Welcome to the world of hacking. [MEGA THREAD] - Terry A. Davis - Jan 1, 2013
[img]http://imgbin.org/images/10679.PNG[/img]
[img]http://imgbin.org/images/10680.PNG[/img]
- What is a hacker.
- Forms of hacking.
- How to stay safe while hacking.
- How to protect against hackers.
[img]http://imgbin.org/images/10681.png[/img]
White hat.
A white hat hacker breaks security for non-malicious reasons, perhaps to test their own security system or while working for a security company which makes security software. The term "white hat" in Internet slang refers to an ethical hacker. This classification also includes individuals who perform penetration tests and vulnerability assessments within a contractual agreement. The EC-Council, also known as the International Council of Electronic Commerce Consultants, is one of those organisations that have developed certifications, courseware, classes, and online training covering the diverse arena of Ethical Hacking. - Wikipedia
Grey hat.
A grey hat hacker is a combination of a Black Hat and a White Hat Hacker. A Grey Hat Hacker may surf the internet and hack into a computer system for the sole purpose of notifying the administrator that their system has been hacked, for example. Then they may offer to repair their system for a small fee. - Wikipedia
Black hat.
A "black hat" hacker is a hacker who "violates computer security for little reason beyond maliciousness or for personal gain". Black hat hackers form the stereotypical, illegal hacking groups often portrayed in popular culture, and are "the epitome of all that the public fears in a computer criminal". Black hat hackers break into secure networks to destroy data or make the network unusable for those who are authorized to use the network. They choose their targets using a two-pronged process known as the "pre-hacking stage". - Wikipedia
by
+++The Mentor+++
Written January 8, 1986
Another one got caught today, it's all over the papers. "Teenager Arrested in Computer Crime Scandal", "Hacker Arrested after Bank Tampering"...
Damn kids. They're all alike.
But did you, in your three-piece psychology and 1950's technobrain, ever take a look behind the eyes of the hacker? Did you ever wonder what made him tick, what forces shaped him, what may have molded him?
I am a hacker, enter my world...
Mine is a world that begins with school... I'm smarter than most of the other kids, this crap they teach us bores me...
Damn underachiever. They're all alike.
I'm in junior high or high school. I've listened to teachers explain for the fifteenth time how to reduce a fraction. I understand it. "No, Ms. Smith, I didn't show my work. I did it in my head..."
Damn kid. Probably copied it. They're all alike.
I made a discovery today. I found a computer. Wait a second, this is cool. It does what I want it to. If it makes a mistake, it's because I screwed it up. Not because it doesn't like me... Or feels threatened by me.. Or thinks I'm a smart ass.. Or doesn't like teaching and shouldn't be here...
Damn kid. All he does is play games. They're all alike.
And then it happened... a door opened to a world... rushing through the phone line like heroin through an addict's veins, an electronic pulse is sent out, a refuge from the day-to-day incompetencies is sought... a board is found. "This is it... this is where I belong..." I know everyone here... even if I've never met them, never talked to them, may never hear from them again... I know you all...
Damn kid. Tying up the phone line again. They're all alike...
You bet your ass we're all alike... we've been spoon-fed baby food at school when we hungered for steak... the bits of meat that you did let slip through were pre-chewed and tasteless. We've been dominated by sadists, or ignored by the apathetic. The few that had something to teach found us willing pupils, but those few are like drops of water in the desert.
This is our world now... the world of the electron and the switch, the beauty of the baud. We make use of a service already existing without paying for what could be dirt-cheap if it wasn't run by profiteering gluttons, and you call us criminals. We explore... and you call us criminals. We seek after knowledge... and you call us criminals. We exist without skin color, without nationality, without religious bias... and you call us criminals. You build atomic bombs, you wage wars, you murder, cheat, and lie to us and try to make us believe it's for our own good, yet we're the criminals.
Yes, I am a criminal. My crime is that of curiosity. My crime is that of judging people by what they say and think, not what they look like. My crime is that of outsmarting you, something that you will never forgive me for.
I am a hacker, and this is my manifesto. You may stop this individual, but you can't stop us all... after all, we're all alike. - The Hacker Manifesto
* - Terry A. Davis - Jan 1, 2013
[img]http://imgbin.org/images/10683.png[/img]
There are many types of hacking, I will try to cover all of the ones I know as well as some guides for them.
Remote Administration Tools.
