Port Scanning Tutorial

Port Scanning is one of the most popular techniques used by hackers to discover services that can be compromised.

• A potential target computer runs many ’services’ that listen at ‘well-known’ ‘ports’.
• By scanning which ports are available on the victim, the hacker finds potential vulnerabilities that can be exploited.
• Scan techniques can be differentiated broadly into Vanilla, Strobe, Stealth, FTP Bounce, Fragmented Packets, Sweep and UDP Scans.

Port Scanning Techniques

Port Scanning Techniques can be broadly classified into:

• Open scan
• Half- open scan
• Stealth scan
• Sweeps
• Misc

Commonly used tools for port scanning

1.Tool: SuperScan 3.0

 

 

2. Tool: NMap (Network Mapper)

3. Tool: NetScan Tools Pro 2003

4. Tool: ipEye, IPSecScan

Blogged with the Flock Browser

Port Scanning Tutorial

Port Scanning is one of the most popular techniques used by hackers to discover services that can be compromised.

• A potential target computer runs many ’services’ that listen at ‘well-known’ ‘ports’.
• By scanning which ports are available on the victim, the hacker finds potential vulnerabilities that can be exploited.
• Scan techniques can be differentiated broadly into Vanilla, Strobe, Stealth, FTP Bounce, Fragmented Packets, Sweep and UDP Scans.

Port Scanning Techniques

Port Scanning Techniques can be broadly classified into:

• Open scan
• Half- open scan
• Stealth scan
• Sweeps
• Misc

Commonly used tools for port scanning

1.Tool: SuperScan 3.0

 

 

2. Tool: NMap (Network Mapper)

3. Tool: NetScan Tools Pro 2003

4. Tool: ipEye, IPSecScan

Blogged with the Flock Browser

Port Scanning Tutorial

Port Scanning is one of the most popular techniques used by hackers to discover services that can be compromised.

• A potential target computer runs many ’services’ that listen at ‘well-known’ ‘ports’.
• By scanning which ports are available on the victim, the hacker finds potential vulnerabilities that can be exploited.
• Scan techniques can be differentiated broadly into Vanilla, Strobe, Stealth, FTP Bounce, Fragmented Packets, Sweep and UDP Scans.

Port Scanning Techniques

Port Scanning Techniques can be broadly classified into:

• Open scan
• Half- open scan
• Stealth scan
• Sweeps
• Misc

Commonly used tools for port scanning

1.Tool: SuperScan 3.0

 

 

2. Tool: NMap (Network Mapper)

3. Tool: NetScan Tools Pro 2003

4. Tool: ipEye, IPSecScan

Blogged with the Flock Browser

Port Scanning Tutorial

Port Scanning is one of the most popular techniques used by hackers to discover services that can be compromised.

• A potential target computer runs many ’services’ that listen at ‘well-known’ ‘ports’.
• By scanning which ports are available on the victim, the hacker finds potential vulnerabilities that can be exploited.
• Scan techniques can be differentiated broadly into Vanilla, Strobe, Stealth, FTP Bounce, Fragmented Packets, Sweep and UDP Scans.

Port Scanning Techniques

Port Scanning Techniques can be broadly classified into:

• Open scan
• Half- open scan
• Stealth scan
• Sweeps
• Misc

Commonly used tools for port scanning

1.Tool: SuperScan 3.0

 

 

2. Tool: NMap (Network Mapper)

3. Tool: NetScan Tools Pro 2003

4. Tool: ipEye, IPSecScan

Blogged with the Flock Browser

HOW TO DE-CRYPT ENCRYPTED FILES ON WINDOWS XP.

Login as Administrator

Go to Start/Run and type in cmd and click OK.
At the prompt type cipher /r:Eagent and press enter
This prompt will then display:
Please type in the password to protect your .PFX file:
Type in your Administrator password
Re-confirm your Administrator password
The prompt will then display
Your .CER file was created successfully.
Your .PFX file was created successfully.
The Eagent.cer and Eagent.pfx files will be saved in the current directory that is shown at the command prompt. Example: The command prompt displays
C:\Documents and Settings\admin> the two files are saved in the admin folder. (For security concerns, you should house the two files in your Administrator folder or on a floppy disk).

