How to Install Backtrack 5

• Download the Backtrack 5 ISO
• Setting up a Virtual Machine
• Installing Backtrack 5
• Backtrack Login
• (Optional) Creating a Bootable USB Drive

Download the Backtrack 5 ISO

Head over to: http://www.backtrack-linux.org/downloads/

Then click the download button.

From that point onward, you will have the capacity to pick the rendition of backtrack that you need. I will prescribe Backtrack 5 R3 since it is the most up and coming. The window chief is dependent upon you, however I will utilize dwarf. Since I will utilize backtrack in a virtual machine, the 32 bit adaptation will be fine. We need the ISO in light of the fact that we can utilize it on a DVD, a USB streak drive, and introduce on a virtual machine. Coordinate download or deluge download is dependent upon you. The document is minimal more than 3 GBs, so it might take some time contingent upon your web speeds.

Setting up a Virtual Machine

A virtual machine (VM) is the product execution of a physical PC. At the end of the day, it's having another PC on your present PC. On the off chance that you have never utilized a virtual machine it is a decent time to begin. VMs are fantastic with regards to practice labs which we will get to in another area. 

To begin, will need to get VM programming. There are many out there, yet I will list a couple of famous ones. 

1. VMware Workstation 9 (Windows/Linux) – $249.00 USD
2. VMware Player (Windows/Linux)  – Free
3. VirtualBox (Windows/Mac/Linux) – Free

Whichever VM programming you run with, ensure it has an approach to coordinate with different VMs. In the event that you would prefer not to spend the cash, run with VirtualBox. In the event that you plan to quit fooling around with infiltration testing, you might need to consider getting a VMware Workstation permit. It is brimming with valuable devices and treats, for example, sharing VMs and remote get to and simple to work with. 

I will be utilize VMware Workstation, however these projects are fundamentally the same as in capacity. You shouldn't experience difficulty taking after along on the off chance that you are utilizing something else. 

Subsequent to everything is introduced and running, click "Make new virtual machine". 

Next you’re going to select “Installer disc image file” then browse for the backtrack 5 ISO.

Select the operating system as linux, and the version as Ubuntu.

Give the virtual machine a name such as “Backtrack 5 R3” and select a location for where you want to save the virtual machine files.

At the point when asked the amount you need the virtual plate drive to be, you need no less than 25 GB. This will be the most requesting prerequisite of Backtrack 5. I went and utilized 40 GB for my virtual machine. In spite of the fact that the backtrack-linux wiki says you require no less than 20 GB, I discovered you will come up short on space when you introduce refreshes or whatever other programming. At that point, you will have the alternative of putting away the virtual plate as a solitary record, or split into numerous documents. Making a virtual plate as a solitary document will dispense the greater part of the space immediately. Part into numerous documents implies the drive records will develop as you need them. So if your hard drive space is restricted on your host framework, run with numerous documents. On the off chance that you have a gigantic drive, and not stressed over space, run with a solitary document.

And that’s it! The virtual machine is ready to go. I left mine at 1 GB of ram, if you are limited of memory, you can change this in the virtual machine settings. The recommended minimum memory is 512 MB, however you can try lower if you need to.

Power on the virtual machine and you will be ready to install Backtrack.

Installing Backtrack 5

On the off chance that you are introducing on a hard drive, you should copy the Backtrack 5 ISO on to a DVD or a USB Drive. For bearings on introducing to a USB Drive. 

Initially turn on your machine, then embed your DVD or USB Drive. At that point press the key that permits you to choose your boot drive. You may need to go into the profiles to empower this. Regularly, F12 will work. Select either your DVD drive, or your USB Drive to boot from it. You ought to see a screen this way: 

After a few moments, you will see Backtrack Live CD menu. Press enter on Backtrack Text – Default Boot Text Mode.

Wait about 10 seconds, and you will come to Backtrack shell console. Type the command “startx” to load the GUI.

After another few moments, you will come to the desktop of Backtrack. Double click on the “Install Backtrack” to begin the install process.

After you select your time zone, and language, you then have to partition your drive. If you are using a virtual machine, go ahead and use the whole drive. If you are dual booting, you will have to specify your partition for your two operating systems.

Continue through the installer, and then click finish. Backtrack will then install on to your system. This process takes about 10-15 minutes.

After it is finish, restart your system.

Backtrack 5 Login

After restarting, you will come to a login screen like this:

The default root name for Backtrack is “root” and the password is “toor”. After typing in the root username and password, you will come back to the Backtrack shell. Type “startx” to enter the GUI desktop.

