Google.sm San Marino Domain Hacked By MCA-CRB, Algerian Hacker

<div dir="ltr" style="text-align: left;" trbidi="on"><span style="background-color: white;"><span style="color: #555555; font-family: Arial, Tahoma, Century gothic, sans-serif;"><span style="line-height: 24px;">Google.sm hacked and defaced by  MCA-CRB, Algerian Hackers</span></span></span><span style="background-color: white; color: #555555; font-family: Arial, Tahoma, 'Century gothic', sans-serif; line-height: 24px;">. Technically Registrar server is hacked using SQL Injection and hackers change DNS information about sites. There is not any specific reason mention about this hack on deface page but this rise many questions for security experts that how much these hacker are getting powerful.</span><br /> <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCe2pp8YYDzqEXciYzrWPaihlLPXtYiuicWgZtvKp36l7Tg4go7vjY-O-3ucsbvNWKAJbjOBjsNc2EHnRLE1pOKEwufmB8ufOptgqgT5p2i_5ywdcuAAE6QVF6S6skMJVjWBc5nB3MzIOW/s1600/google.sm.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="396" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgCe2pp8YYDzqEXciYzrWPaihlLPXtYiuicWgZtvKp36l7Tg4go7vjY-O-3ucsbvNWKAJbjOBjsNc2EHnRLE1pOKEwufmB8ufOptgqgT5p2i_5ywdcuAAE6QVF6S6skMJVjWBc5nB3MzIOW/s640/google.sm.png" width="640" /></a></div><span style="background-color: white; color: #555555; font-family: Arial, Tahoma, 'Century gothic', sans-serif; line-height: 24px;"><br /></span><span style="background-color: white; color: #555555; font-family: Arial, Tahoma, 'Century gothic', sans-serif; line-height: 24px;"><b>Deface Page Say's:</b></span><br /><div style="text-align: center;"><span style="background-color: white; color: #555555; font-family: Arial, Tahoma, 'Century gothic', sans-serif; line-height: 24px;">"</span><span style="color: red; font-family: Arial, Tahoma, Century gothic, sans-serif;"><span style="line-height: 24px;">T0TAL C0NTR0L</span></span></div><div style="text-align: center;"><span style="font-family: Arial, Tahoma, 'Century gothic', sans-serif; line-height: 24px;"><span style="color: red;">By MCA-CRB</span></span></div><div style="text-align: center;"><span style="font-family: Arial, Tahoma, 'Century gothic', sans-serif; line-height: 24px;"><span style="color: red;">Algerian Hacker</span></span></div><div style="text-align: center;"><span style="color: red; font-family: Arial, Tahoma, Century gothic, sans-serif;"><span style="line-height: 24px;"><br /></span></span></div><div style="text-align: center;"><span style="color: red; font-family: Arial, Tahoma, Century gothic, sans-serif;"><span style="line-height: 24px;">Not Panic</span></span></div><div style="text-align: center;"><span style="color: red; font-family: Arial, Tahoma, Century gothic, sans-serif;"><span style="line-height: 24px;"><br /></span></span></div><div style="text-align: center;"><span style="color: red; font-family: Arial, Tahoma, Century gothic, sans-serif;"><span style="line-height: 24px;">It's A New Generation 0f Hackers </span></span></div><div style="text-align: