Hacker Software Latest Hacking Tricks 2016

Hack Facebook Account By Cookie Stealing And Session Hijacking Wiith Wireshark
Wireshark Software to capture cookies:
Wireshark is the best free packet sniffer software available today. Actually, it was developed for making a network secure. But, the same software is now used by hackers to test for vulnerability and security loopholes in the network and to attack the network accordingly. Cookie stealing being one of the types of hacks implemented using this Wireshark software.

Requirements:

Cain and Abel : Click Here
Wireshark : Click Here
Firefox 3 (or one compatable with add n edit) : http://www.oldapps.com/firefox.php?old_firefox=59
Add n Edit (cookie editor for firefox) : https://addons.mozilla.org/en-US/firefox/addon/add-n-edit-cookies/
Acess to the network with user you want to hack
Network traffic
Prerequisites: Download and install all above programs. To add “Add n Edit” to your browser just open firefox, go to tools, then click add-ons. you can drag and drop the program from wherever you saved it into the little box that popped up and install it from there.
Below, I have listed steps on how to capture Facebook and other accounts cookies. This will help you to know how Wireshark and Cain-Abel can be used to sniff packets and capture cookies.

First: Gain acess to the Network. Open networks or your own network would be easy but if you have a specific slave you want you should be able to gain acess using Backtrack.
Tip: use reaver to exploit WPS for WPA/WPA2 encryptions, WEPs are easy to crack given time and OPN means there is no password.
Second: Right click Cain and choose ‘run as administrator.’ on the top bar go to ‘configure’ and be sure to select your wireless card/adapter. now click where it says ‘Sniffer’ then this litte button towards the top left:
Next click any empty white box then the blue “+” symbol near the button you pressed just before. choose okay
These are all the devices it was able to detect.
Now we go to APR on the bottom bar. Once again click any empty white box then the blue cross. It’s easiest to just go one by one and choose all possibilities.

Now we have to poison them so we choose the little yellow hazard symbol towards the top left.
we are done here, just minimize Cain for now.
Third: Run wireshark as administrator. On the top bar choose ‘Capture’ then ‘Interfaces.’ Here you will have to choose your interface that is connected to the Network we are sniffing from. if you wait a few seconds you might see some traffic being collected as seen in my photo, just choose that interface b/c thats most likely it.

Wireshark will list and color-code all the traffic it sees for you. To make this simpler we can use the filter to only see the traffic we want, Type “http.cookie” in the filter. (Something to consider is to just filter to “http” and scroll through the entries looking for ones that start with the word “POST” this means that information was submitted to the webpage noted such as a username and a password! so if you see this just look through the details and you should see the info you want, most passwords will be hashed but use this site to decript them:http://www.md5decrypter.co.uk/ )

You can either look through this information manually or use the search function to find what you want. In my case i want to hijack the session of a user on the forumfreerainbowtables.com so i will use the search function (press Ctrl+F, or go to edit -> search) and type in the information i know for sure will be in the entry. if your hijacking someones facebook put ‘facebook’ there. Most of the time to be safe i do not use the first entry i see b/c this will only work if the person is auto logged in, so just go down a few more until you see one you think will work (just use common sense).

What we need are the cookies. Here are what mine look like and how to get there. With practice you will be able to tell which cookies are used for logins and be able to limit failed attempts.

Copy the cookies as value and save them into a notepad (shown in pic above). I would suggest to seperate everywhere you see a “;” bc this suggests that is the begining of the next entry. The text to the left of the = is the name of the cookie and the text to the right is its value.
Final: Open up your firefox browser with Add n Edit enabled. You can get to your add ons by going to tools and they should all be listed in the drop down tab. First go to the website you are hijjacking the session from then open your cookie editor. Should look something like this:

The last thing to do is to change your cookies to match the ones you captured. If the cookies given to you by the site expire (like the ones in my picture do) you will have to delete them and add all the ones we captured earlier in. if they do not expire you can just edit them. Bottom line is all the cookies must match the cookies you captures in the earlier steps EXACTLY! Make sure you do not add any extras and that you did not miss anything. Also all fields must be filled in (Path and Domain as well as Name and Value). My path is “/” and my domain is “.freerainbowtables.com”
mine looks like this:

You are now done, Just close the cookie editor and reload the webpage. If done correctly with the correct cookies you should be logged in as the user you attacked!

Best wifi hacking tricks 2016 with wifi hacker method to hack Wifi network in Ubuntu operating system, Now see the method to do this in Ubuntu.

