Hack Remote Computer With IP and Brute Force Attack

FIRSTLY I WILL TELL YOU WHAT IS INTERNET PROTOCOL ??

The Internet Protocol is the principal communications protocol used for relaying datagram (packets) across an
internetwork using the Internet Protocol Suite. Responsible for routing packets across network boundaries, it is the primary protocol that establishes the Internet. 

IP is the primary protocol in the Internet layer of the Internet Protocol Suite and has the task of delivering
datagrams from the source host to the destination host solely based on their addresses. For this Purpose, IP defines addressing methods and structures for datagram encapsulation

Literally, hacking is accessing something or somebody in internet without their permission or interest. While, speaking in summary, hacking is very easy job, it is like instead of using front door, finding the hidden door of a house and hijacking the precious things. Among all the hacking, hacking via IP address is one of the most common yet powerful beginning.

You may want to hack the website and put your advertisement there or grab some database information In this type of hacking, you are playing with the web server’s computer instead of the administrator’s computer. Because, www.website.com is hosted in separate web server rather than personal computer.
Another can be accessing your friend’s computer from your home. Again this is IP based and this is possible only when your friend’s computer is online. If it is off or not connected to internet then remote IP hacking is totally impossible.
Well, both of the hacking has the same process. Let’s summarize what we must do.

• Confirm the website or a computer you want to hack.
• Find or trace their IP address.
• Make sure that IP address is online
• Scan for open ports
• Check for venerable ports
• access through the port
• Brute-force username and password  

Now let me describe in brief in merely basic steps that a child can understand it.

First, getting the IP address of victim.

To get the IP address of the victim website, ping for it in command prompt.

For example,

ping www.google.com

will fetch the IP address of Google.com

This is how we can get the IP address of the victims website.
How about your friend’s PC? You can’t do www.yourfirend’sname.com, can you? Finding your friend’s IP address is little tough job, and tougher it is if he has dynamic IP address that keeps changing.
One of the widely used method to detect IP address of your friend is by chatting with him.

If u know the ip address? Is it online? To know the online status just ping the IP address, if it is online it will reply.
If the IP address is online, scan for the open ports. Open ports are like closed door without locks, you can go inside and outside easily.
Use Advanced Port Scanner to scan all open and venerable ports.

for APS Google it and download any port scanner.

Now you’ve IP address and open port address of the victim, you can now use telnet to try to access them. Make sure that you’ve telnet enabled in your computer or install it from Control panel > Add remove programs > add windows components.
Now open command prompt and use telnet command to access to the IP address. Use following syntax for connection.
telnet [IP address] [Port]










You’ll be asked to input login information.













If you can guess the informations easily then it’s OK. Or you can use some brute-forcing tools like this one.
In this way you’ll able to hack remove computer using only IP address

Hack Gmail/ Yahoo /Facebook Password by brute force attack using Hydra - Backtrack

Hi friends. Here I'm sharing another trick for noobs on How to easily hack someone's Gmail or Yahoo Password as many peoples ask me about it everyday. If you're new here then you can take a look at my previous article How to hack Gmail/Facebook Password. As me a lazy blogger also haven't posted anything on Backtrack for a long time so just thought to bind these two in a single article.
Now, if you're still using Backtrack R2 then upgrade it to R3 take a look here as me still using R2 :'( due to low bandwidth.
Additionally if you're a beginner with Backtrack then first few previous articles are highly recommended on LINUX
Alright, Lets get start..

First, lets take a quick overview about what we're going to do here. We'll apply different passwords on the target's Gmail id from a password list using Hydra which is available with Backtrack. That's why I still love it. :) It'll easily get back the password on successful login.

Requirements:

• A password.txt file with a list of expected passwords, Either write your own or get one from here
• Backtrack 5 (any version)
• Internet Connection

Lets Hack something for real,

Turn on your Backtrack machine :P
Navigate to Applications > Backtrack > Privilege Escalation > Password Attacks > Online Attacks > hydra-gtk and launch the hydra tool

Now, under the Target tab set following parameters

Single target > smtp.gmail.com
port > 465
Protocol > smtp
and check > use SSL, show attempts and Be Verbose

Click on Password tab, set these parameters

Username > target email address
Password List > select the Password.txt file
check the option > try Login as password

Now move to start tab and click on start button at the bottom to begin the attack.

