Intercepting HTTP request/response using WebScarab to hack Web Applications

Hello Friends.

Recently I am really busy with my interviews in different companies. But there is always a new thing that you can learn from everything. Though my tough time has not yet ended but still I took out time to write this post as there is somthing new that I learned while I was preparing for one of my interviews for MicroWorld that is amongst the leading companies in the field of Network Security.

The best thing I find about hacking is that you have the whole internet to practice so I was hitting my keyboard hard to practice my knowledge of intercepting HTTP request and response headers . I will explain you how the entire process works but the thing that disappoints me is that the security features in Indian websites is still very lame. Though there are websites who have really good security measures but there counting is limited .

So we will understand how we can intercept the HTTP request we send to a website and how we can analyse the response header.For this purpose we will use WebScarab which you can download from Here.

After you have installed the setup you will first have to set your browser so that WebScarab can intercept the request and response. 

I am taking the example of Firefox here. Go to options > Advanced > Network > Settings > Then select the Manual Proxy configuration and enter the following values.

HTTP proxy - 127.0.0.1 and port - 8008 

This sets the webscarab to intercept the request by acting as a localhost proxy .

 

Now you start your webScarab by clicking on the icon.

The screen will appear wired and somthing like as shown in the figure. Click on the figure to enlarge it

In the intercept tab , select "Intercept request" and in the left hand side menu select "Get" and "Post" options . 

This makes your webScarab completely ready to intercept the HTTP Get and post requests .

 

Now in your browser type any url , for e.g , google.com and you will get a window that will show the intercepted HTTP Get request. Now if you click on the "Intercept Response" button then it will also intercept the response that is coming back to the browser from the google server.

 

You can use this technique to analyse the the various request and response headers and let me tell you this can be very very deadly . If you are able to make the right moves and changes in the Headers then you can easily modify the headers to send invalid valuse to the servers .

In the main window of the webScarab , the "Summary" tab shows you the details of all the intercepted requests and response.

 

This is a short tutorial on webScarab that will give you a basic understanding of how to use webscarab to intercept the HTTP values and analyse them > Rest is upto you how far you can take it . 

To see how far I went read my next blog post on "how to hack online shopping carts" . 

In case you have any difficulties using WebScarab then please comment here . I will try my best to solve it .

Read more »

Posted in: Hacking,Security,TipsnTricks

PHISHING - Can your Browser protect you?

 

"When facts fail , reasons prevail."
You must be wondering why i used this quote in the beginning(i know none of you must have heard this because i created it while writing this blog) .
This is what phishing is all about . there has been a lot of buzz about the phishing scams that occur now and then which mostly targets lame internet users(sometimes expert) . They have a knowledge of almost all the technical advancements that internet can provide us like using emails, net banking, social circling etc. These are the building facts of the world wide web. But when there is some mis-happening(stealing of password, bank accounts etc) then they realise the reason behind it could be somthing we can call as a phishing scam .
before i tell you some intresting facts about phishing and its countermeasures let's find out what exactly is a phishing scam.

WHAT IS PHISHING?

In the field of computer security, phishing is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication. Communications purporting to be from popular social web sites, auction sites, online payment processors or IT administrators are commonly used to lure the unsuspecting public. Phishing is typically carried out by e-mail or instant messaging and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one. Phishing is an example of social engineering techniques used to fool users and exploits the poor usability of current web security technologies.Attempts to deal with the growing number of reported phishing incidents include legislation, user training, public awareness, and technical security measures.

Phishing techniques

There are numerous techniques exposed so far but i am mentioning the most commonly used scams here. 

 

Link manipulation

Most methods of phishing use some form of technical deception designed to make a link in an e-mail (and the spoofed website it leads to) appear to belong to the spoofed organization. Misspelled URLs or the use of subdomains are common tricks used by phishers. In the following example URL, http://www.yourbank.example.com/, it appears as though the URL will take you to the example section of the yourbank website; actually this URL points to the "yourbank" (i.e. phishing) section of the example website. 

Filter evasion

Phishers have used images instead of text to make it harder for anti-phishing filters to detect text commonly used in phishing e-mails.

Website forgery

 

This is the most widly used phishing technique. We can say that website forgery is a super set of the other two phishing scams namely link manipulation and filter invasion because its basically the forged link or the web page that is mostly transferred as the target page.

