I need help with subject matter....

HI.... I've been fooling around with networking and security for quite some time now. But i haven't even gotten to the basics of TCP/IP or hacking into another computer on the lan (my own). I've tried some things and have been able to successfully spoof the computer in winxp sp2. But nothing concrete as of such. Can anybody tell me how to approach this subject systematically? I want to learn to write my own programs for networking. I've got a pretty good knowledge of C and VC++. I just need to know how and where to start. Also is it better to learn network security using windows or Linux? :confused:

hi there

i think u can find the answers to all ur questions in the tutorial section and also i'll recommend that plz dont ask about hacking things over here as this is Anti Online is a seriously anti-cracking site but still u can goto the tutuorial section!!

What exactly do you want to accomplish? "networking and security" are pretty broad subjects. Do you have specific goals?

Quote:

---

i'll recommend that plz dont ask about hacking things over here as this is Anti Online is a seriously anti-cracking site but still u can goto the tutuorial section!!

---

Network security cannot be properly approached from an "anti-hacking" point of view. In order to understand how to secure a network - we must first understand its vunerabilities. Ignorance on the part of the administrator only allows for exploits to develop. Afterall, anyone can download a tool online and wreak havok. It's healthy to discuss these concepts as long as the methods we use are legal and ethical (i.e. we use our own lans/environments).

Perhaps AntiOnline have changed its views on this - but from reading back - I'm very much of the opinion that people would not favour the "head-in-the-sand" approach.

alamuru420123,

Quote:

---

is it better to learn network security using windows or Linux?

---

The ownous is on the individual. Begin with an OS you feel comfortable with. Many people choose Linux over Windows - to be honest - as long as you can approach one and feel confident with it - use it. Despite coming from a mixed OS background - I prefer Windows as all the computers on my work LAN are infact... Windows. If that's what you have - use it.

Quote:

---

Can anybody tell me how to approach this subject systematically?

---

You may wish to have a Google search for exactly what you want.

I find basic intrusion exercises are a good way to learn. There's a lot to be learnt for reverse engineering.

For example - if you were behind a router you may wish to experiment with a fresh installl computer not running a firewall or any service packs. You will find a plethora of resources on hacks and cracks allowing access and changes on the system. IIS hacks are a good one to play with.

Build the security gradually and understand why older hacks no longer work with increased security.

Script-kiddies are frowned upon - however the tools are still out there. There's no use frowning when one has penetrated your system ;).

Download a few tools and play with them. Cain and Able is always a good one to start with. If you are on a HUB - you may wish to sniff passwords being sent across the network and lean about brute-force methods to decypher them.

Look at OS security. Gaining access to a computer. For example Win 2k administrative passwords are easily hacked with the right tools. Perhaps look at how you could secure the OS using a different method - encryption etc.

Find ways of gaining access to your server. If you can get in - it's not secure.

Play with trojans - see the vunerabilities - can you scan for them? Remotely? Notice changes in broadcast traffic?

There's no end to what you can do - just remember to keep it on your own network

Quote:

---

I want to learn to write my own programs for networking.

---

Start simple and work your way up.

I would say the easiest method would be to develop small applications in VB to begin with (just my opinion). Develop these applications to communicate with the server and access its resources.

For example, you could develop a simple SMTP program which uses WinSock to relay through an e-mail server and send anonymous e-mails.

Quote:

---

Private Sub Form_Blah()
sckSocket.RemoteHost = "blah.blah.blah"
sckSocket.RemotePort = blah
sckSocket.Connect
End Sub

---

Browse through the levels of the OSI and see the types of applications you want to create; applications, ports, routing etc.

You can then move on to C - perhaps starting with a simple keylogger or port sniffer

It's your network - play with it - see what works for you - see how to secure it afterwards and how to think ahead of the hacker :)

You forgot to declare blah as an integer variable type, it doesn't contain a value, & you could have also atleast used a loopback address. Me naming my variables after porn stars, nameing functions after sexual acts, throwing the entire program into a endless loop of a huge maze of if/then/goto statments, then having a little giggle over the whole thing would have actually been a better example.

For the love of God - some people are never happy.:D

Fine - ADULT GUIDANCE RECOMMENDED ;)

Private Sub Form_XXX()
sckSocket.RemoteHost = "stark.naked.midgets.com"
sckSocket.RemotePort = 69
sckSocket.Connect
End Sub

If (sckBigJugs.State = sckWhipsNChains) Then
sckBigJugs.SendData txtInput.Text & vbCrLf
Else
response = MsgBox("You naughty, naughty boy!!!.", vbCritical)
End If

Better?

Thanx a lot but let me just tell you abt my exact situation. I am on a network in which there are more than a thousand computers connected. It's in my university. I've got a couple of good friends who let me use their computers for any purpose i need to (i've got my own as well). Now they've allowed me to actually use their computers. I even know the admin passwords. But the thing is ... i've tried to find out things abt networking on google and all i've been able to get were small tutorials on tcp/ip networking and packets and protocols and stuff like that . and most of them were terribly out dated. I want to learn this thing properly. It's not just abt hacking or trying to get root. I am pretty much comfortable with both winxp and mandrake 10.1. I want to be able to program my own tools for remote connections and stuff like that.... or atleast design some plugin type of things which will allow me to use standard software and connect to their computers. Can you tell me wht are the topics i am supposed to read about? Not just download the tools and use them. i've tried them. i feel that if i've first got a good working knowledge abt networking, using the tools will be easier. So where do i start? TCP/IP? :confused:

Quote:

---

i think u can find the answers to all ur questions in the tutorial section and also i'll recommend that plz dont ask about hacking things over here as this is Anti Online is a seriously anti-cracking site but still u can goto the tutuorial section!!