How To Hack Wifi Passwords in Ubuntu

For this purpose we are going to use Ubuntu. First we have to install air-crack program in O.S

(1) install aircrack

sudo apt-get install aircrack-ng

For hacking passwords in ubuntu , first we have to install air crack program in operating system.

• Install aircrack

Sudo apt-get install aircrack-ng

• For rooting , type “su-“ and type your password.
• Now write the commands in terminal mode:

#iwconfig wlan0 mode monitoring

Note: Do take notice if any kind of error occurs type “#iwconfig” in a terminal to check for your wireless.

• Now scan for a wireless network which will include educational purpose. Now type commands:

#airdump-ng wlan0

(2) You need to go in root first. For this purpose type “su –“ and type your password.

(3) Now type following command in terminal

Code:

# iwconfig wlan0 mode monitoring

Note: If some sort of error occurs type “# iwconfig” in a terminal to check for your wireless.

(4) After that it’s time to scan for a wireless network which we will compromise with educational purpose. This time we will use the command:

Code: # airodump-ng wlan0

(5)  Once you have created one, abort the process with shortcut key : Ctrl+C. Now there is a need to collect information about the network. Firstly, copy the MAC address of the access point which stands for BSSID (example: 00:11:EH:B8:…..). Another point to be noted is to know the channel and it’s current working. (example: currently working under CH-5). Now , hather information with airodump-ng. Write the following code:

#airodump-ng-w wep –c 5 –bbsid 00:11:EH:B8:….wlan0

6.)Now. Open another terminal to use ARP Reply Attack which increases the amount of data packets and gather the initializing vectors or IV of the chosen access points earlier. Write the following code:

#Aireplay-ng -3 –b  00:11:EH:B8:….wlan0

(7) Now again move back to the first terminal and have a look at the data packets. Nearabout 20000 packets have been  collected yet. If it is so, abort both airodump-ng and aireplay-ng. To decode the key of wireless network, we are provided with every information.  This all can be done with aircrack:

#aircrack-ng wep-03.cap

There are several methods out there by which a hacker can gain access to your mails or accounts by hacking them. This article will prove beneficial to you which will help you in safeguarding your online accounts from hacking.

• BRUTE FORCE ATTACK

Hackers can crack any sort of password by brute force attack. This attack involves any number of possible combinations of numbers, letters and special characters until the right password is match. Brute-force attacks can take very long time depending upon the complexity of the password. The cracking time is determined by the speed of computer and complexity of the password.

Countermeasure:

You should you long passwords which are a combination of uppercase lowercase special character and digits. Brute-force attack will take hundreds or even thousands of years to crack such complex and long passwords.

• SOCIAL ENGINEERING

With this method a person can gain access to your password by manipulating to trust him and then you grant your password yourself.  For example, if the hacker was trying to get the password of a co-workers or friends computer, he could call him pretending to be from the IT department and simply ask for his login details. Sometime hackers call the victim pretending to be from bank and ask for their credit cards details. Social Engineering can be used to get someone password, to get bank credentials or any personal information.

Countermeasure:

If someone asks you for a password and pretends to be someone you must first confirm his/her identity by asking few questions. In this way you will not fall in a trap.

• KEYLOGGERS AND RATS

In this method the hacker send keylogger to the victim. With this the hacker has the power of monitoring everything that the victim does on his/her system. Every keystroke is logged including passwords. Moreover hacker can even control the victims computer.

Countermeasure:

If its important use on-screen or virtual keyboard while tying the login. Use latest anti-virus software and keep them updated. Check out below article to know more about Rats and Keyloggers.

• PHISHING

It is the most popular and easiest way to have someone’s account details. In this the hacker sends a fake page that looks just like the original one like of facebook or gmail to the victim.

When someone logins through that fake page the details will be sent to the hacker.

Countermeasure:

Its easy to avoid phishing attacks.  The url of this phishing pages are different from the real one. For example URL of phishing page of facebook might look like facbbook.com (As you can see There are two “b”). Always make sure that websites url is correct.

• RAINBOW TABLE

This table is a list of hashes that has been precomputed for possible combination of characters. Password hash is the password which has been gone through a mathematical algorithm like md5. It is a one way encryption technique in which if once a password is hashed you cannot get back to the original string.  It is almost similar to dictionary attack, the only difference is, in rainbow tables attack hashed characters are used as passwords whereas in dictionary attack normal characters are used as passwords.

Example: ‘hello’ in md5 is 5d41402abc4b2a76b9719d911017c592 and zero length string (“”) is d41d8cd98f00b204e9800998ecf8427e

Countermeasure:

Use long and complex passwords because creation of these table will require a longer time and hug resources.