If everything goes well, then you'll get the password.

Note: Using a brute force attack from a Password list will never guarantee any successful result it depends how lucky you're. Hacking someones account without their permission is a crime so do use at your own risk. I'm not at all responsible in case you get your ass behind the bars.

Happy Hacking. :)

"The quieter you become, the more you are able to hear."

Brute Force on Porn Sites

This summary is not available. Please click here to view the post.

Bruteforce your enemy and recover the password

So, I guess you want to crack hotmail accounts? Well I'm here to show you.
Fed up of downloading bruteforcing applications? Ones that don't work? Or you're scared they may be backdoored?

Let's use a tool that is legitimate for breaking the security on logins.
This tool is called Hydra.

You can download it from..
http://www.thc.org/thc-hydra/

Because I use GNU/Linux, this tutorial will be based on Ubuntu 12.04.
Don't worry if you use Windows, the commands are pretty much the same.

Open a terminal and type...

Code:

sudo apt-get install hydra

If you prefer a GTK/GUI version.

Code:

sudo apt-get install hydra-gtk

Only the command line/terminal version is covered in this tutorial.
I want you to use less of GUI's, we are using Linux after all :)

Let's go!
So.. if you type..

Code:

hydra

You'll get a list of options to choose from,
We want to attack the SMTP - which is the mail server, for hotmail.
Because Hotmail runs on SSL connections, we need to specify the SSL port when attacking.

The full command looks like this..

Make sure you FIRST change to the wordlist directory, if you saved the 14 million pass to the Desktop..

Code:

cd ~/Desktop

Code:

hydra -V -S -l Emailaddress@hotmail.com -P "14 million pass.txt" -e ns -o "Cracked!" -t 8 pop3.live.com pop3 -s 995

These options mean...

Quote:hydra - We use the application name.

-V - This shows the output of passwords it checks, you can also add -Vv for extra verbosity [errors, warnings etc - Not really recommended, as it just floods the window]

-S - Use an SSL connection [Needed!]

-P The dictionary list we will use to attack the given Hotmail address [ I will post a link to a 14 million wordlist, perfect for cracking!]

-e ns - try "n" null password, "s" login as pass

-o "Cracked" - Once the password has been cracked, it will store it in a nice file called "Cracked" [Note your directory!]

-t 8 - The number of tasks to use, 8 is fine, any more could cause too many passwords checking and overload the times it gets to check each individual password.

Server - Service - pop3.live.com pop3 - We want to use Hotmail's pop3 server with the service pop3!

-s 995 - This is the SSL port [Needed!]

Upon hitting enter, it should start cracking!
If you get errors, like timeout errors, re-check your terminal command, an error isn't because the bruteforce doesn't work, it just means there is something wrong with the command (Unless Hotmail put a security lock on!)

Here is a picture of me Cracking!


Here is the 14 million wordlist.

Code:

http://www.mediafire.com/?1whma3u7aev3985

If you want to resume the attack at a later day, use the command..

Code:

hydra -R

Not using this command will overwrite the recovery file and start from the beginning.

Hope you guys like.
Please, if you share this, give me credits :)

How To Brute Force - Tutorial

How to Brute Force a website which contains normal HTTP Login Form.
That means it has an entry for a username and a password.
We will do so by using a program called Brutus.
In order to do so, you must find a website that 1) Contains only Username and Password fields,
and 2) Allows unlimited attempts at guessing a specific password.
In order to test if the website allows this, try multiple incorrect passwords for a random username and see what response you get after x amount of attempts. If you get no redirect page and you are not limited in the number of login attempt,
chances are the website is vulnerable to Brute Forcing.

Before we get started you might be wondering what Brute Forcing is; 
 it is simply testing a list of passwords to a list of usernames and hopefully you will have matched a username and password combination that is correct.
There are many disadvantages in using this method to hack,
such as time (you need to test thousands if not millions of combination) and most websites now have features that limit the number of incorrect guesses at one’s password,
or make a human verification field mandatory when logging in. Let’s get started.