Go to Start/Run and type in certmgr.msc and click OK. This will launch the Certificates Manager. Navigate to Personal and right click on the folder and select All Tasks/Import. The Certificate Import Wizard will appear. Click Next. Browse to the C:\Documents and Settings\admin folder. In the Open dialog box, change the Files of Type (at the bottom) to personal Information Exchange (*.pfx,*.P12). Select the file Eagent.pfx and click Open. Click Next. Type in your Administrator password (leave the two checkboxes blank) and click Next. Make sure the Radio button is active for the first option (Automatically select the certificate store based on the type of certifcate). Click Next. Click Finish. (You'll receive a message that the import was successful). To confirm the import, close Certificates Manager and re-open it. Expand the Personal folder and you will see a new subfolder labeled Certificates. Expand that folder and you will see the new entry in the right side column. Close Certificate Manager.

Go to Start/Run and type in secpol.msc and click OK. This will launch the Local Security Policy. Expand the Public Key Policies folder and then right click on the Encrypted File System subfolder and select Add Data Recovery Agent... The Wizard will then display. Click Next. Click the Browse Folders... button. Browse to the C:\Documents and Settings\admin folder. Select the Eagent.cer file and click Open. (The wizard will display the status User_Unknown. That's ok). Click Next. Click Finish. You will see a new entry in the right side column. Close the Local Security Policy.
You, the Administrator are now configured as the default Recovery Agent for All Encrypted files on the Local Machine.
To Recover Encrypted files: Scenario #1
If you have completed the above steps BEFORE an existing user encrypted his/her files, you can log in to your Administrator account and navigate to the encrypted file(s). Double click on the file(s) to view the contents.
Scenario #2
If you have completed the above steps AFTER an existing user has already encrypted his/her files, you must login to the applicable User's User Account and then immediately logout. Next, login to your Administrator account and navigate to the encrypted file(s). Double click on the file(s) to view the contents.
*Warning Do not Delete or Rename a User's account from which will want to Recover the Encrypted Files. You will not be able to de-crypt the files using the steps outlined above.

HOW TO DE-CRYPT ENCRYPTED FILES ON WINDOWS XP.

Login as Administrator

Go to Start/Run and type in cmd and click OK.
At the prompt type cipher /r:Eagent and press enter
This prompt will then display:
Please type in the password to protect your .PFX file:
Type in your Administrator password
Re-confirm your Administrator password
The prompt will then display
Your .CER file was created successfully.
Your .PFX file was created successfully.
The Eagent.cer and Eagent.pfx files will be saved in the current directory that is shown at the command prompt. Example: The command prompt displays
C:\Documents and Settings\admin> the two files are saved in the admin folder. (For security concerns, you should house the two files in your Administrator folder or on a floppy disk).

Go to Start/Run and type in certmgr.msc and click OK. This will launch the Certificates Manager. Navigate to Personal and right click on the folder and select All Tasks/Import. The Certificate Import Wizard will appear. Click Next. Browse to the C:\Documents and Settings\admin folder. In the Open dialog box, change the Files of Type (at the bottom) to personal Information Exchange (*.pfx,*.P12). Select the file Eagent.pfx and click Open. Click Next. Type in your Administrator password (leave the two checkboxes blank) and click Next. Make sure the Radio button is active for the first option (Automatically select the certificate store based on the type of certifcate). Click Next. Click Finish. (You'll receive a message that the import was successful). To confirm the import, close Certificates Manager and re-open it. Expand the Personal folder and you will see a new subfolder labeled Certificates. Expand that folder and you will see the new entry in the right side column. Close Certificate Manager.

