Penetration Testing (Types)

There are primarily three varieties of penetration testing: white field, black field, and grey field.

– White Box Testing
White field testing is when the testing crew has entry to network diagrams, asset data, and different helpful knowledge. This technique is used when budgets are tight and the quantity of allowed hours is proscribed. This kind of testing is the least lifelike, in of what an attacker could do.

– Black Box Testing
Black field testing is when there may be positively no info supplied to the penetration testing crew. Actually, utilizing this technique of testing, the penetration testing crew could solely be given the group title. Other instances, they might be given an IP vary and different parameters to restrict the potential for collateral harm. This kind of testing most precisely represents what an attacker could do and is probably the most lifelike.

– Gray Box Testing
Gray field testing is, you guessed it, someplace in between white field testing and black field testing. This is the very best form of penetration testing the place the penetration testing crew is supplied with restricted info and solely as wanted. So, as they work their manner from the skin in, extra entry to info is granted to hurry the method up. This technique of testing maximizes actuality whereas remaining price range pleasant.

Read More

How to Hack your ISP (Internal Service Provider)

What is FUP?

Most ISPs implement a Fair Usage Policy which will decrease the speed after you reach the usage limit. For eg. - in my case I will have to live with 512 kbps after my 50 GB data usage is over

The ISP doesn't (officialy) provide customers with any interface to view their current usage. This is pretty frustrating as you never know whether you have actually gone over your FUP limit or not.

With the outside temperatures reaching 43-44 degrees, I had no other option but to stay in the house and do something. My first aim was to understand how the ISP was maintaining the usage info of its customers. I logged into my router's admin console (192.168.2.1) and went straight to the page which shows me the info about the internet connection (PPPOE). From there I found the gateway IP address. Gateway IP address is the IP address of a router/computer through which all your internet traffic goes. You can imagine it as a big router which connects all the customers to internet. This should be the place where my internet usage is getting recorded.



I started a scanning the Gateway IP address for open ports using Zenmap(nmap GUI for Windows). I found that the following ports were open and seemed interesting.

• Port 80 - http


• Port 443 - https


• Port 3306 - mysql

Since port 80 and 443 were open. I quickly opened the Gateway IP address on my browser and found the login page of the customer management portal. This was the place I was looking for.



I tried entering my PPPOE username and default password and voila it worked. I could now see my current usage, change the default password and do much more. A quick glance on the info assured me of the foul play by my ISP. The ISP was actually just giving me 30GB FUP instead of the promised 50GB.



This was enough for the hacker inside me to wake up and start working. I went to the login page and tried some basic SQL injection inputs and luckily one of inputs worked and I was logged into someone else's account. I saw that this username was starting with letter 'a' and I quickly figured out that this must be the first username in the database. The SQL injection has bypassed the username and password check and logged me in as the first available user. I tried some more SQL injection queries to find whether error based SQL injection was an option or not. But sadly they have disabled all the errors. I also tried some other options but none of them seemed to work.

 

Now the only option that I could think of was doing a Time Based Blind SQL injection which would take a lot of time since it like asking database true or false questions and then making sense depending on the answers.

I knew that doing this manually is not an option. So I fired up a KALI Linux instance on a Hyper-V Virtual Machine and instructed SQLMAP (an automated SQL injection tool) to do all of the hard work for me for the rest of the night. You have to patient if you are doing a Time Based SQL injection.

KALI Linux is an Advanced Penetration Testing Linux distribution used for Penetration Testing. Hyper-V is an alternative to Virtual Box that comes pre-installed on Windows.

 



I woke up next morning to find out the I have got the dump of table containing four username and password of elevated users of the management software. I appended /admin to the Gateway IP hoping that it would take me to the admin login page and I was right.

Now the problem was that the password was hashed one way. I looked at the hash and quickly figured out that it is a MD5 hash(32 character). I googled 'MD5 reverse', opened the first link and pasted the hash in the hope of getting the original value. Out of the four hashes I was able to reverse the two because the passwords were same and very simple. You must be wondering what was the password. Try to reverse this hash d8578edf8458ce06fbc5bb76a58c5ca4 and you will get it. It was really that simple.

I logged in with the username and password and the ship was now in my control.



But this user didn't had some of the more elevated privileges like changing the minimum speed of the user etc.

So I took the other hash and started trying to reverse it on various different websites. Luckily on one of the sites, I was able to successfully reverse the hash, the password was 9 character long containing upper and lowercase letters, numbers and special characters. I know such a password is generallly regarded as safe but one should clearly accept the fact that MD5 is easy to reverse and short passwords are always a bad idea even if there contain special characters.