What You Will Need:

1) Click Here Download Brutus
2) Click Her Download Password List

3) You will need a proxy or VPN that changes your IP address for all programs,
not just your web browser. I would suggest using CyberGhost VPN or Hot Spot Shield.
They are pretty easy to use and are well documented so if you need help using them,
please search or go to their websites.

Getting Started:

An example of a simple form Login is one as follows (which i just created in HTML as a means to demonstrate such) I am not going to give any real websites just to avoid any conflict.
Once you have found a website that looks similar to that, test it a few times to makes sure it doesn’t limit how many times you type in an incorrect password. Once you have verified that it may be vulnerable to Brute Forcing,
lets get started.



Step One: Start Brutus:



Leave the target field alone for the moment and where it says type choose HTTP (Form) You will see that below it a new option has appeared called “Modify Sequence.” Press this.

Step Two: Specifying Your Target:

Find the URL that links directly to the login page of the website.
For example: http://www.website.com/login;
Insert that URL into the Target Field. After doing so press learn from settings.
You will now see something similar to the following screen:



As you see, On the left hand side it states “Field Name” that gives options such as username and password.
Select the Username under the Field Name list and press the button that says Username.
Do the same with the password and hit password.
This lets Brutus now where to input its list.
Press accept and it will return you to your previous screen.
If, when you were testing you got a message that says,
“Incorrect login” or something similar,
copy it and paste it under the HTML Response boxes.
Press Okay when your complete. We need to do one more thing before we start.

Step Three: Setting the Word lists

The Next step is fairly simple.
Go to the option that says “User File” and select the text file that contains the usernames you would like to Brute Force.
The beside under “Pass File” specify your password list.
Before you hit Start make sure all the optional variables are set to your satisfaction (the default are usually fine);
start your proxy, make sure your IP address is masked than hit Start.
Allow the program to run for as long as you want or until it has completed and hopefully you have gotten some passwords !

How To Crack IIS FTP Password Using Brute-Force

Ftp is an application or service or protocol which can be used to transfer files from one place to another place ,

it really comes very handy during transfer of files from a local box to a remote one .
Suppose someone get access to your FTP then he/she can cause nightmare for you by uploading unappropriate images or files etc.
Here we will discuss how we can crack the password of IIS installed FTP service in Windows.
 What is Brute-Force?

Brute-Force is a type of attack in which every possible combination of letters,
digits and special characters are tried until the right password is matched with the username. The main limitation of this attack is its time factor.
The time it takes to find the proper match mainly depends on the length and complexity of the password.Here I will be using this attack to crack the password.So,lets start….

Requirements:

1. The tool we will be using ” BrutusA2” Click Here to Download BrutusA2
2. You need to know the target suppose “ftp://123.123.xx.xxx”

Procedure:

Step 1. Here I have shown an authentication page of an FTP service in the image below and in the following steps we will crack its password using brutus.

Step 2. Now open up “Brutus” and type your desire target ,
select wordlist and select “FTP” from the drop down menu and click start.
If you are confused then follow the image below.



Step 3.The time it takes as I mentioned above depends on the complexity and length of the password.So after clicking the start button wait for the time as mentioned in the tool.The password will be displayed as shown above.

Dictionary Attacks

Before I get into the example, you must first know what an FTP server is. FTP stands for File Transfer Protocol. FTP is a simple way to exchange files over the internet. If a hacker got FTP access to my website, he could delete/upload anything he wants on my server. An FTP address looks similar to a website address except it uses the prefix ftp:// instead of http://. I set up an FTP server on my computer so I could demonstrate. You can get Brutus at here.


1. First the hacker would choose a target. In this case it’s my home computer and the IP address for your home computer is 127.0.0.1 .
2. By going to ftp://127.0.0.1 I get a pop-up box asking for a username and password.

3. Next the hacker would launch a program similar to Brutus and attempt to crack the password.
4. In the target you put the IP address of the website and to the right select the appropriate option, which in this case is FTP.
5. The default port is 21 but some websites change this to make them a little more secure. If you find out that the port isn’t 21, you can find the right one by doing a port scan. We will get into this later in the book.
6. If you don’t know any of the usernames for the FTP server, then you will have to get a list of the most common usernames.
7. For a dictionary attack you will have to choose the pass mode Word List and browse and select the file containing your word list. You can get some good password lists atpacketstormsecurity Below are examples of what a username and password list might look like.