Go to Start/Run and type in secpol.msc and click OK. This will launch the Local Security Policy. Expand the Public Key Policies folder and then right click on the Encrypted File System subfolder and select Add Data Recovery Agent... The Wizard will then display. Click Next. Click the Browse Folders... button. Browse to the C:\Documents and Settings\admin folder. Select the Eagent.cer file and click Open. (The wizard will display the status User_Unknown. That's ok). Click Next. Click Finish. You will see a new entry in the right side column. Close the Local Security Policy.
You, the Administrator are now configured as the default Recovery Agent for All Encrypted files on the Local Machine.
To Recover Encrypted files: Scenario #1
If you have completed the above steps BEFORE an existing user encrypted his/her files, you can log in to your Administrator account and navigate to the encrypted file(s). Double click on the file(s) to view the contents.
Scenario #2
If you have completed the above steps AFTER an existing user has already encrypted his/her files, you must login to the applicable User's User Account and then immediately logout. Next, login to your Administrator account and navigate to the encrypted file(s). Double click on the file(s) to view the contents.
*Warning Do not Delete or Rename a User's account from which will want to Recover the Encrypted Files. You will not be able to de-crypt the files using the steps outlined above.

How To Ontain IP Address Of A Person

In many cases, it's desired to know the IP address of someone in the reconnaissance phase. The first question to ask is what information do I have about this person. In most cases it's possible that you have the email or IM of the target. First let's discuss the methods:

Method #0x01

if you have a web server hosted someplace where you can see its logs then it's very easy to send someone a URL of an image or any webpage hosted on your web server (http://123.123.123.123/veryfunnyimage.jpg) whenever this page is visited the web server keeps a log of who visited that page (IP address, time, browser, OS ... and lots of more info) where you can check later to collect IP addresses. if

Method #0x02

sometimes people get freaked out from addresses that have ip addresses in the URL so having your webserver with a domain name would really help the person you sent the URL to press on the link (www.mywebsite.com/veryfunnyimage.jpg)

Method #0x03

Some paranoid people don't open links to unknown sites. so here comes the cool trick. you can embed the image in a post of yours in a known site that allows HTML tags with image sources like < img src = (your image URL). in this case the URL you are going to send to the person is a link to a known website but the website contains another link to your web server. And whenever someone views this page on the known website, the "img src" link is invoked and voila!, you have a log entry on your webserver.

Method #0x04

Some Ultra paranoid people don't open links at all!! for these people I use my old trick. I send an email to the target that looks important to him (depending on the target actually and what's important to him). This email is in HTML format and contains a tag that links to an image on my webserver (probably a white image not to attract attention). Now upon merely opening the email, my webserver is invoked and a log entry is saved about the persons current IP address.

Note that this method only works if the email client allows images to be displayed (gmail disable that by default)

Method #0x05

A more faster approach is IM. If you have the IM of the target, then it's possible that you try to send him a file (not malicious, a picture or smthng). upon sending the file, a direct connection is established between you and the target. with a simple connection monitoring application (e.g.netstat on windows), you can know the Ip address.

Method #0x06

Some paranoid people don't accept files! so another trick in case of MSN is background sharing. the default for MSN is to accept backgrounds shared by others. Actually background sharing performs file sending if the background is not one of the default backgrounds. So the trick is to set your background for the IM to a cool pic from your computer and share it. if the default setting was not altered on your target's IM, then he will automatically accept it right away and a connection is opened. here comes again the connection monitoring app where you can identify the new connection and extract the IP add of the target.

How To Ontain IP Address Of A Person

In many cases, it's desired to know the IP address of someone in the reconnaissance phase. The first question to ask is what information do I have about this person. In most cases it's possible that you have the email or IM of the target. First let's discuss the methods:

Method #0x01

if you have a web server hosted someplace where you can see its logs then it's very easy to send someone a URL of an image or any webpage hosted on your web server (http://123.123.123.123/veryfunnyimage.jpg) whenever this page is visited the web server keeps a log of who visited that page (IP address, time, browser, OS ... and lots of more info) where you can check later to collect IP addresses. if

Method #0x02

sometimes people get freaked out from addresses that have ip addresses in the URL so having your webserver with a domain name would really help the person you sent the URL to press on the link (www.mywebsite.com/veryfunnyimage.jpg)

Method #0x03

Some paranoid people don't open links to unknown sites. so here comes the cool trick. you can embed the image in a post of yours in a known site that allows HTML tags with image sources like < img src = (your image URL). in this case the URL you are going to send to the person is a link to a known website but the website contains another link to your web server. And whenever someone views this page on the known website, the "img src" link is invoked and voila!, you have a log entry on your webserver.

