Answers to All Common Questions - FractumSeraph - Dec 19, 2014
Answers to Common Questions
I've been stalking the Beginner Hacking section for a few days, and I've been keeping track of all the common threads being posted. I've seen countless threads that all ask the exact same questions, so here are some answers.
Sure if you ask, someone will probably boot someone offline for a small amount of time, but I would highly recommend learning more about DoS attacks and how to do them yourself.
First, you're going to need some places to hold everything, somewhere to control the botnet from. A Command and Control center.
You could use something like DarkComet for this, but those type of RATs are not good for this. They can't handle many connections, and for a decent sized botnet, you're going to need to be able to handle plenty of them. There are IRC based botnets, Skype botnets, botnets that use TOR, many many kinds. But for this example I'll demonstrate an HTTP based botnet.
Once you have one, you're going to need somewhere to host it. Somewhere that stuff can connect to it. You need to buy a web hosting service, the higher bandwidth the better. Be careful because this is against the terms and conditions of most hosts, and the WILL terminate your account and you will lose everything.
Once we have a host, you need to install your botnet. Most of them come with instructions, and it usually involves uploading the botnet, changing a few settings, and installing a database. Once it is set up and you can log in, you need to build the part you'll be spreading around.
Depending on which botnet you choose, you're either going to be given a bin already build, and you just need to crypt it and spread it, or you may have to use a builder and edit your settings manually. Either way, you're going to end up with an executable file. Whenever someone runs this file, they will be added to your botnet.
There are lots of doxing services here, but as always, I would recommend learning how to do them yourself, as it's often very useful. Here are a few resources you might want to look at:
https://pipl.com/
https://www.peekyou.com/
https://www.whoeasy.com/
https://www.zabasearch.com
https://www.spokeo.com/
There are lots of ways to find out someones IP address, but it's always easier if you talk to them regularly.
If you are using something like Skype video, or some sort of game that directly connects with them, for example you're hosting a Minecraft server and they join it, you can use the netstat ( netstat -nb ) command to show all your active connections to the internet. (Run Command Prompt as admin, the type netstat -nb and press enter.)An easier away, is to get them to click on a link using this service, and you will be given their IP address.
https://whatstheirip.com/
Let me start off by saying that there is no "Magic Hack" for these services, bruteforcing techniques usually don't even work because of how noticeable they are. If you want to get into an account, your best bet is to use a Keylogger, or RAT. I won't type out the information on how to make one of these, but basically you need to send one of these to the owner, and hope the owner opens it.
Check the link in my signature for more information about setting up RATs and Keyloggers.
Don't do this without permission, it will end badly if you do.
Now, assuming you have permission. The easiest way to do this would be to infect a staff member. If you can find a working word, or pdf exploit, that would be a major help.
Another useful way (depending on how the computer/internet use at your school is set up) would be to try to bruteforce the router.
If you need more access on your computer, (most schools have the computers locked down pretty tight) I would recommend using a live cd to get command line access. Puppy linux works great for this.
https://4sysops.com/archives/forgot-the-administrator-password-the-sticky-keys-trick/
The copy and paste answer to this question is to use a VPN, but that's not all there is to it. It really depends what you're hiding from.
Having a VPN is probably the most important aspect here, just remember that they aren't perfect. What happens if your VPN suddenly disconnects as you're browsing? What happens if a program you are using decideds to use your normal conection instead of being tunneled through your VPN?
Another thing you should think of is this: How Doxable are you?
Try to Dox yourself and see how far you get, then go back to all the places you found information about yourself and try to cover up your information.
If you need help, please dial 9-1-1.
[color=#808000]RAT Setup:
There are lots of tutorials showing how to setup different RATs, I have a few on th thread in my signature. You might also want to look at the RATs sales page if it has one, or do a search in the RAT section.
PortForwarding:
If you are having trouble port forwarding, I would recommend this website: http://portforward.com/
Not Getting Connections:
Make sure your RAT is crypted, and undetectable. Perhaps nobody has downloaded your file, sometimes it may take a while. Also make sure your RAT has been set up properly, and your ports are open. You may also want to test your RAT in a Virtual Machine if you know how.
I often take a few members and teach them everything I know, I'm sure other members do this as well. But remember that people ask this all the time, for no reason. The best way to learn is by yourself. Everything I have learned has been completely through online tutorials and such. Information is everywhere, if you think it's too hard, or you're too lazy, that's you're own fault.
I don't know of any ways to trace a cellphone only by knowing the phone number, I'm sure only law enforcement could do that. If it is an android phone you can often find spying apps to install on the phone, but most of these are malware, so be careful. If it is an iPhone with iOS 8 or above, you could use iMessages "Share My Location" feature. If it is jailbroken, you can search on Cydia for spy apps, however you will have to pay for them.