A remote administration tool (RAT) is a malware program that includes a back door for administrative control over the target computer. RATs are usually downloaded invisibly with a user-requested program -- such as a game -- or sent as an email attachment. Once the host system is compromised, the intruder may use it to distribute RATs to other vulnerable computers and establish a botnet. - What is a RAT
SQL Injection
SQL injection is a technique often used to attack a website. This is done by including portions of SQL statements in a web form entry field in an attempt to get the website to pass a newly formed rogue SQL command to the database (e.g., dump the database contents to the attacker). SQL injection is a code injection technique that exploits a security vulnerability in a website's software. The vulnerability happens when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and unexpectedly executed. SQL commands are thus injected from the web form into the database of an application (like queries) to change the database content or dump the database information like credit card or passwords to the attacker. SQL injection is mostly known as an attack vector for websites but can be used to attack any type of SQL database. - What is SQL Injection
DNN
DotNetNuke is a web content management system based on Microsoft .NET. The Community Edition is open source.
DotNetNuke was written in VB.NET, though the developer has shifted to C# since version 6.0. It is distributed under both a Community Edition MIT license and commercial proprietary licenses as the Professional and Enterprise Editions. - What is DNN
XSS Injection
Cross-site scripting (XSS) is a type of computer security vulnerability typically found in Web applications. Due to breaches of browser security, XSS enables attackers to inject client-side script into Web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same origin policy. Cross-site scripting carried out on websites accounted for roughly 84% of all security vulnerabilities documented by Symantec as of 2007. Their effect may range from a petty nuisance to a significant security risk, depending on the sensitivity of the data handled by the vulnerable site and the nature of any security mitigation implemented by the site's owner. - What is XSS Injection
RFI Injection
Remote File Inclusion (RFI) is a type of vulnerability most often found on websites. It allows an attacker to include a remote file, usually through a script on the web server. The vulnerability occurs due to the use of user-supplied input without proper validation. This can lead to something as minimal as outputting the contents of the file, but depending on the severity, to list a few it can lead to:- Code execution on the web server
- Code execution on the client-side such as JavaScript which can lead to other attacks such as cross site scripting (XSS).
- Denial of Service (DoS)
- Data Theft/Manipulation
- What is RFI Injection
LFI Injection
Local File Inclusion (also known as LFI) is the process of including files on a server through the web browser. This vulnerability occurs when a page include is not properly sanitized, and allows directory traversal characters to be injected.
[/list]- What is LFI Injection
* - Terry A. Davis - Jan 1, 2013
[img]http://imgbin.org/images/10684.png[/img]
Remote Administration Tools.
[ - HOT - ] DarkComet Features & How To Use Them [ - HOT - ]
[TuT] DarkComet v5.3 Setup - Step by Step - Pictures - Alternate Link [N00B Friendly]
How to setup DarkComet 5.3.1 [PICS] [NOOB FRIENDLY]
[TuT]How To Setup DarkComet RAT 5.3.1 ||Portforwarding & With Pictures[TuT]
?? [TUT]HOW TO SET UP DARKCOMET N00B FIENDLY ! + Port Forward [PICS] ??
[TUT]How to setup Cybergate RAT (download link included)[TUT]
// [ HOWTO SETUP A RAT VIA CYBERGATE ] // [ TUTORIAL IS PICTURE GUIDED ] //
// [ HOW TO SETUP A RAT VIA CYBERGATE ] // [ TUTORIAL IS PICTURE GUIDED ] //
[TuT] How To Setup Cybergate RAT 1.07.5 - Port Forward - Noob Friendly -UPDATE28thFeb
Blackshades NET -Complete Tutorial[Port Forward->Setup->Connect]{Special Features}(Pics)
[Tutorial] Setting up BlackShades 4.8 [Detailed] [Pictures] [Stable]
|Never Seen This Before In HF| How To Setup BlackshadeS R.A.T, PF, No-IP And More!!!!
How To Setup BlackShades NET 4.2 | No-IP | Portforward | Noob Friendly | Pictures
Blackshades NET -Complete Tutorial[Port Forward->Setup->Connect]{Special Features}(Pics)
|Never Seen This Before In HF| How To Setup BlackshadeS R.A.T, PF, No-IP And More!!!!
[Tutorial] How to setup Blackshades Stealth [RAT]
Tips 'n tricks:
Where to upload and scan the files
Tips 'n tricks about rats
Spreading:
Spreading over AIM
Spreading over Omegle
Spreading over YouTube
Spreading via Torrent
Good way to E-Whore/spread your malware
Java Drive By:
?Most Detailed Java Drive-by Hosting TuT?
