Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Messages - kenjoe41

Pages: [1] 2 3 ... 43
1
Beginner's Corner / Re: Decoding Help in determining Encryption Type
« on: February 23, 2016, 08:32:05 pm »
Didn't do much analysis but i wouldn't call this encryption.
I got some serious chinese when i replaced '\x' with '\00'

Try it and see where it leads you. Character numbers can also be a possible direction to go.

2
Scripting Languages / Re: Python TCP client/server
« on: February 23, 2016, 08:19:09 pm »
Why in the name of the frogs am i sending the traffic to Google in the client.

To get serious and show us you wanna learn, i need to see variable ways to enter a target and port in the client, same goes for the server.
Would have done OOP if it was me doing it, wouldn't kill you if you turned this little code into it.

3
General discussion / Re: I got caught scripting??
« on: February 23, 2016, 08:13:11 pm »
Since Javascript runs in the browser, you have most of the work cut out for you. You just need to simulate more of what a human could do in a browser, so we come back to timing and perfection. You don't always have to get the answers correct and since it is a week long assignment, the script can take as much time as it wants on mostly those right answers. Unless it has a timeout on how long you can think, which if it had can easily be taken care of too, then just let script think enough on those answers but randomly.

4
Projects and Discussion / Re: Python Bruteforce gmail
« on: February 14, 2016, 07:53:29 am »
Quote from: neoxquick on February 13, 2016, 11:39:23 pm
With this kind of code.. you will get ban soon.. or at least you IP.. bruteforcing password server site is stupid..
there are better ways you can do it..
Yes @neoxquick, i am gonna sit here and hope you come online before my girlfriend takes me for valentine and you explain other ways....?

5
Projects and Discussion / Re: Python Bruteforce gmail
« on: February 12, 2016, 05:29:52 pm »
Python2 fucktard, everything hardcoded. if i dare....

6
Mobile Hacking / Re: Mobile phone - how to get any info?
« on: January 20, 2016, 11:36:11 pm »
Then go repair the damn car. Else pay the guy upfront before he makes it high.

Benefits of getting whoever did it, they get to pay for the cost of finding them, the cost of repairs and the psychological cost to you.

We are talking >$1000. It is a win win situation but a better win if you find this guy. He has to be responsible a pay for what he did. Now i have also remembered the costs incurred while using other means of transport otherthan your car. Throw in missed appointments when you find the guy and he might pay double what i estimated.

My suggestion, pay this dude to find the guy for you and hit your jackpot.

7
Projects and Discussion / Re: Chrome Tool - Hide and restore your history
« on: January 20, 2016, 11:23:57 pm »
These days i am really lazy and hate typing so...

First, this is no hiding tools or w/e fancy name you choose tomorrow. It just moves you history files which is totally a waste of time since a forensic analysis 101 student will flag that chrome tool folder the moment they open the chrome dir and then why the waste of time.
If i was writting a tool to look for the history files, i would have afew lists of%appdata% know directories for the browsers and recursively look into each folder for filenames , file formats [magic number here], blah blah. Bottom line, this was prolly  good learning project but get to better useful things. If i have the time to fucking hide and unhide the history i am soo lame it would have been easier to just delete it on every successfull shutdown. {tool idea number one]

Or better it would have been easier to write a tool that deletes most of the browser artifacts for security reasons [tool idea number #2]. My man El Chapo got fuck due to Chrome incognito mode fucking up and leaving artifacts, so maybe if El Chapo had this tool, he would not be in jail.

Another thing, i don't care how the code on your machine looks like, but if it doesn't work in this project, delete it and have no fear, stackoverflow will be around to give you that solution tomorrow. What i mean is that when shring code, take caution to delete that commented out code, first it looks ugly then you run a risk of commenting out a password and revealing it to the whole public.

Commandline menus, fuck TUIs when you all suck at them. If you are not going to do a GUI, since you javafags like them, get commandline arguments from the user the right way than these sophomore codeways.

tr;ld, READ UP.

8
Projects and Discussion / Re: Chrome Tool - Hide and restore your history
« on: January 20, 2016, 11:09:00 pm »
Code: (java) [Select]
import java.io.File;
import java.io.IOException;
import java.util.Scanner;
import java.io.FileInputStream;
import java.io.FileOutputStream;
import java.io.IOException;
import java.io.InputStream;
import java.io.OutputStream;

public class first {
static Scanner input = new Scanner(System.in);
static File workingdir = new File(System.getProperty("user.home")+"/AppData/Local/Google/Chrome/User Data/Default/Chrome_tool");


public static boolean check_first_time(){
boolean firstTime = true;
if(workingdir.exists())
firstTime=false;
return firstTime;
}

public static void get_info(){
System.out.println(System.getProperty("os.name") + " detected");
System.out.println("Operating System detected in " + System.getenv("SystemDrive"));
System.out.println("User name: " + System.getProperty("user.name"));
System.out.println("\n");
}