8. Once you hit Start the program will attempt to connect to the server and begin to try all the possible combinations from your lists.

9. If you’re lucky, eventually it’ll get the right Username:Password combination. As you can see below, it got the correct combination of username – admin and password – password.

10. A smarter hacker would use a proxy when using a program like this. What a proxy does is cloaks your IP address by sending your connection request through another computer before going to the target. This is a smart idea because as you will see in the image below, Brutus leaves a huge log of your presence on the target server.

11. In place of the IP address 127.0.0.1 would be the hackers IP address. Footprints like these get a hacker caught and into a lot of trouble with the law

How to hack IIS ( internet information server ) FTP password by useing Brute Force Attack

FTP is an application or service or protocol which can be used totransfer files from one place to another place ,it really comes very handy during transfer of files from a local box to a remote one .Suppose someone get access to your FTP then he/she can cause nightmare for you by uploading unappropriate images or files etc.Here we will discuss how we can crack the password of IIS installed FTP service in Windows.

WHAT IS BRUTE-FORCE?

Brute-force is a type of attack in which every possible combination of letters, digits and special characters are tried until the right password is matched with the username. The main limitation of this attack is its time factor. The time it takes to find the proper match mainly depends on the length and complexity of the password.Here I will be using this attack to crack the password.So,lets start….
Requirements:

1. The tool we will be using ” BrutusA2”(Download: http://www.hoobie.net/brutus/)
2. You need to know the target suppose “ftp://123.123.xx.xxx”

PROCEDURE:

Step 1.Here I have shown an authentication page of an FTP service in the image below and in the following steps we will crack its password using brutus.

Step 2.Now open up “Brutus” and type your desire target ,select wordlist and select “FTP” from the drop down menu and click start. If you are confused then follow the image below.


Step 3.The time it takes as I mentioned above depends on the complexity and length of the password.So after clicking the start button wait for the time as mentioned in the tool.The password will be displayed as shown above.
Recommendation: I would recommend the readers to try it in a virtual environment as I did and enjoy the trick.It is not advisable to try it on some unknown user without prior permission.

How to crack IIS FTP password using Brute-Force

FTP IS AN APPLICATION OR SERVICE OR PROTOCOL  WHICH CAN BE USED TO TRANSFER FILES FROM ONE PLACE TO ANOTHER  PLACE ,IT REALLY COMES VERY HANDY  DURING TRANSFER OF FILES FROM A LOCAL BOX TO A REMOTE ONE .SUPPOSE SOMEONE GET ACCESS TO YOUR FTP THEN HE/SHE CAN CAUSE NIGHTMARE FOR YOU BY UPLOADING  UNAPPROPRIATE IMAGES OR FILES ETC.HERE WE WILL DISCUSS HOW WE CAN CRACK THE PASSWORD OF IISINSTALLED FTP SERVICE IN WINDOWS.

WHAT IS BRUTE-FORCE?

Brute-force is a type of attack in which every  possible combination of letters, digits and special characters are  tried until the rightpassword is matched  with the username. The main limitation of this attack is its time factor. The time it takes to find the proper match mainly depends on the length and complexity of the password.Here I will be using this attack to crack thepassword.So,lets start….
Requirements:

1. The tool we will be using  ” BrutusA2”(Download: http://www.hoobie.net/brutus/)
2. You need to know the target suppose “ftp://123.123.xx.xxx”

PROCEDURE:

Step 1.Here I have shown an authentication page of an FTP service in the image below and in the following steps we will crack itspassword using brutus.

Step 2.Now open up “Brutus” and type  your desire target ,select wordlist and select “FTP” from the drop down menu  and click start. If you are confused then follow the image below.


Step 3.The time it takes as I mentioned above depends on the complexity and length of the password.So after clicking the start button wait for the time as mentioned in the tool.The password will be displayed as shown above.
Recommendation: I would recommend the readers to try it in a virtual environment as I did and enjoy the trick.It is not advisable to try it on some unknown user without prior permission.