center;"><span style="color: red; font-family: Arial, Tahoma, 'Century gothic', sans-serif; line-height: 24px;">Greets t0 => My Best Friend Mr-AdeL & i-Hmx & Kader11000 & SPouPouH & Pirou </span></div><div style="text-align: center;"><span style="color: red; font-family: Arial, Tahoma, Century gothic, sans-serif;"><span style="line-height: 24px;">And my little brother Dz-Black All Members Sec4... <= </span></span></div><div style="text-align: center;"><span style="color: red; font-family: Arial, Tahoma, Century gothic, sans-serif;"><span style="line-height: 24px;">To Be Continued .... Forza-Dz</span></span><span style="background-color: white; color: #555555; font-family: Arial, Tahoma, 'Century gothic', sans-serif; line-height: 24px;">"</span></div><div style="text-align: center;"><span style="background-color: white; color: #555555; font-family: Arial, Tahoma, 'Century gothic', sans-serif; line-height: 24px;"><br /></span></div><div style="text-align: left;"><span style="background-color: white; color: #555555; font-family: Arial, Tahoma, 'Century gothic', sans-serif; line-height: 24px;"><b>Hacked Site:</b></span></div><div style="text-align: left;"><a href="http://www.google.sm/">http://www.google.sm/</a></div><div style="text-align: left;"><br /></div><div style="text-align: left;"><span style="color: #333333; font-family: Arial, sans-serif;"><span style="line-height: 18px; white-space: pre-wrap;"><b>Mirror:</b></span></span></div><div style="text-align: left;"><a href="http://www.zone-h.org/mirror/id/19300905">http://www.zone-h.org/mirror/id/19300905</a></div><div style="text-align: left;"><br /></div><div style="text-align: left;"><b style="background-color: white; color: #555555; font-family: Arial, Tahoma, 'Century gothic', sans-serif; line-height: 24px; margin: 0px; padding: 0px;"><u style="margin: 0px; padding: 0px;">DNS spoofing Attack Detail's:</u></b><b style="background-color: white; color: #555555; font-family: Arial, Tahoma, 'Century gothic', sans-serif; line-height: 24px; margin: 0px; padding: 0px;"><u style="margin: 0px; padding: 0px;"><br style="margin: 0px; padding: 0px;" /></u></b><span style="background-color: white; color: #555555; font-family: Arial, Tahoma, 'Century gothic', sans-serif; line-height: 24px;">DNS spoofing (or DNS cache poisoning) is a computer hacking attack, whereby data is introduced into a Domain Name System (DNS) name server's cache database, causing the name server to return an incorrect IP address, diverting traffic to another computer (often the attacker's).</span><br /><span style="background-color: white; color: #555555; font-family: Arial, Tahoma, 'Century gothic', sans-serif; line-height: 24px;">Every country have registrar server which return the IP of local huge sites like google, msn etc. If registrar sever is compromised then we can redirect all those domains to specific ip which make it believe that sites are hacked. Basically sites are functioning properly, only there ip is hacked to hacked ip.</span></div></div>