Method #0x04

Some Ultra paranoid people don't open links at all!! for these people I use my old trick. I send an email to the target that looks important to him (depending on the target actually and what's important to him). This email is in HTML format and contains a tag that links to an image on my webserver (probably a white image not to attract attention). Now upon merely opening the email, my webserver is invoked and a log entry is saved about the persons current IP address.

Note that this method only works if the email client allows images to be displayed (gmail disable that by default)

Method #0x05

A more faster approach is IM. If you have the IM of the target, then it's possible that you try to send him a file (not malicious, a picture or smthng). upon sending the file, a direct connection is established between you and the target. with a simple connection monitoring application (e.g.netstat on windows), you can know the Ip address.

Method #0x06

Some paranoid people don't accept files! so another trick in case of MSN is background sharing. the default for MSN is to accept backgrounds shared by others. Actually background sharing performs file sending if the background is not one of the default backgrounds. So the trick is to set your background for the IM to a cool pic from your computer and share it. if the default setting was not altered on your target's IM, then he will automatically accept it right away and a connection is opened. here comes again the connection monitoring app where you can identify the new connection and extract the IP add of the target.

Track The Location Of A BSNL Number

Wanna know Address of the girl you like?, or address of your friend?. It is so easy to trace the addresses, just you need is their phone number.


EXAMPLE: For tracing the address of a number located in Madhya Pradesh (India) just log in to http://www.bsnl.co.in/onlinedirectory.htm

After logging in, select the area (city) to which the phone number belong and then proceed further.

In the option "Search by" , select Telephone number. select the station to which the phone no. belongs and finally write the phone number in the "Search key field" . In this way the address of that particular number will be traced.

For selecting any other state of India, log on to http://www.bsnl.co.in/index.html. In the Right hand side you see the "BSNL units" option (above Username field), select your state from the menu and then proceed further.

NOTE : Try both, number including (2) as well as number excluding (2) as a prefix.

Track The Location Of A BSNL Number

Wanna know Address of the girl you like?, or address of your friend?. It is so easy to trace the addresses, just you need is their phone number.


EXAMPLE: For tracing the address of a number located in Madhya Pradesh (India) just log in to http://www.bsnl.co.in/onlinedirectory.htm

After logging in, select the area (city) to which the phone number belong and then proceed further.

In the option "Search by" , select Telephone number. select the station to which the phone no. belongs and finally write the phone number in the "Search key field" . In this way the address of that particular number will be traced.

For selecting any other state of India, log on to http://www.bsnl.co.in/index.html. In the Right hand side you see the "BSNL units" option (above Username field), select your state from the menu and then proceed further.

NOTE : Try both, number including (2) as well as number excluding (2) as a prefix.

How To Detect Traceroute Attempts on your System

You can detect that an attacker is performing a traceroute on your system, if you see the following symptoms:

1. If you observe port scans on very high UDP ports. This symptom means that the attacker has performed a traceroute on your system. However, it could also mean a simply port scan. Either way, it signifies the fact that your system is being scanned.

2. If the packet-monitoring tool installed in your network, picks up several outgoing TTL-exceeding messages, then it is yet another sign that someone is doing a traceroute on your system.

3. If in these log files, you also observer an outgoing ICMP port unreachable error message, then it means that since a traceroute was done on your system and as the target system i.e. your system, was reached, it responded with this error message.