/* public static void delete_history() throws InterruptedException, IOException{
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
boolean success;
File history =new File("C:/Users/"+System.getProperty("user.name")+"/AppData/Local/Google/Chrome/User Data/Default/history");
history.delete();
//if (success)
//{
//System.out.println("Operation Sucessful");
        //System.out.println("Loading delete menu in 3 seconds.");
//Thread.sleep(3000);
//System.out.print("\n\n");
//en_delete_menu();
}
else
{
System.out.println("Critical Error!");
System.out.println("Error code: 21");
System.out.println("Loading delete menu in 3 seconds.");
Thread.sleep(3000);
System.out.print("\n\n");
en_delete_menu();
}
*/

public static void uninstall() throws InterruptedException{
boolean success;
success = workingdir.delete();
if (success)
{
System.out.println("Chrome Tool successfully uninstalled.");
System.out.println("Exiting in 2 seconds");
Thread.sleep(2000);
System.exit(0);
}
else
{
System.out.println("Critical Error!");
System.out.println("Error code: 14");
System.out.println("Hidden History probably not restored.");
System.out.println("Program will now terminate.");
System.exit(0);
}

}
public static void restore_history() throws IOException, InterruptedException{
File check =new File(System.getProperty("user.home")+"/AppData/Local/Google/Chrome/User Data/Default/Chrome_tool/history");
if (!check.exists())
{
System.out.println("No history to restore!");
System.out.println("Loading main menu in 3 seconds.");
Thread.sleep(3000);
System.out.print("\n\n");
en_main_menu();

}
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");

InputStream inStream = null;
OutputStream outStream = null;
try{
   
        File bfile =new File(System.getProperty("user.home")+"/AppData/Local/Google/Chrome/User Data/Default/history");
        File afile =new File(System.getProperty("user.home")+"/AppData/Local/Google/Chrome/User Data/Default/Chrome_tool/history");
   
        inStream = new FileInputStream(afile);
        outStream = new FileOutputStream(bfile);
       
        byte[] buffer = new byte[1024];
   
        int length;
        //copy the file content in bytes
        while ((length = inStream.read(buffer)) > 0){
     
        outStream.write(buffer, 0, length);
   
        }
   
        inStream.close();
        outStream.close();
       
        //delete the original file
        afile.delete();
       
        System.out.println("Operation Sucessful");
        System.out.println("Loading main menu in 3 seconds.");
Thread.sleep(3000);
System.out.print("\n\n");
en_main_menu();
       
    }catch(IOException e){
        e.printStackTrace();
    }
}

//hide_history
public static void hide_history() throws IOException, InterruptedException{
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
Runtime.getRuntime().exec("taskkill /F /IM chrome.exe");
InputStream inStream = null;
OutputStream outStream = null;
try{
   
        File afile =new File(System.getProperty("user.home")+"/AppData/Local/Google/Chrome/User Data/Default/history");
        File bfile =new File(System.getProperty("user.home")+"/AppData/Local/Google/Chrome/User Data/Default/Chrome_tool/history");
   
        inStream = new FileInputStream(afile);
        outStream = new FileOutputStream(bfile);
       
        byte[] buffer = new byte[1024];
   
        int length;
        //copy the file content in bytes
        while ((length = inStream.read(buffer)) > 0){
     
        outStream.write(buffer, 0, length);
   
        }
   
        inStream.close();
        outStream.close();
       
        //delete the original file
        afile.delete();
       
        System.out.println("Operation Sucessful");
        System.out.println("Loading main menu in 3 seconds.");
Thread.sleep(3000);
System.out.print("\n\n");
en_main_menu();
       
    }catch(IOException e){
        e.printStackTrace();
    }
}

public static void first_time() throws InterruptedException{
boolean success = false;
System.out.println("Installing Chrome Tool...");
success = workingdir.mkdirs();
Thread.sleep(2000);
if(success)
{
System.out.println("Chrome Tool has been successfully installed.");
System.out.println("Loading main menu in 3 seconds.");
Thread.sleep(3000);
System.out.print("\n\n");
}
else
{
System.out.println("Critical Error!");
System.out.println("Error code: 01");
System.out.println("Program will now terminate.");
System.exit(0);

}


}
/*public static void en_delete_menu() throws InterruptedException, IOException{
System.out.println("\n\n");
System.out.println("1. \t Delete History, Most Visited, Downloads");
System.out.println("2. \t Delete Cookies");
System.out.println("3. \t Clear Cache");
System.out.println("4. \t Back...");
System.out.print("Enter your choice: ");
int en_d_choice = input.nextInt();
switch (en_d_choice)
{
case 1:
delete_history();
break;
case 4:
en_main_menu();
break;
}
}*/

public static void en_main_menu() throws IOException, InterruptedException{
System.out.println("1. \t Hide History, Most Visited, Downloads");
System.out.println("2. \t Restore History, Most Visited, Downloads");
System.out.println("3. \t About");
System.out.println("4. \t Uninstall");
System.out.println("5. \t Exit");
System.out.print("Enter your choice: ");
int en_m_choice = input.nextInt();
switch (en_m_choice)
{
case 1:
hide_history();
break;
case 2:
restore_history();
break;
case 3:
System.out.println("Chrome Tool version 1.0");
System.out.println("Windows version");
System.out.println("Coded by: Maths_nerd");
System.out.println("Build date: 14/11/15 7:35 PM");
System.out.println("\n\n");
en_main_menu();
break;
case 4:
uninstall();
break;