What information was available in admin panel?

• All the usernames and their MD5 password hashes. The ISP used the default password for everyone and it was a single password therefore it was very simple to reverse it.


• A good thing was that each account was binded with a MAC address. So even if I had the username and password of someone else I would not be able to use that. The bad thing about this was I also got their MAC addresses from the admin panel so I could easily fake my MAC address in my router settings and use any other username and password easily. I never tried this but I am sure that it would have worked for sure.


• Various other information like phone, email, address etc. that I didn't cared about.

Read More

How to Think Logically (Part 3)

Method Three of Three:
Changing Your Lifestyle

 

1

Eat brain food. The food you consume can have a profound affect on your brain power. Strive for a healthy diet, rich in brain food. A Mediterranean diet can increase your brainpower. This is a diet comprised of mainly fresh fruits and vegetables, legumes, healthy fats, and fish. Healthy fats include monounsaturated fats and are found in foods like fish, avocados, olive oil, and canola oil. Transitioning into a more Mediterranean-based dietary plan can help you increase your overall brain power.^[16]

• Spinach is a powerful brain food. Eating three or more servings of spinach or other leafy greens like kale each day slows mental decline and increases overall brain function.^[17]


• Simple sugars, like table sugars and brown sugars, as well as syrupy sweeteners like high fructose corn syrup, can have a detrimental effect on the brain. Saturated and trans fats, the kinds of found in red meat and dairy, have a negative effect on your mental level as well as overall health. Enriched, bleached, or refined flour, the flour found in white breads, white rices, and white pastas, also has a poor affect on the brain.^[18]

2

Improve your sleep schedule. Getting a solid 7 to 8 hours of sleep each night can increase brain power and promote logical thinking. To improve your sleep schedule, have a set bedtime and wake time that you do not deviate from, even on weekends. Stay away from electronic screens close to bedtime. Do not eat heavy meals late at night and work on engaging in a relaxing activity, like reading, in the hour before bed.^[19]

3

Breathe. Breathing increases brain power by increasing oxygen flow in the brain. Practice deep breathing exercises in the morning and before bed. Practice yoga, meditation, Pilates and other activities that focus on healthy breathing patterns.^[20]

4

Exercise frequently. Physical exercise has a profound effect on cognitive abilities. In addition to being great for the body, a regular exercise routine can boost your mind's capacity for logic.

• Make exercise a priority. Many people push exercise to the peripheral of their lives, not making the time necessary to go to the gym or go for a run. If you make a schedule for yourself, and stick to it, exercise will eventually feel as vital a part of your routine as brushing your teeth in the morning or showering.^[21]


• Aerobics seem to have a particularly strong effect on cognitive abilities. Running, jogging, biking, and engaging in workout routines that get the heart pumping 4 or 5 times a week can increase your brainpower.^[22]

5

Spend time in nature. It’s important that you make time to be outdoors in nature on a regular basis. Spending time outside will help you clear your thoughts and ground yourself. Aim to spend at least a couple hours every week in nature. You can go for a walk or hike, fish or hunt, explore the mountains or forest, swim in lakes or the ocean, or simply sit underneath a tree.

6

Take breaks. People tend to see downtime as an indulgence. However, this is not the case. Taking the occasional break is vital for your brain's ability to process information. Give your brain the occasional mental rest. Have a relaxing ritual you engage in each day. Designate one day a week as your "day off" and take the day to spend time by yourself engaging in leisurely activities you enjoy.^[23]

Read More

How to Think Logically (Part 2)

Method Two of Three:
Recognizing Irrationality

 

1

Recognize how you catastrophize. Many people, especially when in high-stress scenarios, tend to catastrophize. That is, they assume the worst possible outcome for a given event. Try to recognize when you are catastrophizing a moment.

• Catastrophizing takes on many forms. Say, for example, your boss sent you an email about contributing more during work meetings. If you're prone to catastrophizing, you might take this to mean your job is in jeopardy, your boss thinks you're a poor worker, you'll end up fired and unemployable, and your friends and family members will all think less of you. If you catch yourself snowballing like this, take a deep breath and try to think logically. In this example, you could think to yourself, "It's my boss's job to give me constructive feedback. She just wants to push me to perform my best and everyone gets criticism on occasion. It's a normal part of life."^[8]


• Minimizing is a form of catastrophizing where you ignore your successes and good qualities and do not see the negatives in other people's lives. You may think some people have it all, are flawless and successful, and then when you realize they are flawed in some manner you write them off. You might also do this for yourself - you'll think you're the most successful person in the world then, after a small setback, see yourself as a massive failure. Try to recognize these thinking patterns as flawed and recognize the fact everyone is made of both good and bad qualities.^[9]

2

Stay away from self-aggrandizing thoughts. Having an unrealistic sense of self-importance is just as bad as catastrophizing. If you think of yourself as the most important person in the office or the most talented student in a class, you're probably not thinking clearly.

