Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - nvrmoar

Pages: [1]
1
Beginner's Corner / Re: Kali Linux - Arguments for a little newbie!
« on: November 24, 2015, 02:59:43 pm »
I'm just curious. If you guys aren't running Kali in a VM as a part of a pen testing lab alongside some other vulnerable OS to experiment pen testing with, then whose computers are you practicing on? lol ;D

Anyway, OP, maybe you could get a normal distro and learn how to install the tools as you need them? I feel like Kali is pretty overwhelming for a beginner. If you see a tutorial using Kali all you'd need to do is simply google how to install the tools used in the tutorial for the distro you're using. I'm not sure, but I always assumed that maybe the reason books and tutorials use Kali is so they don't have to waste time instructing the student how to install the tools.

2
Hacking and Security / Re: Social Engineering Story Sharing
« on: November 23, 2015, 05:38:26 pm »
Story 1:

I work for Interpol!


When I was 23 years old and 'fed up' with the way my life was going in America I decided to spend a year in Ho Chi Minh City, Vietnam (Saigon). I decided I'd take up a job teaching English like many young traveling expats do. Living in Saigon was like the wild wild west. What we in the developed world would consider savage behavior is quite the norm. There is quite a bit of lawlessness because when people do get in trouble, the police can be easily bribed. This 'cops don't give a shit' mentality means a lot, and I mean a lot of shit goes down. It's common for people to get shitfaced drunk and drive their motorcycle home. It's common to see people blast through red lights. It's common for people to slide cops a few bucks to have them turn a blind eye.

Well, I was young and dumb and partying like a rock star in Saigon. One night after quite a bit of drinking a few friends and I hopped on our motorcycles (main mode of transportation in Vietnam) and decided to part ways. A buddy of mine led the way as we were driving the same direction. Him being white makes the likelihood of police pulling him over for no reason very high. Police assume white face means dumb foreigner who they can bully out of money. Well, he gets pulled over and I zip by pretending not to know him. Associating myself with him would be begging for them to take my money as well. Instead, I stop about 1 block ahead and casually pull over on the sidewalk. I begin to push my bike toward where my buddy had been pulled over which is absolutely legal. As I am walking by the cop glances at me, then stares back. He points at me and motions for me to come over. "FUCK!!" I'm Asian so I usually get away with a lot and I assumed he would just think I was a local. By now my friend has already paid off the cop and has gone on his way and here I am absolutely lit. The officer asks me to produce a drivers license, which like most foreigners, I did not have. Instead, I produced my American drivers license. He then goes through the script that many foreigners know too well.

Cop: "Well, you have no drivers license. So, we must take your motorcycle for 3 months or you can pay me 2,500,000vnd (about $125US)."
Me: Wait a minute.... But I wasn't even driving!! I was walking, pushing my bike!
I become furious and ask for this guy to call his supervisor. Then here comes the part people usually call BS on...
Me: "DO YOU KNOW WHO I AM!? GIVE ME YOUR BADGE NUMBER... WHAT IS YOUR NAME?!"
Cop: Wha huh? wh what huh? Who are you?
Me: DO YOU KNOW INTERPOL? I AM WORKING FOR INTERPOL! I AM A POLICE OFFICER! You wait. I am calling my superior.
I now pull out my phone and pretend to make a phone call.
Me: Uh yes, this is Agent Lee 334012. I've been pulled over by some officers. (I begin to approach the rear of the police motorcycle and pretend to be examining the plate number). Yes the plate number is 52A--
Cop: OK OK! Go. Go. Just go!.

The next day I woke up hungover.. I couldn't believe what I had done. The perfect combination of alcohol, stupidity, and luck got me out of a sticky situation with the cops. Things could've gone so... soooo wrong. I tell people this story and no one ever believes me so I don't expect anyone here to.

Anyway. I'd like to end this story by saying I don't condone behavior that puts the lives of others at risk such as driving drunk. In fact I am more embarrassed by this story than anything. It was a point in my life that I was a reckless young guy with not a care in the world. That same year I lost a friend of mine who crashed his motorcycle into the rear of a water tanker semi truck in the wee hours of the morning. Not long after that incident I was driving (drunk again) and passed out while driving my motorcycle, fortunately on a mostly empty highway. I ended up wrecking, woke up choking on cerebrospinal fluid (brain fluid) that was draining from both nostrils due to the impact of my head hitting the concrete at high speed which caused a tear in my sinuses. I suffered a very bad concussion and memory loss and that was the close call that retired me from such behavior.

3
Beginner's Corner / Re: Book Requested!
« on: November 22, 2015, 05:52:43 pm »
This is going to sound a bit weird, but maybe you could pick up Todd Lammel's CCNA Routing and Switching guide. It's a book for CCENT/CCNA exams, but I read it just to get a general understanding of networking concepts rather than for the purpose of obtaining a CCENT/CCNA. You'll learn a ton of shit with this book in easily digestible chunks for a noob. I was in your spot not long ago and the TCP/IP Illustrated book was pretty intimidating and bland, but the CCENT/CCNA book is great for a beginner to learn. Supplemental software like packet tracer or GNS3 make the learning more hands on and fun w/ exercises in the book that help to physically visualize how packets are traveling through a network rather than straight reading a thousand pages that will make you want to blow your brains out.

4
Hacking and Security / Re: SEToolkit cloned website works over internet, but does not harvest credentials.
« on: November 22, 2015, 12:42:00 pm »
Quote from: inability on November 22, 2015, 12:24:33 pm
Wait, did you actually put "http://" in the config? I'm pretty sure only the hostname goes in there, so no scheme is present.

This was the solution to my problem. I removed the http:// and it fixed it. Much to learn I have.  Thanks for your help!

5
Hacking and Security / Re: SEToolkit cloned website works over internet, but does not harvest credentials.
« on: November 22, 2015, 12:18:52 pm »
Hi, thanks for your reply. A guy on StackExchange suggested that the  "action = [address]" was not set to the public facing IP. This did end up fixing the issue. I was under the impression that in SET I would put the local IP of the Apache server, port forward said IP on the router, and the router would take port 80 requests to the local IP of the Apache server.

Anyway, while we're on topic there is another question that i have. So, after I got everything working normally on the public side, I thought I'd introduce ddns to the picture to deal with the dynamic public IP. The same issue as in OP arises once I set action= ____.ddns.net. I have the DNS Update Client software running on my computer to update the public IP associated with my ddns.net domain. Once again, the page works, but once the submission is made the website hangs and the credentials do not get logged.

Shouldn't action='http://____.ddns.net'... be same as action='public_ip' ? Not sure what I am doing wrong, but again, any help would be appreciated  :)

--EDIT--

I should also mention that I have set permissions to the credentials file to 777

6
Hacking and Security / SEToolkit cloned website works over internet, but does not harvest credentials.
« on: November 21, 2015, 05:08:20 pm »
I've been toying around with SEToolkit over the weekend and everything works properly on the LAN: the cloned page redirects the victim to the real page and stores credentials in a text file in /var/www/html/. However, when I set port forwarding on my router to go to the cloned page from the internet, something weird happens. I can view the page, but once I input credentials and submit, the page just hangs. It doesn't redirect me to the real page, nor does it store anything in the credentials file.

I've searched for a solution but haven't encountered any posts with the same problem as me. Has anyone experienced this before? Any help would be much appreciated. Thanks!

Pages: [1]