USBsploit 0.3b : USB Backdoor Generator

USBsploit 0.3b is a proof of concept to generate backdoors & transferring files remotely using autorun files.
It can perform these tasks:

• generate reverse TCP backdoors
• running Autorun or LNK USB infections
• dumping all USB files remotely on multiple targets at the same time.

Damn Vulnerable Web App : Learn & Test Web Security.

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be light weight, easy to use and full of vulnerabilities to exploit, aid for security professionals to test their skills and tools in a legal environment, help web developers better understand the processes of securing web applications and aid teachers/students to teach/learn web application security in a class room environment.

Microsoft SQL Server Fingerprinting Tools

 SQL Server fingerprinting is an essential step before performing any kind of penetration testing on database servers. There are two well known tools for Microsoft SQL Server Fingerprinting.

• SQLping
• SQLver
• ESF exploit next generation sql fingerprint

SQLPing 3.0 performs both active and passive scans of your network in order to identify all of the SQL Server/MSDE installations in your enterprise. Due to the proliferation of personal firewalls, inconsistent network library configurations, and multiple-instance support, SQL Server installations are becoming increasingly difficult to discover, assess, and maintain. SQLPing 3.0 is designed to remedy this problem by combining all known means of SQL Server/MSDE discovery into a single tool which can be used to ferret-out servers you never knew existed on your network so you can properly secure them. .NET Framework v2.0 Required. 
 
 SQLVer has been built to utilise the same techniques as SQLPing.NET 1.3 beta, however, does not actually use a UDP packet sent to port 1434 packet to enumerate the MS SQL server version info. This tool in fact uses TCP port 1433 instead.

ESF is a modern tool, it help identifying granular level findings to further exploit database. ESF works for these versions:

1. Microsoft SQL Server 2000
2. Microsoft SQL Server 2005
3. Microsoft SQL Server 2008

 
The strengths of Exploit Next Generation SQL Fingerprint are:

1.  uses both TCP and UDP protocols
2. capable to identify multiple Microsoft SQL Server instances and their TCP communication ports.
3. does not require any authentication method to identify the Microsoft SQL Server version.
4. uses probabilistic algorithm to identify the Microsoft SQL Server version, combining both TCP and UDP fingerprint.

BAT to EXE converter!

Executing a bat file may raise alarm when executed in a victims system. In order to have a stealth execution when can convert the bat or cmd file into exe file. which will execute like any other software. Convert bat to exe file by using Advanced Bat To Exe converter which works on all Windows version including Windows 7.

Hide your files in jpeg File without any Software!

This is quite an old trick but still works fine. Its a type of stenography technique where we try to hide a file inside another file.    
You will only need to download WinRAR & install it.

Super Hiding the folder easily using cmd command!

For hiding your folder execute the command
X:\> attrib +a  +r  +s +h foldername /s /d [enter]

 For unhiding:
X:\> attrib -a  -r  -s  -h foldername /s /d [enter]
X= x is location for our folder in hard disk.

Enabling telnet in vista/7 & Sending anonymous emails!

 In Windows Vista & windows7 telnet is disabled by default because of its security issues (passes messages in plain text, easy to sniff passwords & credentials, so its obsolete now).
In order to enable go to control panel
> Programs
> Programs & Features
> click on 'Turn Windows Feature on or off' on the left panel
> new window appears, tick check boxes telnet server or telnet client or both as per your need.
> click ok
> open cmd & start telneting to another telnet enabled computers (for command
queries type telnet /? in cmd)

Creating Linux environment & installing Linux softwares in Windows!

There are plenty of solutions for achieving linux environment in Windows.
1)Installing Cygwin creates linux environment. But all programs are not supported by cygwin. Also it may create problems in newer versions of windows. It consists of two parts:
  # A DLL (cygwin1.dll) which acts as a Linux API emulation layer providing substantial Linux API functionality.
  #  A collection of tools which provide Linux look and feel.
Problems regarding cygwin
 # Cygwin is not a way to run native linux apps on Windows. You have to rebuild your application from source if you want it to run on Windows.
 # Cygwin is not a way to magically make native Windows apps aware of UNIX  functionality, like signals, ptys, etc. Again, you need to build your apps from source if you want to take advantage of Cygwin functionality

Sidejacking -- Serious threat to Wireless Network users!

The purpose of this post is to create awareness about the sense of insecurity while accessing wireless networks & not to encourage illegal hacking activites.

Sidejacking tool is available here. -- http://erratasec.blogspot.com/2007/08/sidejacking-with-hamster_05.html
Sidejacking tool consists of ferret & hamster. Ferret sniffs cookies & hamster convert that cookie information into something Browser can understand, also it acts as internal proxy server. So its a point & click attack & very easy to implement.

Information about sidejacking---
http://www.tgdaily.com/security-features/34324-tg-video-wirelessly-hacking-gmail-and-more-tutorial
http://erratasec.blogspot.com/2008/01/more-sidejacking.html

Try creating some easy animation!

For creating animations in very easy way, plenty of softwares are available, some are online & some you can download one your pc & use it. I have come across such a software called UnFreez. The resulted animated gif image just takes a collection of gif images & play them with some delay. Its very easy to use.
This is a video from Tinkernut which guides on the usage of UnFreez.