Cracking FTP Passwords Using Dictionary Attacks

What is a Dictionary Attack ?

In layman language, Dictionary attack means using a tool that picks passwords from a wordlist and tries them one by one until one works

How to make a wordlist ?

A wordlist can consist of all possible combinations of letter,numbers,special characters. It can have some common or default passwords. You can download the wordlist generators or google the wordlists for bruteforcing and configure them according to yourself.

How fruitful attack can be ?

If we are try all possible combinations of letter,numbers,special characters, theoretically chances of success are 100%. But practically it is not possible to try every combination because it can take a lot of time. This attack just depends on the time you give,processing power and ofcourse your luck.

Tool I will be using ?
  

• THC Hydra

Step 1 

Download THC Hydra from here

Step 2

(a) Make a usename wordlist consisting of some common usernames like this

(b) Get a wordlist of passwords
(c) Copy both wordlists to your hydra folder

Step 3

(a)Open the command prompt and change directory to your hydra folder using cd command.

(b) Type "hydra" without quotes and it will show you the options to use.

(c) Now to start attak,

Type "hydra -L userslist.txt -P passlist.txt xxx.xxx.xxx.xxx ftp" and press enter

where userslist.txt is the list of usernames, passlist.txt is the list of passwords and xxx.xxx.xxx.xxx is the IP address of target, Now it will start cracking

To use a single username instead of wordlist , Replace capital L with small l , like this

Type "hydra -l username -P passlist.txt xxx.xxx.xxx.xxx ftp"

Note : Ftp port must be open.

Warning: I highly recommend you to use a chain of proxies to spoof your identity because proper logs of user's IP addresses who try to connect to ftp server is made on the server. Here is an example of the same.

Countermeasures to protect yourself from this attack:

1. Use strong passwords
2. Enable Autoban of IPs or anyother option like this.

About The Author
This is a guest post written by Aneesh M Makker. Aneesh M.Makker is an Ethical hacker from Malout, a town in Punjab.Click here to visit his Facebook Profile

Write for us

Are you tired of trying foolish methods to get traffic to your blog?, Do you want to build high Pr quality backlinks to your blog?, then you need to not to worry as RHA has started to accept guest posts on their blog.RHA is a PR 4 blog with 14k+ RSS subscribers and is updated regularly, By writting on RHA you can get lot of exposure and traffic to your blog or website and at the same time built quality backlinks to your blog

Requirements

• Proper and original content
• Related to security/hacking
• Proper grammar 

What well will give you in return?

• A link to your website on the post
• And depending on how much and how many times you contribute, you may get free access to some of my upcoming hacking products

Submit your guest post via this contact form

Rafay Hacking Articles Re Designed

Hi Readers I am Very Happy to announce you that finally after huge request of readers and with the grace of Almighty Allah I have successfully changed my blog Theme,The theme is designed by one of the finest designers of karachi Pakistan Mohammad Mustafa Ahmedzai he has named this theme as "Cracker"
The previous design of this blog was very unprofessional as suggested by many of designers and looked something like this:

As you can see that the design was very unprofessional and due to that I had a high bounce rate and less page loads, As soon as I changed the design the page views turned for 1.5 pages/user to 2.0 pages/ user

Features of the new Theme

1) Eye Catching Header and Highly user friendly Navigation Menu

2) Customized Comment Form and Comment Interface

3) A Flapping Social Bookmarking Widget Below Post body with MBT's copyrighted Icons

4) Bookmark and Share widget Near Navigation Menu

5) Stylized Subscription Form

6) Customized Profile Widget

7) Powerful Header And Navigation

The header was designed by Mustafa and Its designed very professionally, The Navigation menu is user friendly and eye catching

 

8) Optimized Commenting System

Mustafa was the first person who desgined a hack to style comment form, The new comment form looks awesome and optimized

The whole theme cost me 200$ and I think its worth the price, Mohammad Mustafa Ahmedzai blogs on Mybloggertricks feel free to express your feeling on this blog, What things did you like? and what things you did not like? what changes can make the theme better?, I want your honest opinions on this theme

How to trace a sender's information in Gmail?

Now a days email spoofing has been a very common act, there are tons of softwares which can be used for email spoofing. Alot of scammers use mail bombing along with email spoofing, As you know that this blog is for beginners so i will first explain what is mail bombing? and what is email spoofing? and then will explain you How to trace a sender in Gmail!

What is Email Spoofing?

Email spoofing is an act to sent an email from an email which does not belong to you, this is mostly used for scamming people, Hackers use it as a medium for social engineering
For Example If a user gets a phishing scam asking to update his login information, the senders email is something like xyz@hotmail.com, this would make the victim suspicious and he/she will not pay attention to this email but on the other hand if the email is from security@microsoft.com or security@facebook.com the victim would probably feel that the email is from real sender and he/she would give his login details

What is Mail bombing?

A Mail bombing is sending a mass number of emails to a specific person or system.A huge amount of mail may simply fill up the recipient's disk space on the server or, in some cases, may be too much for a server to handle and may cause the server to stop functioning

Combining Mail bombing with Email 

A few days back when I opened my Gmail ID, I noticed that i had received 5000+ emails those all emails looked that they were from different senders as each email's body was same but the email addresses keep changing.

