Free Ebook Download Site

The Best Free Ebook Download Site – Over 285,000,000 free PDF files – Direct Download

Click Here

Enjoy!!!!

Morto Worm Leaves Windows RDP At Risk

RDP stands for Remote Desktop Protocol, which uses TCP Port 3389 and enables users to control the desktop of the other computer, RDP's are mostly used in organizations and business environments. Recently a new worm named as Morto worm has became the cause behind the spike in traffic to TCP Port 3389 (Which is used by RDP) according to a report by Fsecure.

How Does The Morto Worm Work?


Morto worm works by starting infecting a single maching (with remote desktop), Once the single machine has been infected it then scans the network for other computers with remote desktop, In technical words scanning network for port 3389 enabled, Once it finds the target computer , it then try to connect with those Remote desktop computers by using the RDP default passwords, here is the list of the passwords which moto tries:

*1234
0
111
123
369
1111
12345
111111
123123
123321
123456
168168
520520
654321
666666
888888
1234567
12345678
123456789
1234567890
%u%
%u%12
1234qwer
1q2w3e
1qaz2wsx
aaa
abc123
abcd1234
admin
admin123
letmein
pass
password
server
test
user

As you can see from the above password list, that Morto worm is using a very basic dictionary attack to compromise the remote desktops. The worm also creates several new files includingdll and txt files. As reported by Fsecure:

The infection will create several new files on the system including\windows\system32\sens32.dll and\windows\offline web pages\cache.txt
Morto can be controlled remotely. This is done via several alternative servers, including jaifr.com and qfsl.net
We've seen several different samples. Some MD5 hashes include:
0c5728b3c22276719561049653c71b8414284844b9a5aaa680f6be466d71d95b

The worm could get more devivasting if brute forcing support is enabled, or a tool like Ncrack is integrated in to this worm, Ncrack is a very powerful RDP Cracker, but it's slow some times and will work on vulnerable machines only.

How to get IP address of another computer remotely

Hello friends, today i will explain you how to get IP address of any computer remotely. Using some very basic tricks we can find the IP address of any remote computer and then you can start your furtherhacking into the remote system like port scanning and finding vulnerabilities to enter in to the system and hack it. There are several methods to get an IP address of the victim but i will share few and specially the best one's that can tell you IP address in just few clicks and also all are free methods and special thing is about it is all are manual methods that means you did not require any tool.

How to find or get Ip address of somebody else remotely

4 ways to get the IP address of the Victim or another Computer:

1. Using PHP notification Script

2. Using Blogs and Websites

3. Using Read Notify service

4. Sniffing during Gmail and Yahoo chat sessions

As we are here to learn concepts so i will first explain what is an IP address and what's its importance. So friends very basic question What is an IP address? Why its important for hackers and securityprofessionals?

What is an IP address? 

Basically IP address (Internet Protocol address) is a unique numerical value that is assigned to anycomputer or printer on a computer network that uses an internet protocol for communication purpose. Protocol is basically rules( for Network its rules for communication). 

IP address serves for two basic purposes:

1. Host or network interface identification

2. Location Addressing

For exploring more about IP addressing read on wikipedia.

How to Find IP address of another computer?

1. Using PHP notification Script

Using this Notification script you can get the IP address in just seconds. Steps of using this PHP script:

a. Download the PHP notify script and extract files.

Download here

b. Now you will get two files IP.html and index.php . You need to upload these two files to any free web hosting server.

Example: i used www.my3gb.com to upload these two files. Create an account there and upload these two files there as shown below.

Upload Files to free web hosting server

 

c. Now you will need to send the link of index.php to the victim whose password you want to get. to get the link click on index.php shown in above snapshot. Now a new window will open copy the link in the address bar and send to the victim whose IP address you want.

d. Now when the victim opens the above link nothing will open but his Ip address is written into the ip.html file. So open the ip.html file to get his IP address.

e. That's all this method... I hope you liked it.

2. Using Blogs and Websites

This method is for those who have their blogs or websites. Normal users can also do this as blog is free to make. Make a new blog and use any stats service like histats or any other stats widget. Just add a new widget and put histats code there and save template. And send the link of your blog to your friend and get his IP.

That's only.

3. Using Read Notify service

This is an email based service. Steps to use Read Notify service:

a. First open the Read Notify website : RCPT

b. Now register on this website and then it will send you confirmation mail. Verify your account.

c. Once your account is activated. 

Do the following steps use this service:

1. Compose your email just like you usually would in your own email or web email program


2. Type:   .readnotify.com   on the end of your recipients email address (don't worry, that gets removed before your recipients receive the email). Like this:shiviskingg@gmail.com.readnotify.com  


3. Send your email

Some things to remember: 

• don't send to and from the same computer



• if your email program 'auto-completes' email addresses from your address book, you'll need to keep typing over the top of the auto-completed one to add the .readnotify.com


• if you are cc-ing your email to other readers, you must add tracking to all of them 

4.  Sniffing Yahoo and Gmail Chat sessions

With the help of Sniffers like ethereal, wireshark etc we can sniff the Gmail, and yahoo chat sessions while we are chatiing to any our friend and extract the IP address from there. I will explain this trick in detail in my next article as its a long article in itself.

5. Bonus Method for Online Gamers

We can also get the IP address from online games like counter strike, age of empires in Game ranger etc.. Many counter strike servers use amx mode. Just view which people are connecting and whats their IP addess as plugins show the IP address of people connecting to the game server.  If you have more access to counter strike server you can use status command in console. Just go to console and type "status"(without quotes) and press enter there you can see all players details his steam ID and much more depending upon server.

Now you have IP address but what you can do with an IP address. Ahhaah everything, that i will explain in my next article.

I hope you all like this article. If you have any queries or concerns just ask me in form of comments.  Thanks for reading...

Today 20th anniversary of First Website

Today 20th anniversary of First Website

Hello Friends! I hope all you are fine and enjoy the Festival season. Today i am not telling any tricks here but i am telling a technology news which is very helpful for you. Many of you know about this news but here i will tell you some impotent fact of First website. Today is the 20th anniversary of first web page. all you are a smart internet user so you should know about this.

Today`s the total number of total webpages in the world are arround 19410 Million which is 3 times of the total population of world.In August 1991 the first webpage was created by Tim berners-Lee. He is still alive.









Sir Tim Berners-Lee





Tim Berners-Lee is the First man who discover or create first website.it contains a lots of hyper links and texts.The URL of first website is   http://info.cern.ch/hypertext/WWW/TheProject.html  . Today aged 56, Sir Tim Berners-Lee, as he is now, is working as an adviser to the UK government on how it can open up all the data it holds for wider public use. He also strongly supports the principle of net neutrality – that governments and internet service providers should not impose any restrictions on public access to all parts of the internet.





















A Look of First Webpage:

I hope this is useful for you.

Keep in touch.