated recently announcing a new version coming soon by mobman.

 

Since then Sub7 remained dormant for over 6 years until its return in July 2009, marking 10 years after its original creation in 1999.

 

In July 2009 mobman posted on www.subseven.org which appears to be the official site, that SubSeven has entered another life cycle stage and further development on the project is in the works. The site also announced 2.3 could be the next release, but gives no release date. An IRC server is also given irc.subseven.org which appears to have some of the older crew members from the Sub7Crew back from 1999.

 

Among Sub7's capabilities are complete file system access and real-time keystroke logging. The latter capability makes it possible for Sub7 to be used to steal passwords and credit card information. It also installs itself into the WIN.INI file and the "run" key of the Windows Registry, in addition to adding a "runner" to the Windows Shell.

 

*Source Wikipedia

Download

 

Download

 

Steps :-

How to properly configure a server using Edit Server :

 

1. Click "browse" and find the server.exe file you are going to edit
   (named server.exe in the local directory) then click "Read Current
   Settings"

 

2. StartUp Methods: you basically check one or MORE boxes to choose
   how the server will restart itself everytime the computer is booted.
   key name: the registry key name that will go with the startup method

 

3. Notification Options: Victim Name: the name of your server that
    you want to come up in your ICQ notify, Enable ICQ notify to UIN: is
    the ICQ number you want the notify to go to, Enable IRC notify: will
    send a bot to the IRC server you specify and will notify you of the
    IP, port, password etc. Email notify seldom works, so lets not bover
    with it here..

 

Installation:

 

a.  Check the box and set the port number you want the
     server to start on in the victim's pc, if you want a random port,
     then you click the checkbox underneath that.

 

b. You can set a server 
    password which will protect your victim from others who try to connection.

 

c. You can protect the server port and password, d)and enable a bot
    that logs on whenever your vic connects to the internet.

e.  You can choose your server name that you want the server that's installed in 
     your Windows directory to be named.

f.  Choose to melt the server after
    the install(deletes server after its double clicked but still installs
    into windows directory

g. Configure an Error message to be displayed
    when the server is clicked so as to lead the victim away from thinking
    its a virus ;)

h. Hint: Avoid Using this Binder, use an external one
    instead :) i would recommend Stan's Oblivion Joiner at
    [ http://www.oblivionrat.com ] or Blades "The Joiner".

 

4. Protect server: you can set a password so that if your server is
    found, the person cannot get it into the edit server to find out the

    embedded info inside it

 

5. Now you can either save the settings to the server you opened,
    overwriting the old settings, or you can save a new server with the
    settings you just provided, still retaining the old server as well.

 

6. You can also change the server icon by clicking the button in the
     top right corner :)

 

Features

New Feature: under "Local Options - Advanced" section of the
client theres a button "Test on Local Machine" which runs the server
with special restrictions (accepts localhost connections only)

 

1) Connection:

   A) IP Scanner - Scans for IPs with an open port you specify
   B) Get PC Info - All PC info, including Disk Size, Space, User etc
   C) Get Home Info - Gets all Home Info the vic specifies for their
      Windows Registration ( not always availible)
   D) Server Options - Options pertaining to removing, changing port,
      updating server, etc.
   E) IP Notify - Adds a new notify method or changes the current
      method on the current server

 

2) Keys/Messages:

   A) Keyboard - Open Keylogger, get offline keys, disable keyb. etc
   B) Chat - Chat with the Victim
   C) Matrix - Chat with the vic matrix style (black & green design)
   D) Message Manager - Sends a popup message to the vic
   E) Spy - ICQ, AIM, MSN, YAHOO Instant Messenger Spies
   F) ICQ Takeover - displays all installed UINs on the pc, and u can
      take each one over at the click of a button

 

3) Advanced:

   A) FTP/HTTP - turns the vic into an FTP server, ready for files to
      be downloaded via ur FTP client or browser
   B) Find Files - searches for a specified file type or file in the
      vics pc
   C) Passwords - retrieves Cached, Recorded, RAS, and ICQ/AIM Passes
   D) RegEdit - Opens the vics Registry so u can fuck with it >:)
   E) App Redirect - Lets you run a DOS command on the vic and shows
      you the output
   F) Port Redirect - adds an open port to the vic so you can "bounce"
      from it using the vics host as your own, E.G.: proxy type of
      contraption via IRC

 

4) Miscellaneous:

   A) File Manager - Upload, Download, Run, and do alotta other cool
      shit via this client
   B) Windows Manager - Displays open windows which you can close,
      disable, etc.
   C) Process Manager - Shows all processes you can kill, disable,
      prioritize etc.
   D) Text-2-Speech - Messes with the Text2Speech engine on the vics
      pc, you type, it talks
   E) Clipboard Manager - View, change, empty the vics clipboard
   F) IRC Bot - Connects an IRC bot from the vic to an IRC server of
      choice

 

5) Fun Manager:

   A) Desktop/Webcam - Views Webcam continuous capture, a desktop
      continuous preview and full screen capture
   B) Flip Screen - Flips victims screen upside down, and sideways
   C) Print - Prints on victims screen
   D) Browser - Opens victims browser with the webpage you specify
   E) Resolution - Changes victims pc resolution
   F) Win Colors - Changes the victims computer colors

 

6) Extra Fun:

   A) Screen Saver - Changes the Vics Screensaver
   B) Restart Win - Shuts down, reboots, or logs off the victim
   C) Mouse - Set Mouse trails, reverse buttons, hide curson etc
   D) Sound - Record from vics mic, change volume settings
   E) Time/Date - Changes system time
   F) Extra - A whole buncha extra shit like hide desktop, hide start
      button, hide taskbar, open cd-rom etc.

 

7) Local Options:

   A) Quality - Adjusts the quality of the Webcam/Desktop
   B) Local Folder - Changes the Sub7 Local Folder
   C) Skins - Skin manager for Sub7
   D) Misc Options - Misc shit like toggling animation of windows etc
   E) Advanced - Messes with ports used for some Sub7 Functions Dont
      bother messing around
   F) Run EditServer - Hmm..i wonder what this does...

The END

 

 

   Subscribe

Read More

PW Show : Revel passwords behind the Hashes

Hi guys,
HTD here yeah its been a quite 2-3 days i haven't posted any article but now we have one ;)
Ok so lets go, this article focuses on PW Show V2.1

Well its a great software if you want to revel a passwords which are stored behind the hashes in system memory so you can use it. 

For example when you type "Username”and “Password”in the spaces provided on the login page then they are temporarily stored in the system temp memory which can be used to view the data aka “Password” and use it against the victim.

Screenshot’s

Steps :-

1. Download this   PW Show V2.1
* Password is “htd” [ Without Quotes ].
2. Extract the files and open “pwshow.exe” as shown here.


3. Now you should be able to to view the password using the software.
*remember to read the software notes.

---

Subscibe

Read More