How To Make Java Drive By Applet (Video)
Java drive-by [Tutorial]
Java Drive By [TUT]
How To Clone Any Site and Turn It Into A Java Drive By [.jar included]
Silent Java Drive By [TuT]
[TuT]FUD Java Drive-By. Noob friendly.
Setting up a FUD Java Driveby on a Free webhost[Easy][PICTURES][TUT]
Website hacking.
SQL Poizon exploit searcher
How to find SQL vulns like a pro
Dead Simple SQL Injection Tutorial (With Havij)
SQL Injection Tutorial For Beginners
Attacking servers using SQL Injection [/TUT][IN-DEPTH]
[TUT] SQL injection [TUT]
SQL TUTORIAL
DNN(DotNetNuke) attack+shell uploading
Exploiting DotNetNuke Vulnerabilities
Tutorial on how to use the DNN exploit[Injector]
Hacking a Website with Dot Net Nuke exploit (DNN)
DNN (So noobish is burns)
How to Hack Website vulnerable to DNN [new]
[Tutorial] DNN (DotNetNuke) Hacking
NEWB XSS TUTORIAL
Full Ultimate XSS Tutorial
[TuT] XSS Track-How to Quietly track a whole website through Single XSS
XSS Keylogger [Keylog from a website!]
XSS (Cross Site Scripting) Tutorial
[TUT] Cross-Site Scripting [TUT]
ADVANCED CROSS SITE SCRIPTING
[TUT]XSS - cross site scripting[TUT]
Cross Site Scripting(XSS) Complete Tutorial for Beginners
?[TUT] XSS (Cross Site Scripting) [TUT] (NOOB FRIENDLY)?
XSS Attacks: Cross Site Scripting Exploits and Defense
[HD Video] LFI and Deface through RFI by 1nj3cth4x
[TUT] How to hack and shell a website using LFI proc/self/environ [TUT]
[TUT] AUTOMATED LFI/RFI SCANNING & EXPLOITING WITH FIMAP [TUT]
[Tutorial] Exploiting Sites Using LFI [Tutorial]'
[TuT] LFI Exploitation via /proc/self/environ [TuT]
Server Flaws!!!.(XSS)(LFI)(RFI) And many more attacks
[TUT] LFI to Shell [TUT]
>>Descriptive LFI & FPD tutorial for beginners<<
[TUT]RFI/LFI (Remote/Local File Include)
* - Terry A. Davis - Jan 1, 2013
[img]http://imgbin.org/images/10947.PNG[/img]
How To Stay Safe While Hacking (sorry about the small image)
The most productive way to stay safe while hacking is simple, don't hack to start with. Another way to put this is, don't do the crime if you can't handle the crime.
The first most simple way would be to get a VPN
Cuber Ghost VPN
Proxpn
Nvpn
Of course there are free ones, but most if not all of them keep logs so if you do something illegal it can be tracked back to you and cause you to be caught, if you get a paid one that doesn't keep logs it can be that much harder for people to track you down. There is also another program called TOR now there is a lot of suspicion going around that not all TOR nodes are "safe" this is true, some of them can be monitored by the FBI as if you want to look up some major illegal shit they might make it so you have to go though there node to get to that site, but other than know someone went to that site they have no way to trace it back though to you no matter what you have done. There are also other ways you can protect yourself when hacking like making a virtual machine like in VMWare or Virtual Box here are some setup guides for each of them; VMware virtual box This is a good way to protect your self since it would be easier to destroy a VM (virtual machine) than it is to destroy a normal machine since you would just need to run ccleaner's wipe free space in the VM since the hard-drive would be 5-10gb considering how many hacking tools you want on the VM here is a ccleaner guide one of the other ways you would protect your self from being caught would be to encrypt your hard-drive with truecrypt (here) since you can create a container to store all your hacks or encrypt your whole harddrive, this would be one of the best ways to make your self safe.
Now there isn't much I can teach about staying safe since you mostly learn from your mistakes but make sure you don't make any mistakes that will land you with the blackhat award and a nice cell in prison since we are all doing this to learn.
A few general hints would be;
1: Stay clear of .GOVT sites when hacking.
2: Don't go near school hacking.
3: Try not to hack someone that knows how to hack back.
4: Don't brag about hacking something or you will get caught faster.