Creating a Bootable USB Drive

Required Items:

• A USB flash drive with minimum space of 4 GB.
• Backtrack 5 ISO
• UNetbooin – http://unetbootin.sourceforge.net/

UNetbootin is a program that allows you to create bootable USB drives for linux distros and Windows. UNetbootin will download the distribution or use an ISO file you selected from your hard drive.

1. Once UNetbootin is downloaded you can run it by double clicking (Windows)
2. Plug in your USB Drive.
3. Start UNetbooin and select the “diskimage” option, then select your Backtrack 5 ISO.
4. Select your USB Drive, then click “OK”.
   WARNING: This will format your USB Drive and remove all previous data.

Now you should be able to boot off of your USB Drive with Backtrack 5.

[Read More...]

Protect Your Email and Other Online Accounts from Hackers

In this post, I will teach you how to protect your email account from getting hacked in a very simple and easy to understand manner. The tips provided in this post not only applies to your email account, but can also be used to protect any other online account such as your bank logins, Paypal or your social networking account. Nowadays, I get a lot of emails from people where most of them ask me for help on getting back their email accounts. This is because, they have simply fallen victims and have got their email accounts hacked!

Today, it is a common problem for many Internet users to have their email accounts compromised by hackers. But this arises one BIG question in my mind!

“Is it so easy to hack an email account? OR Is it so difficult for people to protect their email account from getting hacked?”.

The single answer to these two questions is “Absolutely NOT!“. It is neither easy to hack an email nor difficult to protect an email account from being hacked.

If this is the case, then what is the reason for many people to lose their accounts?

The answer is very simple. They do not know how to protect themselves from getting hacked! In fact, most of the people who lose their online accounts to hackers are not the victims of hacking but the victims of trapping. They get hacked not because they are hacked by some expert hackers, but because they are fooled to such an extent that they themselves give away their password.

Are you confused? If so continue reading and you’ll come to know…

Now I will mention some of the most common pitfalls by which people often fall victims and get their accounts compromised. In addition to this, I will also give information on how to avoid these pitfalls and stay protected.

1. Website Spoofing (Phishing Scam)

Website spoofing, also known as phishing is the act of creating a fake website with the intention of misleading the visitors. The website will be created by a different person or organization (other than the original) especially for the purpose of cheating. Normally, the website will adopt the design of the target website and sometimes has a similar URL.

For example a spoofed website of Yahoo.com appears exactly same as Yahoo Website. So, most people would believe this as the original site and lose their passwords. The main intention of spoofed websites is to fool users and take away their login details. For this, the spoofed sites offer fake login pages. These fake login pages resemble the original login pages of sites like Yahoo, Gmail or Facebook. Since they resemble the original login page, people believe that it is true and give away their login details to the hackers by trying to login to their accounts.

Solution:

• Never try to login/access your online account from the sites other than the original site.
• Always type the URL of the site in the address bar to get into the site. Do not click on a hyperlink to enter the site.

2. By using Keylogger (Spyware)

The other commonly used method to steal password is by using a Keylogger. A Keylogger is nothing but a spyware. The detailed description of keylogger and its usage is discussed in the post What Is Keylogger And How To Be Safe From Keyloggers?. If you read this post you’ll come to know that it is too easy to steal the password using a keylogger program. If you just access your account from a computer installed with keylogger, you definitely lose your password. This is because the keylogger records each and every keystroke that you type on the computer’s keyboard.

Solution:

Protecting yourselves from a keylogger scam is very easy. Just install a good anti-spyware program and update it regularly. This keeps your PC secure from a keylogger. For more information.

3. Accessing your Email from a Public Place

Do you access your email from public places like cyber cafes? If so, you are definitely under the risk of losing your password. In fact, many people lose their email account in cyber cafes. For the owner of the cyber cafe, it is just a cakewalk to steal your password. For this, all he need to do is install a keylogger program on his computers. So, when you login to your email account from this PC, you give away your password to the cafe owner. Also, there are many Remote Administration Tools (RATs) which can be used to monitor your browsing activities in real time.

This doesn’t mean that you should never use cyber cafes for surfing the Internet. I know, not all the cyber cafe owners will be so wicked. However, it is recommended not to use public places for accessing confidential information. If it comes to the matter of security never trust anyone, not even your friend. I always use my own computer to login to my accounts so as to ensure the safety.

So with this I conclude my post and assume that I have helped my readers to protect their online accounts from being hacked. Please pass your comments. 