You can also find our more information on the attacker (if he performs a traceroute on your system) by simply studying the sniffer log files. If you observer the TTL values, then we can easily figure out the following information on the attacker by making use of OS detection techniques discussed earlier in this white paper:

1. The Operating System running on the attacker’s target system.
2. Number of hops away, the attacker is from you.

How To Detect Traceroute Attempts on your System

You can detect that an attacker is performing a traceroute on your system, if you see the following symptoms:

1. If you observe port scans on very high UDP ports. This symptom means that the attacker has performed a traceroute on your system. However, it could also mean a simply port scan. Either way, it signifies the fact that your system is being scanned.

2. If the packet-monitoring tool installed in your network, picks up several outgoing TTL-exceeding messages, then it is yet another sign that someone is doing a traceroute on your system.

3. If in these log files, you also observer an outgoing ICMP port unreachable error message, then it means that since a traceroute was done on your system and as the target system i.e. your system, was reached, it responded with this error message.

You can also find our more information on the attacker (if he performs a traceroute on your system) by simply studying the sniffer log files. If you observer the TTL values, then we can easily figure out the following information on the attacker by making use of OS detection techniques discussed earlier in this white paper:

1. The Operating System running on the attacker’s target system.
2. Number of hops away, the attacker is from you.

How To Increase Ur Blog Traffic

When we talk about the advantages of a blog always mentions the ease with which you can create. While this is true, after opening the blog the road is no longer as clear as we talk about 10 things you should do after installing Wordpress and now plays talk about the 10 things you should do after opening a blog on Blogger.

1. Write a description of your blog.

Go to the tab "Settings" and the "Basic" find the field to fill to give a description to your blog. This is useful for new visitors to your blog and can be for search engines.
2. Look for a good template.

There are several sites with templates blogger where you can find a great variety of designs. Not only base your choice on the chart (headers, buttons, icons, etc.) but also in the structure (number of columns, accessibility, etc.) and always remember to read the instructions on each template as many times are important for proper display the same.
3. Buy a domain and use it with your blog.

I have always said that a domain should be the first investment of a blogger and seeing that for less than $ 10 can have its own name with many advantages, this is highly recommended. Look how to add your domain on blogger.
4. Change the feed of your blog by the feedburner.

Feedburner is a service that lets you google have statistics on people you read through this medium. From the control panel blogger is possible feedburner add to your blog.
5. Fixes a link comments.

A small detail that enhances the accessibility of your blog. To correct the link comments must be done by hand.
6. Change your template images of a new accommodation.

Many staff have hosted images on free services that limit the number of accesses to them which leads to moments where you have any pictures of the blog is. Stay at Blogger seems the best option, in another post will explain how to do it.
7. Add basic gadgets in your sidebar.

In the tab "Design" option "Page Elements" is possible to add gadgets, the most basic are: Labels, File blog (as a checklist) and subscription links.
8. Insert the feedback form on the page of your individual entries.

As this feature is still in this phase of testing is necessary to do it manually in templates or modified automatically only for templates default blogger.
9. Add your code tracking statistics.

Whether you use Google Analytics, SiteMeter or other statistics system is important not to forget to add your tracking code before the label under the tab "Design" option "Edit HTML," just until the end of the Code.
10. Add your blog to Google's tools.

The google tools allow you to continue to search statistics and errors related to your site. Its use is very intuitive and free, but you can also see the tutorial Eric Lander to guide.

After making all that your blog will be a more effective tool, you'll have more control over statistics, look better, it is understood better with search engines but above all, be a better place for your visitors.

How To Increase Ur Blog Traffic

When we talk about the advantages of a blog always mentions the ease with which you can create. While this is true, after opening the blog the road is no longer as clear as we talk about 10 things you should do after installing Wordpress and now plays talk about the 10 things you should do after opening a blog on Blogger.

1. Write a description of your blog.

Go to the tab "Settings" and the "Basic" find the field to fill to give a description to your blog. This is useful for new visitors to your blog and can be for search engines.
2. Look for a good template.