5: Make sure you use some protection to stop you from getting caught.
Also some other general hints and stuff on VPN's and TOR.
Don't use your own wi-fi go to an internet cafe or something just act normal and do it, this further reduces the chance of them finding out it was you. Don't also go around saying your hacking alias is "Perfect Cell" then go hack a website and leave the message "Perfect Cell was here" since this would just be stupid and you would be tracked, fast.
Now on to the last half. How to protect against hackers.
* - Terry A. Davis - Jan 1, 2013
[img]http://imgbin.org/images/10948.png[/img]
How To Protect Against Hackers.
I was talking to Vandal on Skype and his advice to protect against hackers is to hide in a bubble.. Dude, after a week of masturbating it would be like a snow globe. That is just gross..
But on topic to protect against hackers you will need to have a good firewall like Comodo, here is a very good guide by a friend of mine Skidzo here.
With a good firewall you can look at all out going connections, so if you get ratted you can easily see the process name and the external address thus cutting it off by blocking it from accessing what it needs to access then from there you can remove it.
The best way to protect against hackers is to have a very good anti virus here are some good free ones
MSE
AVG
Avast
Avira
MalwareBytes
I like MSE since it small unnoticeable but yet has a pretty good detection rate since it is made by Microsoft so they know what is best for there OS. I use ESET the only draw back is it seems to take for ever to scan, I have never used AVG or Avast but I have heard they are great.
Another way to test for viruses it would be best to run a program in sandboxie here is a guide on how to set it up, this is one of the best ways unless the virus has anti-sandbox then you will need to run it in a VM. Sometimes crypters even come with anti-VM if it doesn't run in sandbox or VM Don't run it as it is most likely a virus.
Some general ways to stay safe are keep all your programs are updated so you have all the exploits patched, and if you are downloading some software make sure the MD5 is the same as the original one so you don't get infected by it this is the best way to test for viruses.
I think I should start to wind down now as this has taken me 7 hours to type so I am getting very tired. But before I do, I will say hackers are crafty people no matter what software you have protecting you, you can still be infected the only way to be %100 safe is to not connect to the internet.
🤝 Thanks for reading.
* - Vandal - Jan 1, 2013
Great guide as always PC, you know your shit and prove it once again :D
(Jan 1, 2013 01:13 AM)Perfect Cell Wrote:
I was talking to Vandal on Skype and his advice to protect against hackers is to hide in a bubble.. Dude, after a week of masturbating it would be like a snow globe. That is just gross..
Been in a bubble since '08, no hex for me except for that one two weeks ago. Bubble had a hole, not my fault.
- Vandal
* - Terry A. Davis - Jan 1, 2013
(Jan 1, 2013 01:15 AM)Vandal Wrote: Great guide as always PC, you know your shit and prove it once again :D
Been in a bubble since '08, no hex for me except for that one two weeks ago. Bubble had a hole, not my fault.
- Vandal
So your drowning in your own sperm, I will tell the coroner that
* - teonanacalt - Jan 1, 2013
Thanks for this information,Perfect Cell!
Keep on...nice share.
* - Terry A. Davis - Jan 1, 2013
(Jan 1, 2013 01:21 AM)teonanacalt Wrote: Thanks for this information,Perfect Cell!
Keep on...nice share.
🤗 I was hoping people would read it, thanks.
* - Reνolution - Jan 1, 2013
This is a great thread, should help out so many people here, as this guide I can see answering like 50% of the questions I commonly see lol.
Great job!
* - Terry A. Davis - Jan 1, 2013
(Jan 1, 2013 01:58 AM)Revоlutiоn Wrote: This is a great thread, should help out so many people here, as this guide I can see answering like 50% of the questions I commonly see lol.
Great job!
Thanks for the feedback, I hope newbs read it
* - Arbitrage - Jan 1, 2013
Great guide Perfect Cell, I recommend that anyone who's just starting out should read this! <3
* - Terry A. Davis - Jan 1, 2013
(Jan 1, 2013 06:24 AM)Senovit Wrote: Great guide Perfect Cell, I recommend that anyone who's just starting out should read this! <3
👍 Thanks man, I hope you link it round so more people can see it.
* - yacked2 - Jan 1, 2013
You describe only Black hat stuffs...where's anything about fixing comp problems, deinfection, sandbox ?
* - worldofkonka - Jan 1, 2013
This thread is purely amazing. It's amazingness is unfathomable. ay-may-zing.
|
