Showing posts with label linux. Show all posts
Showing posts with label linux. Show all posts

Wednesday, 8 June 2016

Top 10 Hacking Tools Of 2016



A hacking tool is a program designed to assist with hacking, or a piece of software which can be used for hacking purposes. Examples include Nmap, Nessus, John the Ripper, p0f, and Winzapper.

Here are the Top Best Ethical Hacking Tools 2016:


1 Metasploit 



Metaspoit: Best Hacking Tools of 2016 


Metasploit is available for all major platforms including Windows, Linux, and OS X. Rather than calling Metasploit a collection of exploit tools, I like to call it an infrastructure that you can utilize to build your own custom tools. This free tool is one of the most popular cyber security tools around that allows you to locate vulnerabilities at different platforms. Metasploit is backed by more than 200,000 users and contributors that help you to get insights and uncover the weaknesses in your system. 

This top hacking tool package of 2016 lets you simulate real-world attacks to tell you about the weak points and finds them. As a penetration tester, it pin points the vulnerabilities with Nexpose closed–loop integration using Top Remediation reports. Using the open source Metasploit framework, users can build their own tools and take the best out of this multi-purpose hacking tool.

2 Nmap



Nmap is available for all major platforms including Windows, Linux, and OS X. I think everyone has heard of this one, Nmap (Network Mapper) is a free open source utility for network exploration or security auditing. It was designed to rapidly scan large networks, although it works fine against single hosts.Many systems and network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses raw IP packets in novel ways to determine what hosts are available on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions) they are running, what type of packet filters/firewalls are in use,and dozens of other characteristics. It may be used to discover computers and services on a computer network, thus creating a “map” of the network.Nmap runs on most types of computers and both console and graphical versions are available. Nmap is free and open source.Can be used by beginners (-sT) or by pros alike (packet_trace). Nmap can be a very versatile tool, once you fully understand the results.

3 Acunetix WVS 


Acunetix is available for Windows XP and higher. Acunetix is a web vulnerability scanner (WVS) that scans and finds out the flaws in a website that could prove fatal. This multi-threaded tool crawls a website and finds out malicious Cross-site Scripting, SQL injection, and other vulnerabilities. This fast and easy to use tool scans WordPress websites form more than 1200 vulnerabilities in WordPress.
Acunetix comes with a Login Sequence Recorder that allows one to access the password protected areas of websites. The new AcuSensor technology used in this tool allows you to reduce the false positive rate. Such features have made Acunetix WVS a preferred hacking tools that you need to check out in 2016.

4 Wireshark 


This free and open source tool was originally named Ethereal. Wireshark also comes in a command-line version called TShark. This GTK+-based network protocol analyzer runs with ease on Linux, Windows, and OS X. Wireshark is a GTK+-based Wiresharknetwork protocol analyzer, or sniffer, that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and to give Wireshark features that are missing from closed-source sniffers.It works great on both Linux and Windows (with a GUI), easy to use and can reconstruct TCP/IP Streams. 

5 oclHashcat 


This useful hacking tool can be downloaded in different versions for Linux, OSX, and Windows. If password cracking is something you do on daily basis, you might be aware of the free password cracking tool Hashcat. While Hashcat is a CPU-based password cracking tool, oclHashcat is its advanced version that uses the power of your GPU.
oclHashcat calls itself world’s fastest password cracking tool with world’s first and only GPGPU based engine. For using the tool, NVIDIA users require ForceWare 346.59 or later and AMD users require Catalyst 15.7 or later.

This tool employs following attack modes for cracking:
  • Straight 
  • Combination 
  • Brute-force 
  • Hybrid dictionary + mask 
  • Hybrid mask + dictionary 
Mentioning another major feature, oclHashcat is an open source tool under MIT license that allows an easy integration or packaging of the common Linux distros.

6 Nessus Vulnerability Scanner 


Nessus is supported by a variety of platforms including Windows 7 and 8, Mac OS X, and popular Linux distros like Debian, Ubuntu, Kali Linux etc. This top free hacking tool of 2016 works with the help of a client-server framework. Developed by Tenable Network Security, the tool is one of the most popular vulnerability scanners we have. Nessus serves different purposes to different types of users – Nessus Home, Nessus Professional, Nessus Manager and Nessus Cloud. 

Using Nessus, one can scan multiple types of vulnerabilities that include remote access flaw detection, misconfiguration alert, denial of services against TCP/IP stack, preparation of PCI DSS audits, malware detection, sensitive data searches etc. To launch a dictionary attack, Nessus can also call a popular tool Hydra externally.
Apart from the above mentioned basic functionalities, Nessus could be used to scan multiple networks on IPv4, IPv6 and hybrid networks. You can set scheduled scan to run at your chosen time and re-scan all or a subsection of previously scanned hosts using selective host re-scanning.