---

No no no... its not like that. Why don't you just say it? Threads like this are of low or no use/quality... the sheer redundancy and stupidity of l33t h4x0r types is just the thing that usually makes most sites close-up shop or make certian viewers want to do that for the owner. And for attempting to point that out you've become mob lynched possably because its his first post or simply because it's YOU of all people telling 'em what to do.

Anyways, I like computers... and then on the other side of things you've got a bunch of cyber-beatniks who wear silly hats, talk jive, & use the fact that they own and operate a computer just to toss the H word around and say that they've "become something" for it... as if this is the end-all to whatever gap of self-importance in thier lives they may have.

In these mob rule kinda situations I'd just click here.

Hi

First, I would choose an OS, let's take windows.

Second, let's choose a programming language: C/C++,
since you know this already.

Third, I think the "stuff" you are looking for is
winsock. What is it? "WinSock is a network application programming interface (API) for Microsoft Windows; a well-defined set of data structures and function calls implemented as a dynamic link library (DLL).

WinSock is a translator of sorts. In your application, you make function calls requesting generic network services (like send() and receive()); WinSock translates these generic requests into protocol-specific requests and performs the necessary tasks. Residing between your application and the network implementation, WinSock shields you from the details of low-level network protocols."[1]
A lot of simple example programs are also available [2].

Fourth, check other resources, lile[3], and make both: deepen and broaden your knowledge:
deepen:
- learn about "raw socket"-programming
- learn more specific details of TCP/IP, based on your experience you gained up to now.
It is, in my opinion, simpler to understand technicalities if you have an idea of what
is possible and what's not. Eg: You are comfortable with send() and receive(). Now,
how does this work?
broaden:
- learn about socket-programming using linux
- learn about security aspects, like which malformed packet causes what because of what
- neverending :D

Cheers

[1] http://www.sockaddr.com/
[2] http://www.sockaddr.com/ExampleSourceCode.html
[3] http://www.sockets.com/

Hey... thanx a lot. I've come across a pdf by some guy called beej about socket programming. He seems to know his stuff. I'll try that out first and then check out some more tutorials.

I find it interesting that a comment was made about "hacking", Ive always been told that hacking is just a supreme knowledge of computers and using that knowldge to find back doors in securiy to improve these flaws. If i am wrong pease tell me, but i thought hacking cracking and phreaking were all different types of hmm how to put it security maintenance/prevention(depending on purpose). Ive always feared saying anything about "hacking" because some people use it to define all three types(there are possibly more). And what languages would be good to start with for network security and remote computing?

No... its a word used to describe people who pick up on computers just because they have a constant and ever-lasting need or urge to feed an unusually large inferiority complex.

if your talking about running programs remotly and you had admin rights check out rpc/dcom for making Remote Procedure Calls.

check out psexec from systernals.com for a good illustration of what can be done using it.

Usage: psexec \\computer [-u user [-p psswd]][-s][-i][-c [-f]][-d] cmd [argument
s]
-u Specifies optional user name for login to remote
computer.
-p Specifies optional password for user name. If you omit this
you will be prompted to enter a hidden password.
-s Run the remote process in the System account.
-i Run the program so that it interacts with the desktop on the
remote system.
-c Copy the specified program to the remote system for
execution. If you omit this option the application
must be in the system path on the remote system.
-f Copy the specified program even if the file already
exists on the remote system.
-d Don't wait for process to terminate (non-interactive).
program Name of application to execute.
arguments Arguments to pass (note that file paths must be
absolute paths on the target system).



psexec \\<remote box> -u admin -s cmd

it'll ask you for the password then give you a dos shell on remote boxen or you can run any program that is either on the remote or that you copy over...all done using RPC. there are many examples off making remote proceedure calls on the net in just about every programming language.

hey... thanx for the link but it isn't working. It keeps giving me access denied even if i completely shutdown the firewall. there is something else tht i've noticed... i can't send messages using NET SEND \\<computer ip> <message>. It just says message alias could not be found. Does this have anything to do with these pstools programs?

Two different issues here:

1. psexec
example: psexec \\<remote box> -u <admin> -s cmd
First, make sure that the <admin> name is the one of the remote box,
ie "administrator" by default. Then, you will be prompted for the password.
Also make sure, that you use a known "message alias": by default, this is
the NETBIOS name and the ip of the <remote box>.
Internals of psexec can be found here [1].

2. net send
net send needs the messenger service to be activated, on sender as well as
receiver machine.
note about local test: "net send 127.0.0.1 test" might not work, but try "net send 192.168.1.10 test",
where 192.168.1.10 is your local box.

cheers


[1] http://ntkernel.com/articles/psexec.shtml

Hey.... thanx a lot. the messenger service was disabled (confound sp2 ) Now the messages are working but psexec still gives me access denied. I've to connect as both admin and administrator but it keeps giving me access denied. I've tried to connect to my comp and it works. ...I got a shell. But it still isn't working for other computers on the lan.