For example: The first email will be 1234@attacker.com the others numbers before @ would change in every email.
I was receiving 100+ emails per second, A normal user would create a spam filter for one of the email 1234@attacker.com but this wont stop the attack as the email 1234@attacker.com is the spoofed email not the real email, so here is how I traced the sender's information in Gmail


Tracing a Senders information in Gmail

You must be curious to know that how I traced senders information in gmail, some of you might ask how to trace sender's information in Hotmail or Yahoo, so I will explain it in upcoming articles in my blog as these are not the part of the article

Here is the step by step method to trace a sender's information in Gmail

1.Open the Email in Gmail you want to trace 

2.Click on More Options and Click on “Show originals”

Refer to Image for More details:

3. Now a new Window will pop up like this and there see the highlighted area

 4. Check the first line “hormel.redhat.net” ip=209.132.177.30″

That’s The Ip of The sender. now to trace the sender using this ip.

5. Open this site www.network-tools.com

Enter the IP address and click on submit

Hope you have liked the article to trace a sender's information in Gmail, If you have any problem or quesion regarding any thing in the article feel free to ask me!

How to hack yahoo messenger password

Everyday I get a lot of emails from people asking How to hack a Yahoo password? So if you’re curious to know how to hack a yahoo password then this is the post for you. In this post I will give you the real and working ways to hack Yahoo password.
There are number of sites on the web that provide information to hack a Yahoo password. So what’s special about this site? The only special about this site is that we do not bluff and mislead the readers. We actually teach you the real and working ways to hack a Yahoo password rather than telling some nonsense tricks to crack or hack some one’s yahoo password.




Using keylogger is the easiest way to hack a Yahoo messenger password. Any one with a basic knowledge of computer can use a keylogger without any problems. It doesn’t matter whether or not you’ve physical access to the target computer. The following are some of the frequently asked questions about keyloggers.


1. What is a keylogger?
A keylogger is a small program that records each and every keystroke (including passwords) that a user types on a specific computer’s keyboard. A keylogger is also called as Spy program or Spy software.


2. Where can I get the keylogger?
There exists hundrends of keyloggers on the internet. But most of them are of poor quality and fail to deliver a good performance. The two best keyloggers for hacking yahoo password are listed below.


1.SniperSpy (Supports Remote Installation)
2.Win-Spy (Supports Remote Installation)


3. Which keylogger is the best to hack Yahoo password?
Both the above mentioned ones are best for hacking Yahoo. However I recommend Sniperspy since it is more reliable and has got a better advantage over Winspy.
If you’re really serious to hack a Yahoo password then I strongly recommend using either of the two mentioned keyloggers.


OTHER WAYS TO HACK YAHOO PASSWORD
The other most commonly used trick to hack Yahoo password is using a Fake Login Page (also called as Phishing). Today, Fake login pages are the most widely used techniques to hack Yahoo password. A Fake Login page is a page that appears exactly as a Login page of sites like Yahoo, Gmail etc. But once we enter our password there, we end up loosing it.
Fake login pages are created by many hackers on their sites which appear exactly as Gmail or Yahoo login pages but the entered details(username & password) are redirected to remote server and we get redirected to some other page. Many times we ignore this but finally we loose our valuable data.
However creating a fake login page and taking it online to successfully hack a Yahoo password is not an easy job. It demands an in depth technical knowledge of HTML and scripting languages like PHP, JSP etc. So if you are new to the concept of hacking passwords, then I recommend using the keyloggers to hack Yahoo. Because Keyloggers are the easiest way to hack Yahoo password.
I have made a post on Hack yahoo using fake login page,kindly check it out

What is Social Enginering in the field of Hacking?

Social engineering is defined as the process of obtaining others passwords or personal information by the act of manipulating people rather than by breaking in or using technical cracking techniques. Here I will show you an example on how social engineering works
Example 1

Robert (Hacker) calls Michael and pretends to be a Google employee, Here is the
conversation:

Robert: Hi Michael I am Robert a Google employee

Michael: OH How are you doing?

Robert: Me fine. I am here to inform you that Google is performing a security update on all Google accounts and we therefore need to install those securities updates on
your account.

Michael: Yes kindly install those security updates.

Robert: Thanks for your interest in our security updates we will require your account
password for installing it.

Michael (Victim) has become a victim of social engineering, he will give out his password thinking that the person whom he was chatting was a Google employee.

Note: The Hacker will create an account similar to

Googleupdates(at)gmail.com
Securityupdates(at)gmail.com

Example 2

You may receive an email from saying that your computer is infected with virus and to eliminate this virus you need to install a tool. The tool will not eliminate virus from your computer but instead it will give access to your computer and all data stored on
it.

Remember: Never give out details, or secure information such as your passwords. Use passwords that aren’t anything to do with your age/DOB/FirstName/Surname etc. All of that can be found too easily.

This article was a part of my book A Beginners Guide To Ethical Hacking, if you are a beginner and want to Learn Ethical hacking I suggest you to purchase a copy of my book

Adobe Photoshop CS5 Serial Numbers

Adobe Photoshop CS5 is the latest version of photoshop.Adobe Photoshop CS5 is the industry-standard image editing software, used worldwide by professional photographers and designers who want to perfect their digital images,  but due to its high price a very few number of people can afford it


Previously I wrote an article on Adobe Photoshop CS5 keygen, however some of readers had problems and faced difficulties in downloading them so in this article I will be posting Adobe CS5 Serial Numbers.

Here are a Few working Adobe Photoshop CS5 Serial Numbers

Update:Due to instructions by our advertising network I have removed the keys from this post.

However you can download them here


You can also Download Adobe CS5 100% working Keygen if the above codes do not work for you