[Read More...]

How a Domain Name is Hijacked and How to Protect it

In this post I will tell you about how the domain names are hacked and how they can be protected. The act of hacking domain names is commonly known as Domain Hijacking. For most of you, the term “domain hijacking” may seem to be like an alien. So, let me first tell you what domain hijacking is all about.

Domain hijacking is a process by which Internet Domain Names are stolen from its legitimate owners. It is also known as domain theft. Before we can proceed to know how to hijack domain names, it is necessary to understand how the domain names operate and how they get associated with a particular web server (website).

The Operation of a Domain Name is as Follows:

Any website say for example gohacking.com consists of two parts. The domain name (gohacking.com) and the web hosting server where the files of the website are actually hosted. In reality, the domain name and the web hosting server (web server) are two different parts and hence they must be integrated before a website can operate successfully. The integration of domain name with the web hosting server is done as follows:

1. After registering a new domain name, we get a control panel where in we can have a full control of the domain.
2. From this domain control panel, we point our domain name to the web server where the website’s data (web pages, scripts etc.) are actually hosted.

For a clear understanding let me take up a small example:

John registers a new domain called “abc.com” from an X domain registration company. He also purchases a hosting plan from Y hosting company. He uploads all of his files (.html, .php, javascripts etc.) to his web server (at Y). From the domain control panel (of X) he configures his domain name “abc.com” to point to his web server (of Y).

Now, whenever an Internet user types “abc.com”, the domain name “abc.com” is resolved to the target web server and the web page is displayed. This is how a website actually works.

What Happens When a Domain Name is Hijacked?

Now, let us see what happens when a domain name is hijacked. To hijack a domain name, you just need to gain access to the domain control panel and point the domain name to some other web server other than the original one. So, to hijack a domain you need not gain access to the target web server.

For example, a hacker gets access to the domain control panel of  “abc.com”. From here the hacker re-configures the domain name to point it to some other web server (Z). Now whenever an Internet user tries to access “abc.com” he is taken to the hacker’s website (Z) and not to John’s original site (Y).

In this case the John’s domain name (abc.com) is said to be hijacked.

How the Domain Names are Hijacked?

To hijack a domain name, it is necessary to gain access to the domain control panel of the target domain. For this you need the following ingredients:

1. The domain registrar name for the target domain.
2. The administrative email address associated with the target domain.

These information can be obtained by accessing the WHOIS data of the target domain. To get access to the WHOIS data, go to whois.domaintools.com, enter the target domain name and click on Lookup. Once the whois data is loaded, scroll down and you’ll see Whois Record. Under this, you’ll get the “Administrative contact email address”.

To get the domain registrar name, look for the words something like: “Registered through:: XYZ Company”. Here XYZ Company is the domain registrar. In case if you do not find this, scroll up and you’ll see ICANN Registrar under the “Registry Data”. In this case, the ICANN registrar is the actual domain registrar.

The administrative email address associated with the domain is the backdoor to hijack the domain name. It is the key to unlock the domain control panel. So, to take full control of the domain, the hacker will have to hack the administrative email associated with it. 

Once the hacker takes full control of this email account, he will visit the domain registrar’s website and click on forgot password in the login page. There, he will be asked to enter either the domain name or the administrative email address to initiate the password reset process. Once this is done, all the details to reset the password will be sent to the administrative email address.

Since the hacker has the access to this email account, he can easily reset the password of domain control panel. After resetting the password, he logs into the control panel with the new password and from there he can hijack the domain within minutes.

How to Protect the Domain Name from Getting Hijacked?

The best way to protect the domain name is to protect the administrative email account associated with the domain. If you loose this email account, you loose your domain. You can read my earlier post on how to protect your email account from being hacked. Another best way to protect your domain is to go for a private domain registration.

When you register a domain name using the private registration option, all your personal details such as your name, address, phone and administrative email address are hidden from the public.

whenever a hacker performs a WHOIS lookup for your domain name, he will not be able to find your name, phone or the administrative email address. Thus, the private registration provides an extra security and protects your privacy. Even though it costs a few extra bucks, is really is worth for its advantages.

I hope that this article has helped you. You can express your feedback through comments.

[Read More...]

How to Send Spoofed Emails Anonymously

Most of us are very curious to know a method to send spoofed emails to our friends and family for fun. But the question is, is it possible to send spoofed emails in spite of the advanced spam filtering technology adopted by email service provides like Gmail, Yahoo etc?