Not much.
While there is an almost impossible chance you could find an exploit and find a way in, don't count on it. Everything connected to the internet usually is behind a bunch of other stuff. For example:
When you get home and your phone connects to the WiFi, its usually connecting to a wireless router. This router is then connected to a modem. The modem finally sends that data out of your house.
Odds are, your modem has a firewall that blocks common exploits. If it doesn't block something, then it's your routers turn to block it. If it makes it past the router, it still has to get past your devices security. The chances of this happening are very slim from outside the network.
What you can do however, is a DoS or DDoS attack.
A DoS attack is when you send a large amount of data to an IP address. If you send enough data, the IP address can't handle the huge amount of data coming to it at once, so it shuts down. The problem here is that if the IP you are attacking has a better connection than you, the attack will fail, and it will probably backfire. That's where DDoS attacks come in.
DDoS attacks are essentially the same thing, except with a large amount of computers attacking the IP at the same time. In simple terms, if you have two computers attacking, that's twice the connection, so you have a better chance of succeeding.
My other notable threads:
My Video Tutorials
Beginner Hack Pack
* - Mr_Anonymous - Dec 19, 2014
really nice thread man good job 😁 if you ever feel like teaching members im willing to learn 😁
you might want to read the last bit again though you made a mistake
* - SysAdmin - Dec 19, 2014
Nice thread, the unfortunate thing is that this will go down the drain with all other similiar threads. It's just the way this board works. As soon as people stop replying, new topics stockpile and this goes down to 2,3,4th page etc...
* - Korosensei - Dec 19, 2014
Nice job, this will be helpful for newer people.
* - Antonio Vivaldi - Dec 19, 2014
Good job, basically sums up everything for beginners :) Keep it up plez ...
* - Absolute Greatest - Dec 19, 2014
Thank god someone finally made this post. 99% of posts in this section ask these simple questions.
* - FractumSeraph - Dec 19, 2014
I'll try to keep updating it. I made the post at 3am, so I left out a lot. If you know of anything I should add please let me know.
(Dec 19, 2014 04:56 AM)Mr_Anonymous Wrote: you might want to read the last bit again though you made a mistake
Thanks for letting me know, fixed it.
* - Lexica - Dec 19, 2014
You should add a "How do I build a botnet?" to that list, this is awesome and I think it should be stickied so new comers read it.
* - Optimized - Dec 19, 2014
Great thread man, Rate it 10/10! Only bad thing is, unless this gets stickied, these questions will still come up daily in this section.
* - Nyan Kat - Dec 19, 2014
Nice thread bro,i Rate it 10/10! This should be pinned it's really HQ.
* - Mr_Anonymous - Dec 19, 2014
i hope this thread manages to keep going because this is pretty useful for beginners
* - skelly76 - Dec 19, 2014
(Dec 19, 2014 01:10 AM)Fallen Archangel Wrote: Dos attacks work like this:
A bunch of different computers all send tons of data at an IP address. The IP address can't handle the huge amount of data comming to it at once, so it shuts down. The problem here is that you have to have lots of different connections sending data to the IP at the same time.[/color]
[/sp][/color]
Incorrect. Either it's a spelling mistake or you don't know. This is the beginner section but I thought someone would catch it by now.
Just for the OP's knowledge,
DoS: Denial of Service
DDoS: Distributed Denial of Service
DoS is packets sent from one source/computer.
DDoS is packets sent from multiple sources.
This is how you DoS (L33t Haxors only): http://validni.blogspot.co.uk/2011/05/how-to-send-dos-attack-with-cmd-ping-of.html
DDoS attacks are through a botnet/multiple computers or it's sent from multiple servers as seen in stressers.
Your definition is for the exact opposite method. Edit before all the beginners get the wrong information!
* - FractumSeraph - Dec 19, 2014
(Dec 19, 2014 01:48 PM)๖ۣۜVariful Wrote: Just for the OP's knowledge,
DoS: Denial of Service
DDoS: Distributed Denial of Service
Thanks, I've updated the thread.
I'll go back and specify the differences of the two when I get home, as well as add information on botnets.
* - skelly76 - Dec 19, 2014
(Dec 19, 2014 01:10 AM)Fallen Archangel Wrote: Your only other option is a DoS attack, which does nothing except kick them off the internet.
This is contradicting itself, reword it ;). I don't see anything else wrong with the thread in terms of information.
* - FractumSeraph - Dec 19, 2014
(Dec 19, 2014 10:59 AM)FallenWith Wrote: You should add a "How do I build a botnet?" to that list, this is awesome and I think it should be stickied so new comers read it.
Added! I may go back and add links to a few botnets, since goggling "HTTP botnet" comes up with a bunch of clutter.
|