7 Maltego



Maltego hacking tool is available for Windows, Mac, and Linux. Maltego is an open source forensics platform that offers rigorous mining and information gathering to paint a picture of cyber threats around you. Maltego excels in showing the complexity and severity of points of failure in your infrastructure and the surrounding environment. 

Maltego is a great hacker tool that analyzes the real world links between people, companies, websites, domains, DNS names, IP addresses, documents and whatnot. Based on Java, this tool runs in an easy-to-use graphical interface with lost customization options while scanning. 


8 Social-Engineer Toolkit 




Apart from Linux, Social-Engineer Toolkit is partially supported on Mac OS X and Windows. Also featured on Mr. Robot, TrustedSec’s Social-Engineer Toolkit is an advanced framework for simulating multiple types of social engineering attacks like credential harvestings, phishing attacks, and more.  

This Python-driven tool is the standard tool for social-engineering penetration tests with more than two million downloads. It automates the attacks and generates disguising emails, malicious web pages and more. 

To download SET on Linux, type the following command:

git clone https://github.com/trustedsec/social-engineer-toolkit/ set/

9 Nessus Remote Security Scanner 





Recently went closed source, but is still essentially free. Works with a client-server framework. Nessus Remote Security Scanner is the worlds most popular vulnerability scanner used in over 75,000 organizations world-wide. Many of the worlds largest organizations are realizing significant cost savings by using Nessus to audit business-critical enterprise devices and applications. 

10 Kismet 




Kismet is an 802.11 layer2 wireless network detector, sniffer, and intrusion detection system. Kismet will work with Kismetany wireless card which supports raw monitoring (rfmon) mode, and can sniff 802.11b, 802.11a, and 802.11g traffic. A good wireless tool as long as your card supports rfmon.

Wednesday, 1 June 2016

Wi-fi hacking is not a big deal – Crack WPA2 Password in 5 steps !!!






Requirements:

  1. Wireless card (support promiscuous mode) 
  2. Access point with WPA2 and WPS enables 
  3. Linux installed PC(ubuntu,kali,mint,etc). 

STEP 1:Open our terminal (CTRL+ALT+T) and type airmon-ng (view tips and tricks how to create keyboard shortcut on kali linux)
this command will lists our wireless card that attached with our system.

STEP 2: The next step we need to stop our wireless monitor mode by running airmon-ng stop wlan0

STEP 3: Now we ready to capture the wireless traffic around us. By running airodump-ng wlan0 our wireless interface will start capturing the data.





From the picture above, we can see many available access point with all the information. In the green box is our victim access point which is my own access point

REFERENCE

  • BSSID (Basic Service Set Identification): the MAC address of access point.
  • PWR: Signal level reported by the card. 
  • Beacons: Number of announcements packets sent by the AP .
  • #Data: Number of captured data packets (if WEP, unique IV count), including data broadcast packets. 
  • #/s: Number of data packets per second measure over the last 10 seconds. 
  • CH: Channel number (taken from beacon packets). 
  • MB: Maximum speed supported by the AP. If MB = 11, it's 802.11b, if MB = 22 it's 802.11b+ and higher rates are 802.11g. 
  • ENC: Encryption algorithm in use. 
  • CIPHER: The cipher detected. TKIP is typically used with WPA and CCMP is typically used with WPA2. 
  • AUTH: The authentication protocol used. 
  • ESSID: Shows the wireless network name. The so-called “SSID”, which can be empty if SSID hiding is activated. 

STEP 4
: From the step 3 above, we can find access point with encryption algorithm WPA2 and note the AP channel number. Now we will find out whether target AP has WPS enabled or not wash -i wlan0 -c 8 -C -s

If the WPS Locked status is No, then we ready to crack and move to step 5.

STEP 5: The last step is cracking the WPA2 password using reaver.
reaver -i <your_interface> -b <wi-fi victim MAC address> –fail-wait=360

Because we already get the information from step 3 above, so my command look like this:
reaver -i wlan0 -b E0:05:C5:5A:26:94 –fail-wait=360.






it took about 5 hours to crack 19 characters WPA2 password from my Kali virtualBox, but it depend with our hardware and wireless card.

Monday, 30 May 2016

Dual-Boot Ubuntu 15.04/14.10 And Windows 10/8.1/8: step By Step Tutorial With Screenshots

 Dual-Boot Ubuntu 15.04/14.10 And Windows 10/8.1/8: step By Step Tutorial With Screenshots

 There are many of us want to use Windows and Ubuntu both at the same computer but dual booting does not seem easy to everyone. In this article I'll show you how you can dual boot your computer with Windows 10/8.1/8 and Ubuntu 15.04/14.10.

I assume that you've already installed Windows.
    Dual-Boot Ubuntu 15.04/14.10 And Windows 10/8.1/8: Step By Step Tutorial With Screenshots
  • First of all save all of your important files so that any a does not loose any relevant files.
  • Save data either in pen drive or any external hard drive or whatever source you use to save your data just save it.
STEP 1: Now our first step starts with inserting Ubuntu bootable DVD/Pendrive. 
              If you have pendrive then make sure you've set your system boot from Pendrive. 
              If you have not set it up then open BIOS setup. From BIOS, goto Boot tab and select boot                       preference and select your pendrive at primary boot. 
              Now save settings and reboot your system.