• Everyone contributes an important role to a company, school, organization, and field. A sense of grandiosity is not only off-putting but it can actually cause you to have setbacks at work and life. A sense of self-awareness is important to regulate how you interact with others. Try to combat feelings of grandiosity by reminding yourself that while it's important to feel good about yourself you need to acknowledge the hard work and contributions of others as well.^[10]


• Personalization is a form of self-aggrandizing where you think events that have little to do with you are somehow caused by your presence. This can be for better or for worse. If a co-worker is talking to an attractive person in the office, you may assume he or she is trying to make you jealous. If the same co-worker can't make it to your birthday party, you may assume he or she harbors a secret grudge against you when in fact he or she may have simply been busy. If you find yourself personalizing, try to remember that other people's lives are as hectic as yours. They likely have little time to make decisions with regards to you.^[11]

3

Be aware of magical thinking. Magical thinking is not just for children. Adults sometimes engage in superstitious thought patterns as well, particularly in response to a traumatic event. People believe engaging in some ritual, like wishing or thinking positive thoughts, can have an impact on a situation. Try to remember that, while it's painful to acknowledge, there are many situations over which we have little or no control.^[12]

• This type of thinking is often causes people to not take responsibility for their actions. If you have a problem, make sure to acknowledge and accept it, then find a way to correct or learn from it.

4

Watch for logical leaps. Logical leaps are leaps in judgment, where you make assumptions about people or situations that are not based in reality. People make logical leaps all the time without realizing it.

• For example, if a cashier is rude to you, you may assume, "I bet she doesn't like me because of my appearance, weight, attire, etc." when in reality you have no idea what another person is thinking.^[13]


• People also tend to assume someone will naturally know what they're thinking, which can lead to confusion. For example, you may assume your roommate knows you want him to let your dog out as you'll be home late, but if you do not express this he may not realize it. Try to be conscious of logical leaps in your day-to-day life and catch yourself making them.^[14]

5

Recognize "all or nothing" judgments. All or nothing judgments are a common form of irrational thought patterns. People are unable to see the gray in situations and see situations, people, and outcomes as either entirely positive or entirely negative.^[15]

• You might, for example, feel like you're a complete failure if you misspelled one word in an e-mail without acknowledging the fact your message was conveyed successfully and no one commented on the error. Make an effort to accept that most things in life are neither entirely positive or negative.

Read More

lscript (My Life is Easier Than Before)

lscript – This script will make your life simpler, and of course faster

 

This is a script that automates many procedures about wifi penetration and hacking.

Features

Enabling-Disabling interfaces faster Changing Mac faster Anonymizing your self faster View your public IP faster View your MAC faster

TOOLS

You can set up whichever instrument(s) you need from inside lscript! Fluxion by Deltaxflux WifiTe by derv82 Wifiphisher by Dan McInerney Zatacker by LawrenceThePentester Morpheus by Pedro ubuntu [ r00t-3xp10it ] Osrframework by i3visio Hakku by 4shadoww Trity by Toxic-ig Cupp by Muris Kurgas Dracnmap by Edo -maland- Fern Wifi Cracker by Savio-code Kichthemout by Nikolaos Kamarinakis & David SchĂźtz BeeLogger by Alisson Moretto - 4w4k3 Ghost-Phisher by Savio-code Mdk3-grasp by Musket Developer Anonsurf by Und3rf10w The Eye by EgeBalci Airgeddon by v1s1t0r1sh3r3 Xerxes by zanyarjamal Ezsploit by rand0m1ze Katana framework by PowerScript 4nonimizer by Hackplayers Sslstrip2 by LeonardoNve Dns2proxy by LeonardoNve Pupy by n1nj4sec Zirikatu by pasahitz TheFatRat by Sceetsec Angry IP Scanner by Anton Keks Sniper by 1N3 ReconDog by UltimateHackers RED HAWK by Tuhinshubhra Routersploit by Reverse shell CHAOS by Tiagorlampert Winpayloads by Ncc group