The answer is YES, it is still possible to bypass their spam filters and send spoofed emails anonymously to your friends or family members. For example, you can send an email to your friend with the following sender details.

From: Bill Gates <billg@microsoft.com>

The art of sending this kind of email is known as Email Spoofing. One of the easy way to send a spoofed email is by using our own local SMTP server. In the past, I have tried SMTP servers like QK SMTP server. This method used to work successfully in those days, but as of now, it has a very low success rate since Gmail and Yahoo (all major email service providers) blocks the emails that are sent directly from a home computer.

How to Send Spoofed Emails?

In this post, I have come up with a new method of sending spoofed emails to anyone without having to worry about being blocked or filtered as spam. In order to accomplish this, all you’ve to do is use a “relay server” while sending the spoofed emails.

What is a Relay Server?

In simple words, a relay server is an SMTP Server that is trusted by major companies as an authorized sender of the email. So, when you send an email using a relay server, the email service providers like Yahoo and Gmail blindly accept the emails and deliver it to the inbox of the recipient. If the SMTP server is not authorized, Google and Yahoo will reject all the emails sent from this SMTP server. This is the reason for which using our own SMTP server to send emails fail.

So, How to Find a Relay Server?

Now, all we have to do is find a trusted SMTP server so as to send spoofed emails successfully. Usually, all the emails that are sent from web hosting providers are trusted and authorized. So, you have to find a free web hosting provider that allows you to send emails. But, most of the free web hosts disable the Mail feature and do not allow the users to send emails. This is done just to avoid spamming. However, all the paid hosting plans allow you to send any number of emails. Once you find a hosting service that allows to send emails from their servers, it’s just a cakewalk to send anonymous emails. All we have to do is just modify the email header to insert a fake From: address field into it.

I have created a PHP script that allows you to send emails from any name and email address of your choice. Here is a step-by-step procedure to setup your own anonymous email sender script:

1. Go to X10 Hosting  and register a new account.
2. Download my script from the following link:
   Download Anonymous Email Sender Script
3. Login to your FreeWebHostingArea Account and click on File Manager.
4. Upload the sendmail.php, pngimg.php and bg1.PNG files to the server.
5. Set permissions for sendmail.php, pngimg.php and bg1.PNG to 777.
6. Now type the following URL:
   http://yoursite.x10hosting.com/sendmail.php
   NOTE: yoursite must be substituted by the name of the subdomain that you have chosen during the registration process.
7. Use the script to send spoofed emails anonymously to your friends and have fun. Enjoy!!!

Tell me whether it worked or not. Please pass your comments.

WARNING: ALL THE INFORMATION PROVIDED IN THIS POST ARE FOR EDUCATIONAL PURPOSES ONLY. I AM NOT RESPONSIBLE FOR ANY MISUSE.

[Read More...]

Ultimate way to hack your friend’s WhatsApp?? (only for education purpose)

Hi friends, whatsapp is best messagening app for mobile which allows you to send messages, pics, videos etc with fast speed. Whatsapp is fast,reliable and easy to use.Whatsapp have 700 million users wordwide.Its popularity is increasing day by day.

so today i am going to share you a way by which you can hack your friend’s whatsapp.So just follow the steps–>

step 1–>

first of all, go to your microSD card and click on whatsapp and then on Database.

step 2–>

here in database folder you find 2 files–>
1.-mgstore-yyyy..dd..db.crypt
2.-msgstore.db.crypt

step 3–>

now after this you have to take these 2 same files from your friends mobile.

step 4–>

now just open these files with any text editor. now you can able to read your friends private messages & conversations.

–> So that’s how you can hack your friend’s whatsapp
–> Stay updated..if you want more tricks then please share it on Facebook,twitter, Google+

NOTE–>

This is Only for educational purpose ! i will not responsable for any  missuse of this trick. 

[Read More...]

How to Use Google for Hacking

Google serves almost 80 percent of all the search queries on the Internet, proving itself as the most popular search engine. However, Google makes it possible to reach not only the publicly available information resources, but also gives access to some of the most confidential information that should never have been revealed.

