NSA supporting hacking... that's new =)
[Notorious] Beginner's Hacking Helpdesk |
 
Hi this is a great thread thanks. So i'm still a noob and have a cryptography question. Bought a crypter (which I won't mention publicly in case undue negative image is given) it seems decent as before I was using free ones or using other crappy cheap methods like winrar and iexpress etc. I realise that purchasing an up to date crypter is the way to go if you not good enough to program your own lol. I just seem to be having a problem getting runtime fud, testing it on another computer. I remember seeing somewhere that some crypters struggle getting runtime on AVG for eg. I have been advised on this forum about some other good crypters, which might just be the problem, but before blaming the crypter are there things I might be overlooking that would cause detections like which options would be best to use/not use e.g. the delayed execution might be recommended say for longer period? self injection? I'm also not so clued up on the other obfuscation and clone assembly options, also if the binding and quality of icon change could be causing detections. Just looking for a clearer understanding of the crypting process. Oh this is for RAT tool (njrat), thought I would ask for input from this thread, thanks a lot.
(Oct 30, 2016 02:51 PM)jjjjj100 Wrote: Hi this is a great thread thanks. So i'm still a noob and have a cryptography question. Bought a crypter (which I won't mention publicly in case undue negative image is given) it seems decent as before I was using free ones or using other crappy cheap methods like winrar and iexpress etc. I realise that purchasing an up to date crypter is the way to go if you not good enough to program your own lol. I just seem to be having a problem getting runtime fud, testing it on another computer. I remember seeing somewhere that some crypters struggle getting runtime on AVG for eg. I have been advised on this forum about some other good crypters, which might just be the problem, but before blaming the crypter are there things I might be overlooking that would cause detections like which options would be best to use/not use e.g. the delayed execution might be recommended say for longer period? self injection? I'm also not so clued up on the other obfuscation and clone assembly options, also if the binding and quality of icon change could be causing detections. Just looking for a clearer understanding of the crypting process. Oh this is for RAT tool (njrat), thought I would ask for input from this thread, thanks a lot. Woah that's kinda all over the place. Well, anyway most crypters are only scantime FUD, unless specified in the thread you bought it from says it's also runtime FUD. But also njRat is just a really old and outdated RAT which is detected by just about everything, so it could be that antiviruses are detecting it because of that. There are some other free RATs you can have a look at though. Darktrack is around, but honestly be wary with them, something sketchy went down with them a bit over a month ago so don't get Blackshades'd. Yes, icon can actually cause a detection. Always make sure you add a really good high resolution one to try and get past these. 512x512 seems to do the trick most of the time. I honestly don't really know why having a shit quality icon causes detections, but at the same time I don't really care if it's easily bypassable. As for options to use for your RAT/crypter, well I don't know what crypter you're using so I can't really help you there, but sometimes delayed execution can work get past AVs or make it look like some other program is causing the detection so people would add an exception or something. Uhh, file melt should be good too, along with your standard persistence and all that etc. Maybe if you PM me I can help you out a little more idk. But if you're still having trouble with it, my homie AsdethPrime is gonna be making a tutorial soon about using Meterpreter as a Remote Access Tool and using Veil Evasion to get past most if not all antiviruses. And best part of all that it's gonna be 100% free. Might wanna check in every now and then and maybe it'll be up within the next few days.
humble rubyist in a world of pythonistas
Thanks Faith, (yes in retrospect my post is all over the place and not coherent, it was every late for me lol :))
I will maybe pm you later and look forward to see asdethprime's tut as I've heard good things about meterpreter and veil invasion. What you say makes sense with the old rat etc. thanks for your input. (Oct 31, 2016 01:09 AM)Marvelious Wrote: This is very good one for beginners thanks man (Oct 31, 2016 02:17 AM)︻デ┳═ー Wrote: Great thread! Thanks a lot for putting your time into this I appreciate the kind words guys!
humble rubyist in a world of pythonistas
(Oct 31, 2016 08:16 AM)Agressive Wrote: Please I want to become a very good hacker.please where do I start from. I need help Just one thing i want to ask first to you .Before asking first tell what you know yet.What things in hacking you want to learn. Your goal Also learn to use Google Now you will get many suggestions from experts Thanks (Oct 31, 2016 07:35 AM)Aakash_Choudhary Wrote: I Want to do learn mobile pentesting.Please give free resources to learn and to build mobile pentesting lab in my laptop Hmm, mobile pentesting eh? Well of course it's divided into some groups as well. We all know (hopefully) that meterpreter can run on Android and that Android is a relatively unsecure operating system. So that's basically your run-of-the-mill system exploitation penetration testing, and it's pretty simple and standard to most. There are hundreds of guides on how to do it as well. Now, for harder stuff, you can get into building your own little "cellphone tower" that phones will automatically connect to if they're on data. This is a little trickier and you can't really do it on your laptop as you will need to build it yourself and carry around all the equipment. Lots of government agencies and even police have been using devices called a Stingray which can basically pick up on all that unencrypted cell traffic and read it, from phone calls to text messages to just normal data. They cost upwards of $15,000 to even $100,000 but you don't really need that much money to build one yourself, you can do it for maybe a few hundred. Have a look here. http://hackaday.com/2016/04/08/build-you...nd-profit/
humble rubyist in a world of pythonistas
(Nov 1, 2016 02:04 AM)shtajiryan Wrote: Let's say I study at a university, let's say I am scanning the network and getting a shitload of open ports on a shitload of PCs (almost 50 on each sub IP group). How do I narrow my results? I get lost at that point. Well if you're asking if there's a way to narrow it down all the way to just one PC, there really isn't a surefire way, but there are some steps you can take to try. First of all you need to know two things about your target computer before you even begin. First of all the OS and second any services it could potentially be running. So when using nmap to scan (which I'm assuming you were) then launch it with the -o option to do an OS scan and it'll tell you what OS the target IP is likely using. It's not quite 100% but generally it gets close, like in the 90s. As for service scanning, assuming your target is a Windows machine (and not Linux like me or a Mac like 50% of uni students) and you're on the same network like you mentioned, there are some CMD commands you can use to get a list of processes and services like "tasklist" however it's not the best as you do need authentication. Try nmap again but this time with the service scanning option, -sV (which is also version detection) to get more accurate results. Just information gathering on the targets is all you can really do until you finally figure out which one is your target, or just infect all of them (MITM the network and get everyone to download your payload from connecting to facebook,) and see which one is your target.
humble rubyist in a world of pythonistas
|
|
|