Phishing Facts

World

MessageLabs, a company that manages email security, reports a vast increase in phishing emails in the past six months. In September, 2003, the number of phishing emails the company saw was 279. By January of 2004, the number had risen 1200 percent to 337,050. Meantime, the Anti-Phishing Working Group, an industry association focused on eliminating the identity theft and fraud that result from the growing problem of phishing and email spoofing, reports more dangerous facts. In April, the attacks increased 180%, and reports show 15 of the top 20 targeted organizations are financial institutions.

• 1 in 5 Americans were the target of phishing attacks during the last year.
• 57 million consumers have received phishing emails.
• Out of 4 million consumers who encountered fraud last year when opening a new online account, over 50% said they also received a phishing e-mail.

INDIA

India has got the dubious record of being among the top 10 countries where sites involved in `phishing' are hosted the most, according to a new report released by Anti-Phishing Working Group.

COUNTERMEASURES

We all are always very curious to download the latest version of the various browser flavours that are available in the market but we hardly care about that why are these new versions incorporated or built around. It took microsoft just 433 days and crome 212 days to bring the advanced version of there previous browser. Can you answer why ? Its all about providing better security to the end user.

But by just downloading the latest version wont protect you, but you need to set up the settings which can really prevent you. Its not easy to manually detect the phishing attacks but there are various look-and-feel methods to find a phishing page. I am discussing some of the ways that you can use to set your favourite browser to protect you better against the phishing attack.

1..  The best way to avoid becoming a victim of a phishing attack is to detect and/or  block the phishing email (which is the first stage of the attack) which includes a  link to the actual phishing site.

a) Use a spam filter to block spam email. 

Phishing attacks generally rely on a user receiving and clicking on a link in a 

phishing email. By blocking and filtering spam email, users are less likely to  

read, trust or click on a link in a phishing email if it is blocked or marked as 

suspicious by a spam filter.

b) Change settings on your email software to warn you when you receive a 

suspicious email that may be a phishing email.

2..  To best protect yourself in the event that you are fooled by a phishing email(the first stage of the attack), and inadvertently click on a link to a phishing site,you should make use of the security measures available.The major web browsers have features which can be activated to help detect 

phishing web sites. Turning these features on is unlikely to have any noticeable impact on the speed of your Internet connection. Similarly to antivirus 

and anti-spyware software, there is always a delay between when a new attack is released and when these security technologies are updated to detect the new attack.

a) In Microsoft Internet Explorer version 7, the phishing filter can be turned on by selecting “Tools” menu, then “Internet Options”, then select “Turn on

automatic website checking”:

 

 

b) Click “Apply” then “OK” to save these settings.

c) In Microsoft Internet Explorer version 8, anti-phishing is handled by the 

SmartScreen Filter. The SmartScreen Filter is enabled by default – you can 

confirm that it is enabled by selecting the “Safety” menu, then “SmartScreen

Filter”.

 

d) In Mozilla Firefox, click on Tools menu, select Options, select the Security 

tab then select the check box for “Tell me if the site I’m visiting is a 

suspected forgery”. Either option is fine, however, according to the Mozilla 

Firefox help notes, the Google option will provide a more reliable check for 

you.

e) In the Google Chrome web browser, phishing and malware protection is 

enabled by default. Confirm this by selecting the menu with a spanner icon

(rolling over this menu will display the text “Customize and control Google 

   chrome”) and then “Options”.

f) In the Apple Safari web browser, fraudulent website warnings are enabled 

by default. To confirm this, select the Safari menu, then Preferences and 

then click the Security icon to display the control panel pictured.

What to do if you encounter a phishing email or web site.

If you receive a phishing email simply delete it. Do not reply to the email 

address and do not click on the link within the email body.

If you do happen to click on the link in the email body by mistake, do not “login” 

to the phishing web site or complete any fields on the web page which seek 

information from you. If at any time you suspect that you may have navigated 

to a phishing web site, look particularly for the presence and validity of the

digital certificate on that site 

In general, always avoid providing information of a 

confidential nature to a web site that doesn’t have a valid digital certificate. 

Some phishing emails direct users to phishing web sites that also contain 

malware. Even if you do nothing more than click the link, you may unwittingly  

install malware on your computer.

Download Phishing Pages, 

 Download Gmail Phishing Page,  

Download Facebook Phishing Page,

Download Orkut Phishing Page , 

 Download All Phishing Pages.

