HackWare.ru
Tag

Net-Creds

Exploitation

SMB and Samba Security Audit Tools

Author: Aleksei Miloserdov acccheck brute-force computer networks CredNinja enum4linux Ettercap Hydra infogathering Intercepter-NG Inveigh keimpx MITMf net Net-Creds network folders (shares) Nmap nmblookup NSE scripts nullinux Patator Pupy Responder RID Cycling rpcclient rpclient Samba SMB SMB Spider / smbspider smbclient SMBMap smbtree system administration Exploitation Information Gathering

Table of contents 1. SMB and network folders discovering. Shares and files enumeration 1.1 Samba utilities 1.2 SMB discovering via port scanning 1.3 enum4linux 1.4 nullinux 1.5 SMB Spider 1.6 acccheck 1.7 CredNinja 1.8 SMBMap 1.9…

Read article →
Sniffing & Spoofing

Ettercap user manual: man-in-the-middle attack (MitM), password interception, HSTS bypass, data modification on the fly, custom filters and plug-ins usage, BeEF hooks, infection with backdoors

Author: Aleksei Miloserdov BlackArch Burp Suite dns2proxy driftnet Ettercap hacking Kali Linux Man-In-The-Middle attacks Net-Creds Sniffing Spoofing SSLstrip (SSLStrip+) Sniffing & Spoofing

Table of contents Ettercap alternatives 1. Launching a man-in-the-middle attack, intercepting passwords and forwarding data 1.1 Ettercap + Net-Creds + driftnet 1.2 Ettercap + Burp Suite 2. Bypassing HTTPS and HSTS 2.1 Ettercap + S…

Read article →
Wireless Attacks

WiFi-Pumpkin: Rogue Wi-Fi Access Point Attack with GUI and rich functionality

Author: Aleksei Miloserdov BeEF dns2proxy GUI hacking Man-In-The-Middle attacks Net-Creds passwords phishing Rogue AP SSLstrip (SSLStrip+) Wireless Attacks

The purpose of attacks with a rogue access point is not WPA passphrase (password of a Wi-Fi network). The attack targets to the transmitted network traffic, which can contain web site login passwords and another sensitive informat…

Read article →
↑