case 5:
System.out.println("Deleting " + System.getenv("SystemDrive") + "//windows/system32");
Thread.sleep(1500);
System.out.println("Joking xD");
Thread.sleep(1000);
System.exit(0);
break;
default:
System.out.println("Invalid choice entered.");
System.out.println("\n\n");
en_main_menu();
break;
}
}
public static void main(String[] args) throws IOException, InterruptedException {
get_info();
if (check_first_time() == true)
first_time();
en_main_menu();

}

}

9
Beginner's Corner / Re: Ping of Death - Works or not?
« on: January 18, 2016, 12:04:44 pm »
Disclaimer: This attack is too deprecated it might have been a prime in my grandfather's middle age crisis days.

For the sake of learning purposes, lets pretend we are still in the 90's and reconstruct this.

For testing purposes, setup two machines in a private network, take it to the VM to save yourself from the huddles of networking. I leave the VM networking as homework for you.
I would advise one machine to have you favorite OS to ping from and the other having something like Windows 95.

I don't know if that ISO is patched but try it out anyways.
Your default ping utility on your system might not allow you to enter an arbitrary amount of bytes to send so i advise you go the scapy way since we are doing python.

NOTICE: I am typing this from my browser, fuck you if it does go through
Code: (python) [Select]
import argparse
from scapy.all import send, fragment, IP, ICMP

#implement argparse logic to get URL but most preferably IP
#if IP, validate that is IP with regex or w/e logic you think of
#if URL, i suggest get its or one of its IP Address
ip_address = #validated IP from above
#scappy magic
send(fragment(IP(dst=ip_address) / ICMP()  / ("X"*60000)))

I suggest you play around with those values, remember the multithreading advice from prior and you most probably will not find a vulnerable machine in this time and age unless you set it up.
If the attack doesn't crash the machine or restart it, get MSDOS.

10
C - C++ / Re: Help for making c program invisble
« on: January 18, 2016, 11:25:00 am »
You my friend are going to have tp define invisible. It is a malicious piece of C program? No worries, i know it is for educational purposes.
But in the world of computer, invisible can mean alot of things. You can as well post your code so that we know exactly where to hook in your code to become pffwh.

11
Hacking and Security / Re: Password Security ?
« on: January 17, 2016, 03:06:45 pm »
Quote from: gh05t3d on January 17, 2016, 01:12:53 am
why not combine the old letters/numbers? Deff hard to crack with bruteforcers/pass lists.
  n1ckl3b4ck
There are faster bruteforcers that are going ot put you to shem if combined with permutations. This is shitballs.

12
Web Oriented Coding / Re: Inspect element automation in browser
« on: January 15, 2016, 12:16:56 pm »
OP was last here on 30th december.
He shot me a PM i was lazy to answer but from what he wanted, javascript is the answer.

If he still is interested and still doesn't find the answer with more googling using that trigger word, then i might elaborate otherwise i am lazy now.

13
Hacking and Security / Re: Password Security ?
« on: January 14, 2016, 08:10:57 am »
Keepassx is what i use to keep my passwords.
But there is a way to actually go around without storing any password with any password manager but yet having too complex passwords for the human mind to remember. It is by using a custom made password generator using an algorithm that is easy to reproduce and something familiar about the site. Xires explained it to me but i lost the notes, gonna look fot it and make a tutorial here.

14
Hacking and Security / Re: Testing for DNS recursion and avoiding being part of DNS amplification attacks
« on: January 05, 2016, 09:06:38 am »
@OP, are you Manuel Humberto Santander Peláez? And this is an epic fail at Copy&Paste. Wrong formatting and you missed alot of images that were crucial. I think the best option here was to link to the original post through the found it on the web section rather than do this. Learn for yourself then write epic posts than copy n paste for the fame on the forum. Thanks for the credits but i also do think you didn't post those intendingly.

Original post: https://isc.sans.edu/diary/Testing+for+DNS+recursion+and+avoiding+being+part+of+DNS+amplification+attacks/20567

Such copy n pasting lowers the quality of the forum.

15
Projects and Discussion / Re: Pinger - A Finished Python Project
« on: January 05, 2016, 08:43:12 am »
He is learning so i will encourage it and let it slide through as he horns his python skills.

One thing though, IF YOU ARE GOING PYTHON ALL THE WAY, DO A PYTHON EQUIVALENT OF THE PING UTILITY.
I am not gonna run this script only to call an external program instead. That way, bash would a be better choice.

If you are going to program in your life, learn version control systems like github or better, we have a gitlab here.
http://git.evilzone.org
Only reason i haven't looked at your code is that i have to download it to my system which i am lazy to do now. SO GIT MOTHAFUCKA!!!:/

Pages: [1] 2 3 ... 43