There are several sites with templates blogger where you can find a great variety of designs. Not only base your choice on the chart (headers, buttons, icons, etc.) but also in the structure (number of columns, accessibility, etc.) and always remember to read the instructions on each template as many times are important for proper display the same.
3. Buy a domain and use it with your blog.

I have always said that a domain should be the first investment of a blogger and seeing that for less than $ 10 can have its own name with many advantages, this is highly recommended. Look how to add your domain on blogger.
4. Change the feed of your blog by the feedburner.

Feedburner is a service that lets you google have statistics on people you read through this medium. From the control panel blogger is possible feedburner add to your blog.
5. Fixes a link comments.

A small detail that enhances the accessibility of your blog. To correct the link comments must be done by hand.
6. Change your template images of a new accommodation.

Many staff have hosted images on free services that limit the number of accesses to them which leads to moments where you have any pictures of the blog is. Stay at Blogger seems the best option, in another post will explain how to do it.
7. Add basic gadgets in your sidebar.

In the tab "Design" option "Page Elements" is possible to add gadgets, the most basic are: Labels, File blog (as a checklist) and subscription links.
8. Insert the feedback form on the page of your individual entries.

As this feature is still in this phase of testing is necessary to do it manually in templates or modified automatically only for templates default blogger.
9. Add your code tracking statistics.

Whether you use Google Analytics, SiteMeter or other statistics system is important not to forget to add your tracking code before the label under the tab "Design" option "Edit HTML," just until the end of the Code.
10. Add your blog to Google's tools.

The google tools allow you to continue to search statistics and errors related to your site. Its use is very intuitive and free, but you can also see the tutorial Eric Lander to guide.

After making all that your blog will be a more effective tool, you'll have more control over statistics, look better, it is understood better with search engines but above all, be a better place for your visitors.

Know The Ip Adress Of Sender In G Mail Acc.

1. Log into your Gmail account with your username and password.
2. Open the mail.
3. To display the headers,
* Click on More options corresponding to that thread. You should get a bunch of links.
* Click on Show original
4. You should get headers like this:
Gmail headers : name
Look for Received: from followed by a few hostnames and an IP address between square brackets. In this case, it is

65.119.112.245.
That is be the IP address of the sender!
5. Track the IP address of the sender




Back To Home Page

Know The Ip Adress Of Sender In G Mail Acc.

1. Log into your Gmail account with your username and password.
2. Open the mail.
3. To display the headers,
* Click on More options corresponding to that thread. You should get a bunch of links.
* Click on Show original
4. You should get headers like this:
Gmail headers : name
Look for Received: from followed by a few hostnames and an IP address between square brackets. In this case, it is

65.119.112.245.
That is be the IP address of the sender!
5. Track the IP address of the sender




Back To Home Page

C The IP Of All The Computers Connected To U.

To see the ip all computers you are connected to (web servers, people attempting to **** into your computer). Go to dos (start>run>type command) and run the netstat command. Type netstat /? for details.

Type netstat -r at the command prompt to see the ip of all computers you are connected to

In MSN (and other programs) when you are chatting to someone everything you type goes through the MSN servers first (they act as a proxy) so you see their ip rather than who you are chatting to.

You can get round this by sending them a file as MSN doesn’t send file through its proxy.

When you type the netstat -r (or -a for a different view) the ip’s are under the foreign address table.

The ports are seperated by a : . Different programs use different ports, so you can work out which ip’s are from which program.




Back To Home Page

C The IP Of All The Computers Connected To U.

To see the ip all computers you are connected to (web servers, people attempting to **** into your computer). Go to dos (start>run>type command) and run the netstat command. Type netstat /? for details.

Type netstat -r at the command prompt to see the ip of all computers you are connected to

In MSN (and other programs) when you are chatting to someone everything you type goes through the MSN servers first (they act as a proxy) so you see their ip rather than who you are chatting to.

You can get round this by sending them a file as MSN doesn’t send file through its proxy.

When you type the netstat -r (or -a for a different view) the ip’s are under the foreign address table.

The ports are seperated by a : . Different programs use different ports, so you can work out which ip’s are from which program.




Back To Home Page