Embedded Files
DEC 2024
Password cracking: Hacking into a Server
Objective: I was tasked with emulating a real world scenario of an attack onto a server. The goal was to successfully break into a server as its user gaining access to it.
Link to the lab: X <- click
Gaining intelligence
Using the image below we are already exposed to several key items; The name of the user on the server: hakhter
The private IPv4 address of the server: 10.197.145.185
VOCABULARY:
Password cracking is simply the act of trying to guess or log into an account or device without knowing its password. There are several different methods of password cracking, the main ones we will focus on are:
Brute force- The act of entering in every possible combination of numbers, symbols, and letters until we eventually get the right combination necessary to break in.
Dictionary Attack- Using a predetermined list of available possible passwords until one eventually works.
In this experiment we are conducting a dictionary attack.
Brute force attack attempt
After analyzing the image and looking for its key details, I was able to try and attempt to log into it within Kali Linux terminal using prior knowledge I know about the user. All my attempts were unsuccessful.
(failed attempts trying to password guess)
After the failed attempts, I moved onto performing a dictionary attack using a provided list containing thousands of passwords. In Kali the tool we would use for this would be Hydra; a preinstalled tool used for password cracking attempts. Hydra attempts to password crack by going through each password on the list until one is found.
As seen on the image to the right, Hydra was successfully able to retrieve the correct password to crack into: Goku44
(executing command on terminal using hydra. Attempt successful)
After retrieving the password, I am now able to successfully log into their server and do anything I please with it through the terminal.
Enjoyability of the activity:
This has been one of my most favorite projects/labs I have done. I especially enjoyed being able to see in real time what my attempts are doing as well as learning what each word within a command on the terminal does because it helps further my knowledge of penetration testing.
Tips and tricks for users:
The best thing anyone can do to secure anything is to create a strong and unique password. Create a password with a mixture of different numbers, letters, symbols, capitals, as well as being decently long. Also ensure that no two applications are using the same password.
In case a hacker does break through this strong password, enable 2FA/MFA for all your accounts. This is where you have two or more forms of authentication when logging in. For example, you may have to enter your password as well as a finger print in order to log into an application.
OCT 2024
Sandboxing and Malware Creation
Sandboxing is the process of creating an environment where you can safely experiment and test out anything you want without the risk of breaking anything valuable.
For the first part of this project I created a custom Windows 10 sandbox within Virtual Box. This will be useful later on because we will use this sandbox to safely test and experiment with different harmful programs in order to study them whilst keeping the host computer safe.
You can make sandboxes to any os you wish to! It is not stricly limited to the Windows Operating System. Sandboxes can be made for any Windows versions, any Linux Distro, and although it is difficult, Mac OS is also possible to create a sandbox environment for.
(Windows 10 Sandbox Environment within Virtual Box)
(Windows 10 after installing WannaCry Ransomeware)
Within the Windows 10 environment I installed various different malicious software such as WannaCRY a ransomeware, (the immage to the left), as well as Bonzi Buddy, a spyware and trojan. There are many differnt types of malware in general, some of the main ones include:
Trojan: Any Malicious program disguised as another non-suspicious program installed directly by the user on the computer.
Spyware: A malware designed to hide in the system background while collecting as much data and information as possible.
Worm: A malware that infects an entire network remaining within it and spreading to any and all devices on that infected network.
Virus: A malware designed to replicate and clone itself in order to overload a computers hardware and spread to other devices.
Ransomeware: A malware that LOCKS ALL valuable user data and files, then demands a sum of money to have them unlocked.
Linux Distribution: Linux in general is an open source Operating System (OS). With it being open source, people are able to take the base frame of Linux and create it their own way. A Linux Distribution is a unique version of Linux that has been passed around as its own version for an OS.
Kali Linux: This is an open source specific version of Linux that cyber professionals utilize. This comes preinstalled with all the types of tools a professional would need to utilize for either attacks or deffence, such as Hydra, Nmap, Wireshark, and ect.
Utilizing Kali Linux, I was able to enter into the control panel and create my own folder within the command prompt, as well as create a python file. In this file I began to create my own custom Ransomeware off of a base template provided.
Once ran, the ransomeware infected any file on that folder and encrypted it. After the encryption I created a specific python file in order to decrypt the data and restore my files.
Below are an image of my files from before the decryption and after:
(Encryption Ransomeware)
(Ransomeware decryption)
Page updated
Google Sites
Report abuse