System should bootup from Ubuntu Bootable Pendrive. Just wait untill you get option to “Try Ubuntu” or “Install Ubuntu”. 

Install Ubuntu Or Boot live ubuntu


STEP 2: Click Try Ubuntu and you will be booted to Ubuntu Live. Here you can test several features and look and decide further to install it or not. Now you see an icon on the desktop “Install Ubuntu”, click it.
Picture

STEP 3: A setup window will popup asking for language selection. Select your preferred language from left sidebar and click 'Continue'. The next screen shows couple of options to select. If you are connected to the internet, click the checkbox 'Download updates while installing'. This option downloads and installs all available updates (skip this step if you want to download & install updates after Ubuntu installation). Click second checkbox 'Install this third-party software'. This options installs third-party software such as codecs and more. Although you can install codecs after installing Ubuntu but if you install here then you can play everything just after installation is done. Now click Continue.

STEP 4: Select your preferred

Install Ubuntu 15.04 select language



STEP 3: Download and install updates



install linux ubuntu vivid vervet



STEP 4: It is the most important step. You have three options available first is 'Install Ubuntu alongside Windows' , second is 'Replace Windows with Ubuntu” and third option is “Something else”. If you want system to partition the hard-disk and install Ubuntu alongside Windows then selectfirst option. If you want to remove Windows completely and install Ubuntu then choosesecond option and third option what we are going to select in this tutorial is “Something else”. This is the very convenient option. I can partition hard-disk as I want without removing Windows.

Choose 'Something else' and continue. The following screen would have all the partitions available at your disk, including the Windwos partition and free space. (Be very careful before you select any partition). Select free space and click '+' (plus) sign below left side of window. Now it's the main part but before that let me tell you what partitions are needed to install Ubuntu. We need to create minimum three partitions namely '/' (root)swap and /home.  

Root '/'

root is the partition that contains all of your system and applications file. For example, when you install any application, the related files are stored into root partition. Nothing from this partition can be deleted without root user permission. root partition is symbolized as '/'.

root partition should be more than 25GB. This size will not cause trouble for you in future. You can easily install large applications.

Swap

swap is the partition that is used as RAM (Random Access Memory). In case your RAM is full, system will use swap as a RAM. swap is also used when user hibernates the system. The hibernate session is saved in swapswap size should be double the size of RAM but if your RAM is 8GB or more then keep swap 8GB. It's should be enough.

/home

/home is the partition that contains all users data. Like in Windows users have different partitions to store data and one partition has OS. /home is like the partitions that contains all users data, such as, documents, music, movies, games setup etc. You can specify any size for/home depending on your use. If you have large amount of files then make it large.

Now that we know what root '/', swap and /home partitions are, let's move on to the main step. First create root partition where we'll install our Ubuntu. Enter size in MB (1024MB = 1GB). Click 'Primary' and click 'Begining of this space'. Choosing Begining of this space creates this partition first and rest of other after. From drop down choose 'Ext4 journalising file system'. There are couple of other filesystems but Ext4 is faster and work perfectly fine with Linux. In last, choose Mount point as '/' root from drop-down menu. And click 'OK'. You've created root partition.  

create root partition to install Ubuntu


Create the last '/home' partition in the same way as above partitions were created. Select free space and click '+' sign and enter size of /home partition. Jump to 'Use as' and select 'Ext4 journalizing file system, select 'Mount point' as /home and click OK. You're all done!

Click continue and it will give last prompt to check if all the partitions are okey. Click Continue if everything is fine. 

create swap partition to install ubuntu



Select rest of the free space again and click '+' (plus) sign. You'll get the partition creation window. Enter the size for swap and and select rest of the options and select 'swap area' fromuse as drop-down menu. This selection will hide the last option 'Mount point'. Click OK and you're done.

confirm/create partitions to install ubuntu


If you followed everything correctly you should get to select Time Zone. Select Time Zone and continue.
Select Keyboard layout and click Continue.

Complete all fields in the next window. Your name, You computer's nameusernamepassword(twice) and select if you want to login automatically or require to enter password to login. Click Continue and istallation will start. It should not take much time. Just 5 minutes or so. If you're downloading updates then this may take more time depending on your internet speed. If you want to skip downloading, expand the status bar and click 'skip' multiple times.

When installation is completed you'll get popup to restart Live Ubuntu to Ubuntu or Continue Testing. Click Restart and you're all done. Plug-out Pendrive or eject DVD and now whenever you boot, the grub menu will give you two operating systems to select, Windows and Ubuntu. Select Ubuntu and you are done.

Congratulation! You now have two operating systems installed. Select anyone from grub menu and work without any problem.
Restart ubuntu live disk to continue using Ubuntu