Jun 23, 2019 09:34 PM
(This post was last modified: Aug 6, 2019 06:16 AM by Mr. Robot.)
It's pretty basic shit but so many people at even medium size companies are vulnerable to this kind of attack.
>> This thread is less of a tutorial on each method/attack type. It's a demonstration of how techniques can be used to achieve a goal.
Hacking someone you don't like or into a company.
Some questions to ask yourself before you start:
1) Do you want to physically break in? This is an option if you want to learn to lockpick. If not don't stress.
2) Do you drive? This is one of the best options if you have a car due to being able to leave it for a few hours near their house. As long as they don't know what car is yours.
3) Do you know where they live? If not, you might want to dox them, look up their last name in a phone book - or buy a throwaway phone with gps - ($20 or so) - tape it to the bottom of their car and track it all the way back to their house. Collect it at a later time if you can.
![[Image: LRWJmUu.jpg]](https://i.imgur.com/LRWJmUu.jpg)
Just use a second hand old one. It'll cost you like $20 if you need to, just hit up facebook selling groups.
![[Image: FXUx8Vh.png]](https://i.imgur.com/FXUx8Vh.png)
If it has WPS, it's basically guaranteed you'll gain access. We'll focus only on these for now and if the employee doesn't have it - it's definitely worth your time trying to find another employee if you can quickly to check them too as cracking WPA2 without WPS isn't guaranteed.
Now you have your target.
Hack their WiFi really easily by typing in a few commands and leaving your laptop to run. If you have a rasperry pi with a battery pack - drop it in a plastic container and leave it near their house, otherwise drop your car off near their house and set your laptop settings to run while lid is closed. Close your lid and put it under the seat or somewhere more secure so the light doesn't flash - Or just simply sit with it and wait the 8 or so hours...
Now you have access to their WiFi - YAY! With WPS if you have the 8 digit pin, most routers wont change that pin so when they change their WiFi password/if they change it - you can rerun the attack (reaver) adding in the pin you already know to instantly get their new password.
From here we can do a MiTM attack and watch for images/passwords/usernames/emails over http or even infect their computer.
5 main ways I use to infect their computer.
1. Use a MiTM attack to inject a <script> that auto downloads a file on every page they visit. Eventually they might click it and run it if you make it something like routerupdate.exe or once you are on their network find what router they use (192.168.1.1/192.168.1.254/192.168.20.1/192.168.0.1) usually or check yourself and see.
Once you know what router it is, you can forge your file name to look like that. Even calling it the WiFi network name could work such as thompsonebc9.exe
![[Image: kPiVT51.png]](https://i.imgur.com/kPiVT51.png)
2. Replace all the files they download with your executable - easiest way to do this is just to use zANTI on an android phone that supports it/rooted.
![[Image: 2hY0JHR.jpg]](https://i.imgur.com/2hY0JHR.jpg)
3. Redirect all traffic to a cloned version of their router page and make it look like they are having internet issues. They will try download the file to quickly run it to fix their outage issues.
4. Find a vulnerability on their computer through say SMB service or other depending on their OS and updates.
![[Image: LRsxU3a.jpg]](https://i.imgur.com/LRsxU3a.jpg)
5. You might be able to use something like psexec to move the file and execute it on their machine without them knowing.
![[Image: 0F84Auc.jpg]](https://i.imgur.com/0F84Auc.jpg)
Alright now you have access - start fucking around.
From here you can do a lot of shit, use their infected machine to gain access to their work material or even recover shit like their WiFi passwords for work networks. So much you can do.
<< Last note. If you can't target them directly - if they have kids, push packets to them. Customize attacks towards them and gain access that way.
btw if you play runescape for example (not that I condone it) - you can join the facebook page for the official game and find out where they live if they live near you (people who post frequently) - then go their house, hack them and take all their in game GP. = profit.
Same with shit like bitcoin or whatever else you wanna do.
Again, not that I condone this sort of behavior - it's just an example so you understand how fucked the security is.[/align]
>> This thread is less of a tutorial on each method/attack type. It's a demonstration of how techniques can be used to achieve a goal.
Hacking someone you don't like or into a company.
Some questions to ask yourself before you start:
1) Do you want to physically break in? This is an option if you want to learn to lockpick. If not don't stress.
2) Do you drive? This is one of the best options if you have a car due to being able to leave it for a few hours near their house. As long as they don't know what car is yours.
3) Do you know where they live? If not, you might want to dox them, look up their last name in a phone book - or buy a throwaway phone with gps - ($20 or so) - tape it to the bottom of their car and track it all the way back to their house. Collect it at a later time if you can.
Just use a second hand old one. It'll cost you like $20 if you need to, just hit up facebook selling groups.
If it has WPS, it's basically guaranteed you'll gain access. We'll focus only on these for now and if the employee doesn't have it - it's definitely worth your time trying to find another employee if you can quickly to check them too as cracking WPA2 without WPS isn't guaranteed.
Now you have your target.
Hack their WiFi really easily by typing in a few commands and leaving your laptop to run. If you have a rasperry pi with a battery pack - drop it in a plastic container and leave it near their house, otherwise drop your car off near their house and set your laptop settings to run while lid is closed. Close your lid and put it under the seat or somewhere more secure so the light doesn't flash - Or just simply sit with it and wait the 8 or so hours...
Now you have access to their WiFi - YAY! With WPS if you have the 8 digit pin, most routers wont change that pin so when they change their WiFi password/if they change it - you can rerun the attack (reaver) adding in the pin you already know to instantly get their new password.
From here we can do a MiTM attack and watch for images/passwords/usernames/emails over http or even infect their computer.
5 main ways I use to infect their computer.
1. Use a MiTM attack to inject a <script> that auto downloads a file on every page they visit. Eventually they might click it and run it if you make it something like routerupdate.exe or once you are on their network find what router they use (192.168.1.1/192.168.1.254/192.168.20.1/192.168.0.1) usually or check yourself and see.
Once you know what router it is, you can forge your file name to look like that. Even calling it the WiFi network name could work such as thompsonebc9.exe
2. Replace all the files they download with your executable - easiest way to do this is just to use zANTI on an android phone that supports it/rooted.
3. Redirect all traffic to a cloned version of their router page and make it look like they are having internet issues. They will try download the file to quickly run it to fix their outage issues.
4. Find a vulnerability on their computer through say SMB service or other depending on their OS and updates.
5. You might be able to use something like psexec to move the file and execute it on their machine without them knowing.
Alright now you have access - start fucking around.
From here you can do a lot of shit, use their infected machine to gain access to their work material or even recover shit like their WiFi passwords for work networks. So much you can do.
<< Last note. If you can't target them directly - if they have kids, push packets to them. Customize attacks towards them and gain access that way.
btw if you play runescape for example (not that I condone it) - you can join the facebook page for the official game and find out where they live if they live near you (people who post frequently) - then go their house, hack them and take all their in game GP. = profit.
Same with shit like bitcoin or whatever else you wanna do.
Again, not that I condone this sort of behavior - it's just an example so you understand how fucked the security is.[/align]