Wifi password scripts

Handshake (WPA-WPA2) Find WPS pin (WPA-WPA2) WEP hacking (WEP)

Others

Email spoofing Metasploit automation (create payloads,listeners,save listeners for later and many others...) Auto eternalblue exploiting (examine on ks) -> hidden shortcuts

How to put in
(make certain you’re a root person)
Be carefull.If you obtain it as a .zip file, it will not run.Make certain to comply with these easy directions.

cd git clone https://github.com/arismelachroinos/lscript.git cd lscript chmod +x set up.sh ./set up.sh

How to run it
(make certain you’re a root person)

open terminal kind "l" press enter

(Not even “lazy”!! Just “l”! The much less you kind , the higher!)

How to uninstall

cd /root/lscript ./uninstall.sh rmdir -r /root/lscript

How to replace

Run the script Type "update"

Things to bear in mind
1)you have to be a root person to run the script
2)it is best to contact me if one thing doesnt work (Write it on the “issues” tab on the high)
3)it is best to contact me if you would like a function to be added (Write it on the “issues” tab on the high)

Read More

How to Think Logically (Part 1)

Do you ever wish you had the ability to solve problems efficiently and easily? If so, you may want to improve your thinking patterns in order to be more logical. Keeping your brain sharp is important as your brain has the power to rewire itself throughout your whole life in a process called neuroplasticity. From engaging in mental exercises, recognizing irrational thoughts, and making lifestyle changes there are many ways to work on thinking more logically.

Method One of Three:
Exercising Your Mind

Test your recall. Your brain, like any other body part, improves with exercise. A great way to give your brain a workout is to test your recall. Throughout the day, see how many details of a given moment, list, or task you can remember.

• Try to memorize small things each day. Write a grocery list and commit it to memory. Memorize a small passage from a poem or book. Wait an hour and see how much you can recall of what you've committed to memory.^[1]


• Draw a map from memory. Sketch a map going from your home to work, a store, a friend's house, or another place you frequently visit.^[2]


• Notice the little details. Making a conscious effort to notice seemingly irrelevant things can be a huge tool to help you become more logical. Do you notice the new paper cut on your friend's hand? Do you count the steps in your school or college? Do you look for spelling mistakes in texts? If the answer is no, now would be a great time to start. The more you practice, the healthier your mind will be. Over time, you'll become a more critical thinker.^[3]

2

Do crossword puzzles. The benefit of crossword puzzles on the mind is well documented. Crossword puzzles force you to push your brain slightly beyond its capabilities, which causes the regrowth of brain neurons. This increases your overall brain power and can promote more sound, logical thinking. Pick up a crossword puzzle book from a local bookstore or do your local newspaper's crossword each morning.^[4]

Learn a new talent. Learning new abilities requires a lot of logical thinking. From devising strategies that help you learn to undertake challenging tasks, you use logic and strategy to acquire new skills. Try taking up some of the following activities to boost your logical thinking skills:^[5]

• Learn to play instruments.


• Learn to draw or paint.


• Learn to speak a foreign language.


• Learn to cook.

4

Socialize. Learning from others is a form of mental exercise. Social connections and friendships nourish the brain and push people to strive to better understand themselves and the world around them. Spend time with close friends and family members on a regular basis. Attend social events and take this as an opportunity to meet new people. This can be difficult if you're a shy or introverted person, but pushing yourself to take risks socially can actually improve your ability to think logically.^[6]

5

Change up your routine. Novelty helps the brain stay sharp as well as increase your memory. Try taking a different route to work than usual or cooking a new type of food for dinner than you typically would. Experiencing new things helps the brain stay active, which can help you become a more logical thinker.^[7]

Read More

Firefox should be given a second chance

Ever since it was first released almost a decade ago, Google’s Chrome browser has been the most consistent piece of technology in my life. I’ve gone through a legion of phones, laptops, and headphones, I’ve jumped around between Android, iOS, Windows Phone, macOS, and Windows, but I’ve rarely had reason to doubt my browser choice. Things have changed in recent times, however, and those changes have been sufficient to make me reconsider. After so many years away, I’m returning to Firefox, in equal measure pushed by Chrome’s downsides as I am pulled by Firefox’s latest upgrades.

If a friend were to ask me what the best web browser is, I’d answer “Chrome” in a heartbeat, so don’t mistake this as a screed against Google’s browser. I still see it as the most fully-featured and trouble-free option for exploring the web. It’s just that sometimes there are reasons to not use the absolute best option available. 

Read More