 

Read more »

Posted in: Hacking,Security,TipsnTricks

All About Botnets and Zombies

We all have heard alot about these two terms ie, botnets and zombies .
They are now considered as synonyms of viruses and malwares . First I will tell you what basically botnets and zombies are , then some statistical figures and at last i will show you how zombies are now used extensively.
What are botnets and zombies ?

A botnet or robot network is a group of computers running a computer application controlled and manipulated only by the owner or the software source. The botnet may refer to a legitimate network of several computers that share program processing amongst them.

Usually though, when people talk about botnets, they are talking about a group of computers infected with the malicious kind of robot software, the bots, which present a security threat to the computer owner. Once the robot software (also known as malicious software or malware) has been successfully installed in a computer, this computer becomes a zombie or a drone, unable to resist the commands of the bot commander

 

 

A zombie computer  is a computer connected to the Internet that has been compromised by a cracker, computer virus or trojan horse and can be used to perform malicious tasks of one sort or another under remote direction. Botnets of zombie computers are often used to spread e-mail spam and launch denial-of-service attacks. Most owners of zombie computers are unaware that their system is being used in this way. Because the owner tends to be unaware, these computers are metaphorically compared to zombies.

How do zombies work?

Spammers may be using your computer to send unsolicited — and possibly offensive — email

offers for products and services. Spammers are using home computers to send bulk emails by the

millions. Indeed, computer security experts estimate that as much as 30 percent of all spam is relayed by infected computers actually located in home offices and living rooms, but controlled from spammers from afar.

According to the Federal Trade Commission (FTC), the nation’s consumer protection agency,spammers can get into your computer in several ways, depending on what kind of Internet connection you have. All computers connected to the Internet are potential targets, but those with broadband (dsl, cable modem) connections are especially attractive to spammers because they are “always on.”Spammers scan the Internet, searching for points of entry and then install hidden software that allows remote access to your data and programs. That, in turn, allows the spammer to send relay their spam and send the spam messages out from your computer.

How does your computer become infected with a zombie?

Remote access software also can be installed by a virus: A spammer sends email with a virus in theattachment. If you open the infected attachment, a virus is released that installs the hidden software.The person who sent the virus now can access the data and programs on your computer, or take over many computers and use them to send spam.

How would you now if your pc is a zombie?

It can be very difficult to tell if a spammer has installed hidden software on your computer, but

there are some warning signs. For example,you may receive emails accusing you of sending spam;

you may find email messages in your “outbox” that you didn’t send; or

your computer is using more power than it has in the past to run the programs you use. (typically, the computer becomes slower to respond)

If your computer has been taken over by a spammer, you could face serious problems. Your

Internet Service Provider (ISP) would see the huge number of emails coming out from your account and may prevent you from sending any email at all until the virus is treated, and treatment could be a complicated, time-consuming process.

 

Read more »

Posted in: Hacking,Security,TipsnTricks

Low Orbit Ion Canon - Ddos Attacking tool

Recently you must have heard about the paypal site being brought down by the wikileaks supporters . I also participated in that mass Ddos attack to support wikileaks .
During that mass attack i came across this very handy,simple yet deadly tool called Low orbit ion cannon.
LOIC is an open source network attack application, written in C#. LOIC was initially developed by Praetox Technologies, but later it was released into the public domain.
LOIC is an acronym for Low Orbit Ion Cannon, a fictional weapon in the Command & Conquer series of video games.

LOIC performs a denial-of-service (DoS) attack (or when used by multiple individuals, a DDoS attack) on a target site by flooding the server with TCP packets, UDP packets, or HTTP requests with the intention of disrupting the service of a particular host. People have used LOIC to join voluntary botnets.

DOWNLOAD

Read more »

Posted in: Hacking,Reverse Engineering,Security

Login Spoofer-Gmail,yahoo,facebook,hotmail password hacking.

Login Spoofer is a Software that it can create Professional Phishing Pages Like: (Hotmail, Yahoo, Gmail, GameZer, Facebook and many more ....) to Steal somebody's Account you have to push him to login in one of your fake pages, when the Victim Login as you told him, His account (Username/Password) will register in our database So you go to the software (Login spoofer) and press refresh then you'll find His Username & Password & IP & his OS Info...etc. Using and Downloading is free 100%.

• Yahoo Password Hacking: Hack Yahoo Account Password with phishing attack.
• Hotmail Password Hacking: Hack Hotmail Account Password with phishing attack.
• Gmail Password Hacking: Hack Gmail Account Password with phishing attack.
• GameZer Password Hacking: Hack GameZer Account Password with phishing attack.
• Facebook Password Hacking: Hack Facebook Account Password with phishing attack..& many more..!!