In this post, you will find the information on how to use Google for exploiting security vulnerabilities that exists within many websites. The following are some of the ways to use Google for hacking:

1. Using Google to Hack Security Cameras:

There exists many security cameras that are used for monitoring places like parking lots, college campus, road traffic etc. With Google, it is possible to hack these cameras so that you can view the images captured by them in real time. For this, all you have to do is just use the following search query in Google. Type in the Google search box exactly as given below and hit enter:

inurl:”viewerframe?mode=motion”

Click on any of the search results (Top 5 recommended) and you will gain access to the live camera which has full controls. You will see something as follows:

As you can see in the above screenshot, you now have access to the Live cameras which work in real-time. You can also move the cameras in all the four directions, perform actions such as zoom in and zoom out. This camera has really a less refresh rate. But there are other search queries through which you can gain access to other cameras which have faster refresh rates. In order to access them, just use the following search query:

intitle:”Live View / – AXIS”

Now, click on any of the search results to access a different set of live cameras. Thus, you have hacked Security Cameras using Google.

2. Using Google to Hack Personal and Confidential Documents:

Using Google, it is possible to gain access to an email repository containing CV of hundreds of people which were created when applying for their jobs. The documents containing their Address, Phone, DOB, Education, Work experience etc. can be found just in seconds.

intitle:”curriculum vitae” “phone * * *” “address *” “e-mail”

You can gain access to a list of .xls files (excel documents) which contains contact details including email addresses of large group of people. To do so, type the following search query and hit enter:

filetype:xls inurl:”email.xls”

Also, it is possible to gain access to the documents potentially containing information on bank accounts, financial summaries and credit card numbers using the following search query:

intitle:index.of finances.xls

3. Hacking Google to Gain Access to Free Stuffs:

Ever wondered how to hack Google for free music or eBooks. Well, here is a way to do that. To download free music, just enter the following query on Google search box and hit enter.

“?intitle:index.of?mp3 eminem“

Now, you’ll gain access to the whole index of Eminem album where in you can download the songs of your choice. Instead of eminem you can substitute the name of your favorite album. To search for the eBooks all you have to do is replace “eminem” with your favorite book name. Also replace “mp3″ with “pdf” or “zip” or “rar”.

I hope you enjoy using Google for hacking stuffs on the Internet. If you’ve liked this post, please pass your comments. Cheers!

[Read More...]

Learn How to Hack – Step by Step Guide

If you are a beginner and need to learn how to hack, the information provided in this post can surely help you out. For the sake of simplicity and easy understanding I have written this post in the form of question and answer with some of the frequently asked questions for beginners and enthusiasts.

How can I Learn to Hack as a Beginner?

If you are a beginner and have little or no knowledge of hacking, the best way to learn is to start from the basics. Don’t try to hack something big or attempt for something that is not easily possible. Instead try to spend time in mastering the basic concepts that forms a foundation for your further learning. To successfully learn how to hack, the following are some of the steps that you can take:

Step-1: Explore the Fundamentals

If you are new to hacking or have little knowledge of computers, you can start off by exploring the fundamental concepts such as operating system basics (Windows and Linux), computer networking, network protocols, firewalls and how each of these stuffs work etc. You can make use of resources and websites on the Internet to source your knowledge. If you are more interested in exploring any of these stuffs in detail, you can pick up a book that deals with your favorite topic in a much detailed fashion.

Step-2: Find a Good Source that will Teach How to Hack in Simple Steps

Since the information presented on websites and other free Internet resources are fragmented and do not give a holistic view of the concept, it is highly necessary to find a good source of knowledge that will teach you how to hack in a step-by-step easy to follow manner. For this I recommend the book Hacking Secrets Exposed which is a perfect source for learning how to hack.

The following are some of the reasons why I recommend this book for you:

• With this book you will learn to hack right from the basics in a very simple step-by-step manner.
• The book is designed for beginners which is extremely simple and easy to follow.
• You do not need to have any prior knowledge of hacking.
• Get latest hacking techniques with practical examples.
• You can easily apply the knowledge gained to hack like a pro!

---

Step-3: Learn Programming

If you really want to hack like an elite hacker, programming is something that you can’t skip down. Even though there exists a lot of ready made tools and programs that let you hack with ease, it is always better to have some basic understanding of programming languages like HTML, PHP and JavsScript so that you will be in a better position to figure out how they work and what’s going on in the background. Nevertheless, one can always be a good hacker without knowing how to program at all.

How Long does it Take to Learn Hacking?

This question is hard to answer as hacking is not something that can be mastered overnight. It requires knowledge, skills, creativity, dedication and of course the time. For your hack attempts to be successful, you should adopt a hacker’s mindset and start thinking just like the hacker. Everyone can master it and hack like a pro provided they learn it from the basics and build a solid foundation. So, to become a hacker all you need is passion to learn, perseverance and a good source of knowledge like Hacking Secrets Exposed that will guide you through various concepts right from the basics.

[Read More...]