Sep 7, 2013 07:41 AM
(This post was last modified: Sep 7, 2013 07:43 AM by Nas.)
[img]http://i.minus.com/j725pgTr4MikE.png[/img]
In this thread i will be showing you different units of beginner hacking and answer most frequently asked questions. Please keep in mind this is not a help desk and nor is it a expert guide for hacking.
[img]http://i.minus.com/j2wLbqWwR1cwB.png[/img]
- Remote Administration Tools
- Keylogging
- Shelling
- java Drive By
- DDoS/DoS/Booters
- Crypter
- VPN / Proxy
[img]http://i.minus.com/jcf4Y2WnU4hZO.png[/img]
A remote Administration tool ( AKA. RAT ) is a software that allows a person to control a system as if he/she has physical access to the system. Remote Administration tools are often Malicious and is used to get information from a person, information as in passwords,doxing, exposing or many other things. Malicious RAT software is typically installed without the victim's knowledge. If you want to know how to use a RAT or learn more about it, please visit HackForums official section for Remote Administration tool's.
Some Features :
- Screen/camera capture or image control
- File management
- Shell control
- Computer Power Control
- Registry management
- Block mouse and keyboard
- Change your desktop wallpaper
- Drop other viruses and worms
- View, kill, and start tasks in task manager
- View screen
- Save all saved passwords on your PC
- Log keystrokes, keystroke capture
- and many other things..
Quote:If you have been infected by a RAT and do not know how to remove it please look in the Malware, Virus, and Rat Removal Help by MRT section of HackForums.
[img]http://i2.minus.com/ihNlmn3dYYNxz.png[/img]
Keylogging is the when recording the keys you or another person type on a keyboard, similar to the ratting manner people who are using the keyboard is unaware that their keystroke is being recorded. People use keylogging to record victims passwords. A keylogger recorder can record instant messages, e-mail's, and password input at any moment. If you want to know how to use a keylogging or learn more about it, please visit HackForums official section for Keylogging.
Quote:If you have been infected by a Keylogger and do not know how to remove it please look in the Malware, Virus, and Rat Removal Help by MRT section of HackForums.
[img]http://i2.minus.com/i9N2YpezxvUsZ.png[/img]
Shelling is one of the basic or expert tools when hacking a website. If you're going to " shell " a website , it means that you are uploading a .php ( shell ) file in one of the websites directory to have full control of the website. There is many shelling tutorials and can be easily found in a search on hackforums. If you are wondering how do you get to upload a file in a website's directory, well that's the interesting part. You will have to find a exploit on the website. There is many different types of exploits and exploit finders.
The most known and useful exploits would be:
- MySQL exploit
- Other Exploits can be found here
A Good website Vulnerability/directory scanner for beginners would be Acunetix. You can find the download link here.
[img]http://i.minus.com/jXsnPdYO8bRwA.png[/img]
A Java Drive By is a java exploit that is put on websites. Once you visit the website you will see a pop-up that says " Run " , It will automatically download a program ( Most likely a Rat/Keylogger ). The program will not only download it will also run. If you want to use or know how to use it, visit this thread.
There is also something called a Silent Java Drive By, Which you can determine with the name is the same thing as a regular ordinary Java Drive By, but Silent. Which means when you go visit the malicious website, you will not receive a pop up and it will just download also run automatically. This only works with certain types of java's so far.
Current Versions and exploits:
2013 - 7u10 - 7u6
2012 - 7u6 - 7u0
2011 - 7u0 and below
align=center][img]http://i.minus.com/j3k72ZgguR7wi.png[/img][/align]
DDoS or Distributed Denial-of-service attack is using more then 1 Network to take a website/server offline. DDoS is caused by sending multiple packets using many different Networks to take down a target so much so that it cannot respond to the traffic.
Picture explanation for DDoS :
[img]http://upload.wikimedia.org/wikipedia/commons/thumb/3/3f/Stachledraht_DDos_Attack.svg/424px-Stachledraht_DDos_Attack.svg.png[/img]
[img]http://i.minus.com/j3ynZxdAILmkk.png[/img]
Short for denial-of-service attack, a type of attack on a network that is designed to bring the network offline by flooding it with traffic. Unlike DDoS, DoS attacks use one connection to take down a network. For all known DoS attacks, there are softwares that system administrators can install to limit the damage caused by the attacks. But, like viruses, new DoS attacks are constantly being made.
[img]http://i.minus.com/jk7FxetgqAJFO.png[/img]
Booter can run on bots which is infected computers, or it can run on API's which are servers,
You use the booter to send a certain amount of traffic towards someones IP which will over-flood their router and hit them offline or it can be used to hit a servers IP which will do the same and hit it offline
The more bots or shells you have the powerful the booter is going to be. you can hold people offline with it and if the booter is strong enough also websites. Booters are most of the time is a product that is being sold. If you would like to buy them please visit HackForums official Section for Server Stress Testing Products.
[img]http://i.minus.com/jbg814HTXRJzkC.png[/img]
Crypter is a software used to hide viruses, keyloggers or any RAT tool from antiviruses so that they are not detected and deleted by antiviruses. A crypter is a program that allows users to crypt the coding of their program. Generally, antivirus work by splitting source code of application and then search for certain string within source code. If antivirus detects any certain malicious strings, it either stops scan or deletes the file as virus from system.
[img]http://i.minus.com/jMfw5yJCnM7W7.png[/img]
FUD is acronym for Fully UnDetectable.
[img]http://i.minus.com/jhPPAUcydR48c.png[/img]
A VPN (virtual private network ) is a private network connecting to a public network, such as the Internet. It enables a computer to send and receive data across shared or public networks as if it were directly connected to the private connection,This is done by making a virtual point-to-point connection through the use of dedicated connections, encryption, or a combination of the two. VPN's is used to keep " anonymous " from blackhat activities. Beware most VPN's do leave logs.
Example of VPN :
[img]http://upload.wikimedia.org/wikipedia/commons/thumb/0/00/Virtual_Private_Network_overview.svg/800px-Virtual_Private_Network_overview.svg.png[/img]
[img]http://i.minus.com/jiwTPS11SfZSx.png[/img]
A proxy server is a server (a computer system or an application) that acts as a middle-man for requests from clients wanting resources from other servers. You can connect to the proxy server, requesting some service, such as a file, connection, web page, or other resource available from a different person/server and the proxy server evaluates the request as a way to simplify and control its complexity.
Example Of Proxy:
[img]http://upload.wikimedia.org/wikipedia/commons/thumb/b/bb/Proxy_concept_en.svg/400px-Proxy_concept_en.svg.png[/img]
[img]http://i.minus.com/jxzFhXE2SVeet.png[/img]
Please keep in mind that this thread was made to help lower down the LQ posts that is in this section. I gathered information from frequently asked questions and put it in one thread. This thread will keep being updated as more questions are being being asked
Credits.



![[Image: 6BzhNQ5.png]](https://i.imgur.com/6BzhNQ5.png)
![[Image: CJLOhGd.gif]](https://i.imgur.com/CJLOhGd.gif)

![[Image: lPQX27G.png]](https://i.imgur.com/lPQX27G.png)