Embedded Files
Creation and Testing of Ransomware
10/16/24
During the last 2 weeks I have learned a lot about malware. Three things i have learned during this time is:
Terminal - A tool on your computer which allows you to input certain text, called commands, to control your computers resources and functions all from one place.
Making Files - Using the cat command in terminal, I created text/txt files, which are files that contain whatever text you want to put in them.
cat/ concatenate - This command allows you to not only create a txt file, but it can also display the content of a text file.
Making Files - Using the cat command in terminal, I created text/txt files, which are files that contain whatever text or information you want to put in them.
Creating Ransomware - Using python I created a ransomware. After using the mkdir command to create my file, I created the code for my ransomware and decryption key. Once ran, all my txt files became unreadable.
mkdir - Make Directory (file)
cd - Change Directory (move into a file/folder)
Encryption - The encryption code is what makes the txt files unreadable. This is how bad actors/hackers are able to hold personal information hostage and demand some type of payment for them back.
Decryption - The decryption code is what allows you to see your information again in normal text. It essentially reverses the damage done by the malware/ encryption. This part is what attackers keep from you until your pay them the amount they demand.
Malware - A piece of software designed to disrupt, cause harm, and could potentially gain access to a individuals computing device.
Wifi/ Password Cracking
Wifi/ Password Cracking
12/13/24
This is the demo server that we will be cracking/ "hacking" into using different attack methods like Dictionary Attack and a Brute Force Attack all within terminal/CLI.
Dictionary Attack - A method used to break passwords by trying a list of common words and phrases, like those found in a dictionary.
Brute Force Attack - A method of cracking passwords by systematically trying every possible combination of characters you may believe until is correct until you find the correct one.
Using the following command sudo ssh HAkhter@10.197.145.185 this allows us to remotely access the server while at the same time allowing use to conduct the brute force attack. This is possible since we will be prompted to enter a password to login to the server. This is when you would try all the different combinations of password you think it could be.
SSH - A network protocol that allows you to securely connect to and manage a remote computer over the internet, often used for tasks like accessing servers and transferring files safely.
The 10.197.145.185 is the servers IP address (A unique number assigned to each device on a network that helps identify and communicate with other devices)
sudo hydra -l “Hakhter” -P hackedwords.txt 10.197.145.185 ssh this allows you to remotely access the server and preform the Dictionary Attack. Since we downloaded a text(txt).file called "hackedwords.txt" which contains a list of known passwords that we will run each password to try and get into the server
Even though a Dictionary and Brute Force Attack seem similar, the main differences are:
Brute Force it tries all possible combinations of characters in a password or encryption key and It doesn't rely on any knowledge about the password's structure, common patterns. It simply exhausts every possible option until the correct one is found.
A dictionary attack uses a list of common words, phrases, and variations (like adding numbers or symbols) to guess a password. It’s more efficient than a brute-force attack because it focuses on likely passwords instead of trying every possible combination.
Page updated
Report abuse