Showing posts with label Backtrack. Show all posts
Showing posts with label Backtrack. Show all posts
Backtrack Tutorials : Hacking With Back Track
How to use proxy easily in Backtrack 5
Hey guys how u been ??? hope u enjoying , huh !!!
There are a lot of ways to hide your identity , either by single proxy or by multiple proxies like TOR which Xeo Hacker explained in a recent post.
But if u have BackTrack then nothing to worry about you can use proxy very easily and u can use multilple proxies also.
Well its called proxychains ..
So lets get started
Well proxychains is a inbuilt tool in backtrack to let u use proxy very easily. It uses proxy according to the configuration file , which we gonna config and it takes u to any address or url via multiple proxies.
well actually there is a configuration (.conf) file in etc folder . its named proxychains.conf . This is the file where u will do all ur stuffs and u'll hide your identity just by typing a single command once you configure.
Go to terminal and type following command then hit enter
Wat happened ??? there is a gedit window opened with some text in it ... its actually ur config file
There are 3 modes of proxychains
There are a lot of ways to hide your identity , either by single proxy or by multiple proxies like TOR which Xeo Hacker explained in a recent post.
But if u have BackTrack then nothing to worry about you can use proxy very easily and u can use multilple proxies also.
Well its called proxychains ..
So lets get started
wat it does
Well proxychains is a inbuilt tool in backtrack to let u use proxy very easily. It uses proxy according to the configuration file , which we gonna config and it takes u to any address or url via multiple proxies.
proxychains intro
well actually there is a configuration (.conf) file in etc folder . its named proxychains.conf . This is the file where u will do all ur stuffs and u'll hide your identity just by typing a single command once you configure.
Go to terminal and type following command then hit enter
gedit /etc/proxychains.conf
Wat happened ??? there is a gedit window opened with some text in it ... its actually ur config file
Modes or types of proxychains
There are 3 modes of proxychains
- dynamic_chain:This uses the list of proxies in the same order as u placed
- strict_chain:almost similar to previous one except it will not work if it gets any dead proxy server
- random_chain:this is the best .. this chooses and uses proxies randomly
Configuration of the file
u have to open that file with root privilege to edit that file so first issue following command
sudo suthen issue this command
gedit /etc/proxychains.confnow you have to follow these steps
- comment out the mode u want to use
as u can see i have commented out random_chain by "//" .
- now go to any proxy server list .. just google it .. i'll be using socks4 proxy servers so search on google .. then copy some IPs and their port no. and then paste it where it says add proxy here . refer the pic at last i have added some IPs.
Now your configuration is done .....
How to use proxychains
to use proxychains just have to issue some commands as listed below.
proxyresolv [the site u want to open]
proxychains firefox [the site u want to open ] (for firefox)
BACKTRACK : The credential harvester attack
BACKTRACK : The credential harvester attack
Hey guys .. how u been ? so enjoying . huh ?? well m back with another Backtrack post . Its called credential harvester attack . By this u can get id and passwords of any user in urlan u want.
follow these steps:
starting SET
Well in Backtrack there is an awesome tool called SET (Social Engineering Toolkit).- To start this toolkit login as root by issuing command sudo su .
- Then issue following command:
cd /pentest/exploits/set . - Now u are in SET directory , again following command and hit enter: ./set.
Using SET
In SET you can navigate through your number pad . To navigate press corresponding keys. OK now about The credential harvester attack .... follow these steps and u can refer to pics also.- Select option no. 1 which says Social Engg toolkit .. if your SET is updated or select credential harvester method directly
- now select option no. 2 again which says Website Attack Vectors (for updated SET).
- Select option 3 which says Credential Harvester Attack Method.
- Now select any of options .. for now select option 1 which says Web Templates.
- Now select any of the templates , i used gmail .
Final step
Now give your ip to anyone in your LAN and somehow make them open it .. (that depends on you..lot of ways are there).now you will get every entry that person does in that attack.
Feel free to ask doubts.
Guys plz comment and share and like .... thanks
Stay Tuned !!!!
Save this Page