DOWNLOAD HERE

Read more »

Posted in: Hacking,Reverse Engineering,Security

Top 10 "deadly hacking softwares "

There have been a lot of tools floating around the web who claim to be the best in their respective fields.

I have used many hacking tools that are built for both windows and linux platform and have seen that the linux tools are far more powerful than the windows tools. Keeping this thing in mind i thought to compile my list to those softwares that work well for both the platform and perform similar features.

The list has some new names compared to those in last years blog. I have also provided a download link of all the ten softwares compiled in a single zipped file to ease the downloading.

1.Nmap

Nmap ,by far is the best security scanning and hacking tool ever made. This software tops every list of top hacking softwares for its two reasons. Firstly,its ease of use and secondly,its wide usage.

It provides a wide range of features like port scanning, fingureprinting, os detection , ping , scanning an IP range , alive hosts etc. It has a rich command mode for advanced users which can combine several commands together to execute ones. Its the most recomended tool for new as well as advanced learners and security experts. It hosts its google  opensource project every year. Download the zip.

2.SuperScan

Powerful TCP port scanner, pinger, resolver. SuperScan 4 is an update of the highly popular Windows port scanning tool, SuperScan.  If you need an alternative for nmap on Windows with a decent interface, I
suggest you check this out, it’s pretty nice. It provides a cool scanning experience with lot of information displayed .Downlaod the zip
3.Cain and Abel

My personal favourite for password cracking of any kind.
Cain & Abel is a password recovery tool for Microsoft Operating Systems. It allows easy recovery of various kind of passwords by sniffing the network, cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks, recording VoIP conversations, decoding scrambled passwords, revealing password boxes, uncovering cached passwords and analyzing routing protocols.
The program does not exploit any software vulnerabilities or bugs that could not be fixed with little effort. Download the zip

4.John The Riper

This is my personal favourite password cracking which has been in the market for over a decade and it has evolved into a powerful tool because of the special effort of the open source community.John the Ripper is a fast password cracker, currently available for many flavors of Unix (11 are officially supported, not counting different architectures), DOS, Win32, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. Besides several crypt(3) password hash types most commonly found on various Unix flavors, supported out of the box are Kerberos AFS and Windows NT/2000/XP/2003 LM hashes, plus several more with contributed patches. Download the zip

5.fsCrack

FSCrack is a front end for John the Ripper (JtR) that provides a graphical user interface (GUI) for access to most of JtR’s functions.It increases the functionality of JTR and provides a detailed report of password cracking . The working is similar to JTR by using the SAM file of windows to crack the admin password. Download the zip

6.Nessus Security Scanner

This tool has been the best tool for both network administrators and hackers because of its wide implimentation.The Nessus® vulnerability scanner is the world-leader in active scanners, featuring high-speed discovery, configuration auditing, asset profiling, sensitive data discovery and vulnerability analysis of your security posture. Nessus scanners can be distributed throughout an entire enterprise, inside DMZs and across physically separate networks.  Download the zip

7.Wireshark

Wireshark is a GTK+-based network protocol analyzer, or sniffer, that lets you capture and interactively browse the contents of network frames. The goal of the project is to create a commercial-quality analyzer for Unix and to give Wireshark features that are missing from closed-source sniffers. Works great on both Linux and Windows (with a GUI), easy to use and can reconstruct TCP/IP Streams!. Download the zip


8.Live Bulk Mailer

Live bulk mailer has the ability to still deface the spam filter of gmail,hotmail and yahoo. Its an email flooding tool that allows the attacker to send desired number of bulk mails to the victim inbox and flood it completely. This can be an annoying task and can also put you into trouble so before using this tool dont forget to use a proxy server to hide your IP address. Download the zip

9.Website Digger
Website digger is a tool that helps you to digg into a website and gain information about the host by applying whois query and also banner grabbing capability. This tool is useful while defacing a webpage. Download the zip

10.PuTTY

PuTTY is a free implementation of Telnet and SSH for Win32 and Unix platforms, along with an xterm terminal emulator. A must have for any h4. 0r wanting to telnet or SSH from Windows without having to use the crappy default MS command line clients.
Download the zip

Read more »

Posted in: Hacking,Reverse Engineering,Security