Google.sm San Marino Domain Hacked By MCA-CRB, Algerian Hacker

Google.sm hacked and defaced by  MCA-CRB, Algerian Hackers. Technically Registrar server is hacked using SQL Injection and hackers change DNS information about sites. There is not any specific reason …

Read more »

intro to Dictionary Attacks

<div dir="ltr" style="text-align: left;" trbidi="on"><div style="text-align: center;">  Dictionary Attacks</div><iframe allowfullscreen="" frameborder="0" height="315" src="http://www.youtube.com/embed/1FXBe7RUiQY" width="560"></iframe> <div style="text-align: center;"><br /></div><div style="text-align: center;"><span style="font-size: small;"><br /></span></div><div style="text-align: left;"><span style="font-size: small;">A dictionary attack is when a text file full of commonly used passwords, or a list of every word from the dictionary is used against a password database. Strong passwords usually aren’t vulnerable to this kind of attack. In the following example, I will use Brutus, a very common password cracker, to show a dictionary attack against an ftp server. Brutus is a Windows only program, but at the end of this chapter I will list a couple more password crackers, some of which are made for Mac, Windows, and Linux.<br />Dictionary Attacks</span></div><div style="text-align: left;"><span style="font-size: small;"><br />Before I get into the example, you must first know what an FTP server is. FTP stands for File Transfer Protocol. FTP is a simple way to exchange files over the internet. If a hacker got FTP access to my website, he could delete/upload anything he wants on my server. An FTP address looks similar to a website address except it uses the prefix ftp:// instead of http://. I set up an FTP server on my computer so I could demonstrate. You can get Brutus at <a href="http://www.hoobie.net/brutus/" target="_blank">http://www.hoobie.net/brutus/</a></span></div><div style="text-align: left;"><br /></div><div style="text-align: left;"><br /></div><div style="text-align: left;">1. First the hacker would choose a target. In this case it’s my home computer and the IP address for your home computer is 127.0.0.1 .<br />2. By going to ftp://127.0.0.1 I get a pop-up box asking for a username and password. </div><div style="text-align: left;"><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2o9-Za974MkTz0aVqcptDLYL1Uq7DmJeA3Pk2fCo7-9lMCVNMwjyC17hhDOqmTcPXue3R8BlDxaKKBnmAGQT_EkSF1UCHgh9rHj75nrZ0zbg9Rd0XC9Wewto_AtNx_31tKIo_qa6d1WaY/s1600/Dictionary+Attacks%28way2hackintosh%291.bmp" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi2o9-Za974MkTz0aVqcptDLYL1Uq7DmJeA3Pk2fCo7-9lMCVNMwjyC17hhDOqmTcPXue3R8BlDxaKKBnmAGQT_EkSF1UCHgh9rHj75nrZ0zbg9Rd0XC9Wewto_AtNx_31tKIo_qa6d1WaY/s1600/Dictionary+Attacks%28way2hackintosh%291.bmp" /></a></div>3. Next the hacker would launch a program similar to Brutus and attempt to crack the password.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="http://www.blogger.com/blogger.g?blogID=7300937913117639331" imageanchor="1" style="clear: right; float: right; margin-bottom: 1em; margin-left: 1em;"></a><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhB5NW5icSlDbPwjIWDv8Y2bYXaNWxCVSTtMrWTWi51doELJfahGmqx-WsvJ7KjBoGFEP1PC44782-p_AQgkjiQnuWo8aLy5K3PlcT3VIh9EGp4OT-C26En7et4UKXvxQRkigyEmKoMR-bB/s1600/Dictionary+Attacks%28way2hackintosh%292.bmp" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhB5NW5icSlDbPwjIWDv8Y2bYXaNWxCVSTtMrWTWi51doELJfahGmqx-WsvJ7KjBoGFEP1PC44782-p_AQgkjiQnuWo8aLy5K3PlcT3VIh9EGp4OT-C26En7et4UKXvxQRkigyEmKoMR-bB/s1600/Dictionary+Attacks%28way2hackintosh%292.bmp" /></a></div>4. In the target you put the IP address of the website and to the right select the appropriate option, which in this case is FTP.<br />5. The default port is 21 but some websites change this to make them a little more secure. If you find out that the port isn’t 21, you can find the right one by doing a port scan. We will get into this later in the book.<br />6. If you don’t know any of the usernames for the FTP server, then you will have to get a list of the most common usernames.<br />7. For a dictionary attack you will have to choose the pass mode Word List and browse and select the file containing your word list. You can get some good password lists at <a href="http://packetstormsecurity.org/Crackers/wordlists/">http://packetstormsecurity.org/Crackers/wordlists/</a> .<br /><br />8 .Once you hit Start the program will attempt to connect to the server and begin to try all the possible combinations from your lists.<br /><br /><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL-k_AklAf3RFdELbPaKzxV8KmI5LNirdAvXgHQdIxMdvxe5HDHEMBuJEF04kE-p9OhT3rsfSxYgqNnEmrj9dZMe1GkZr2SxeInGkKGmRRKorCH17qs83U12yk4y2XlF4I-tSuO538rEm8/s1600/Dictionary+Attacks%28way2hackintosh%293.bmp" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiL-k_AklAf3RFdELbPaKzxV8KmI5LNirdAvXgHQdIxMdvxe5HDHEMBuJEF04kE-p9OhT3rsfSxYgqNnEmrj9dZMe1GkZr2SxeInGkKGmRRKorCH17qs83U12yk4y2XlF4I-tSuO538rEm8/s1600/Dictionary+Attacks%28way2hackintosh%293.bmp" /></a></div><br />9.If you’re lucky, eventually it’ll get the right Username:Password combination. As you can see below, it got the correct combination of username – admin and password – password.<br /><br />10. A smarter hacker would use a proxy when using a program like this. What a proxy does is cloaks your IP address by sending your connection request through another computer before going to the target. This is a smart idea because as you will see in the image below, Brutus leaves a huge log of your presence on the target server.<br /><br /></div></div>

• 
• 
• 

1. 1
2. 2
3. 3

• Previous
• Next

intro to Dictionary Attacks

  Dictionary Attacks A dictionary attack is when a text file full of commonly used passwords, or a list of every word from the dictionary is used against a password database. Strong passwords usually …

Read more »