Showing posts with label spy. Show all posts
Showing posts with label spy. Show all posts

How To chcek If you are Trageted by Any RAT or KeyLogger

Here i will show you How to find if you are infected by and RAT or KeyLogger.
RAT and Keyloggers are hacking methods to spy any computer or mobile phones also. This type of softwares normally send by to the target computer through any image or in some kind of softwares. When our computer is get start they starts automatically, Using startup option. If you have any doubt that there is some keylogger or RAT then in this post i will teach you how to find them and remove from spying or hack your system.

HERE WE GO:

1. Now every program has their own process which can be seen on task manager. So the first thing to do is to find out which process the Trojan is being attached to. If you see some unknown process search that on google. A good hacker will always makes sure he hides its process with a Windows based Process, for eg. svchost.exe or something like that.

2. If you cant find, then the next thing you can do is use cmd (to open cmd prompt, Click on Start--->Accessories-->Command prompt).

3. Once Command Prompt is opened, use this command: netstat -an |find /i "listening"

Note: The NETSTAT command will show you whatever ports are open or in use, but it is NOT a port scanning tool!

Now we wonder What this Command does? This command will show all the opening ports. Now check for any unknown port.

4. You can skip step 3 if you want, and can do this instead.

Open command prompt and type netstat -b
















Now this command will show you the active connections with the process with their PID (Process Identifier) and also the packets.

Look out for SYN Packets and the Foreign address its been connecting with , check the process its been associated with, check the ports also. If you find that its connecting to some unknown ports, then you can say you have been backdoored (hidden ports to get administrative command on your system).

5. Go to your task manager. On the top of it, click on View---> select Column---> Tick on PID (Process Identifier).

Match the suspicious Process with the Processes In task manager, check PID also. Now make a list of suspicious Programs in task manager and find that if they are key-logger or RAT or not? and now you have to switch of them to start on startup.


























How to delete them from start up? I have two methods here.
I) Go to regedit ---> HKLM\Software\Microsoft\Windows\Current version\Run
On the Right hand side, check for the process name which you find on step 4. if its not their. Check at
HKCU\Software\Microsoft\Windows\Current Version\Run

II) Open Cmd prompt & type start msconfig. Go to Startup tab, you can check the startup process there.

That's all hope this post will work for you be safe from RAT, Key-Loggers and other Trojans also.

Remote Administration Tool

A Remote Administration Tool (RAT) is used to remotely access and manage someone’s computer. You can access single or multiple computers together. We can do following tasks:
  • Screen/camera capture or control
  • File management (download/upload/execute/etc.)
  • Shell control (usually piped from command prompt)
  • Computer control (power off/on/log off)
  • Registry management (query/add/delete/modify)
  • Other product-specific function
To working with any RAT you need to create a rat client and to log into server through RAT client and then you can do whatever you want without knowing the user. You can spy easily.
Reverse Connection
RATs that utilize reverse connection have a few major advantages, such as the ones listed below.
  • Outgoing connections generally are less threatening, and are less likely to be detected or blocked by a firewall, such as a router.
  • Since the victim's computer is connecting to the remote administrator, he or she will not need to know the victim's IP address in order to connect.
  • The remote administrator does not need to know to which or how many computers the RAT is being installed on, which allows for mass-distribution.
  • If mass-distributed, it is much easier to keep track of the computers the RAT is installed on, since they are all "calling home" by connecting to the remote administrator.
A diagram is shown below (note, it is basically the reverse of direct connection-type RATs:
Func   Func
   \    /    Func    Func
    [SERVER]   \    /
       |    [SERVER]
       |      /
       |     /
       |    /   Func    Func
       |   /      \     /
    [CLIENT]-----[SERVeR]
Popular RAT Software
  • Back Orifice
  • Bifrost
  • Bandook RAT
  • Poison Ivy
  • SubSeven
  • Team Viewer
  • NetBus
  • Y3k RAT
  • Optix Pro
  • Blackshades

How To Hack Into WiFi Network?


These days the concept of wireless network is getting popular. The best and powerfull way is to use WiFi network in LAN. If you are working in WiFi and you don’t have permission to access the network then this post is only for you. Hear you will learn how hack into a wifi?

Before you must have:
  1. Mozilla Firefox
  2. Firesheep - A Firefox extension that demonstrates HTTP session hijacking attacks.
  3. WinPcap - WinPcap is an open source library for packet capture and network analysis for the Win32 platforms. It includes a kernel-level packet filter, a low-level dynamic link library (packet.dll), and a high-level and system-independent library.

Step 1: Install WinPcap then drag the Firesheep add-on, and put it on the Firefox icon. Firefox will open and will ask you to install the add on. Install it and restart Firefox.

Step 2: Open the add-on (You can do it by clicking on View -> Sidebar -> Firesheep), then click on Start Capturing and it'll start capturing, and as soon as somebody logs in any account it'll show up the logs, and then you can access their account.

A very simple way to get access in to a WiFi network and also to hack any E-mail account.

Other wifi hacking softwares.
1.) NetStumbler
2.) Kismet
3.) Airsnort
4.) Cowpatty
5.) Wireshark

Mozilla Hack to Speed it up


Hey Friends Before this I shared you how to speed up internet of your system and how to speed up the your tube videos. And today i am going to teach you about increasing the speed of your mozilla.

This tricks is specillay for those who works on a low speed internet (cell phone or data cards).



Here we go


type about:config in the address bar, It will a new window then click on i'll be careful, i promise. Then look for the following entries, and make the corresponding changes.  

network.http.max-connections-per-server =32
network.http.max-persistent-connections-per-proxy =16
network.http.max-connections = 64
network.http.max-persistent-connections-per-server = 10
network.http.pipelining = true
network.http.pipelining.maxrequests = 200
network.http.request.max-start-delay = 0
network.http.proxy.pipelining = true
network.http.proxy.version = 1.0


Lastly right-click anywhere and select New- Integer. Name it nglayout.initialpaint.delay and set its value to 0. This value is the amount of time the browser waits before it acts on information it receives. That's all.
blog ping

What are Key Loggers? How They Work..?

What is key logger?

It is a type of software by which any one can know your password or other information. This software is basically works for all the keys you hit on your keyboard. Generally when we enter our password in password box it will never show you what you entered there. but the keyboard have function to know the hidden data. and the key logger can save it in an .txt or other files.

Keyloggers have been a major problem today as it does not require any prior knowledge of computers to use it. So hackers mainly use keyloggers to steal your passwords, credit card numbers and other confidential data.
Below are some methods through which you can protect your computer from keyloggers:

Use a Good Antivirus

This is the first and basic step that you need to take in order to protect your computer from keyloggers. Use a Good antivirus such as Kaspersky, Norton or Mcafee and update it regularly.

Use a Good Antispyware

Since keyloggers are basically spywares, if you are a frequent user of Internet then you could be exposed to thousands of keyloggers and spywares. So you should use a good antispyware.

Antilogger can be Handy

Antiloggers are programs that detect the presence of keyloggers on a given computer. Over past few years, I have tested a lot of anti-logging programs and have found as the best antilogger.
Zemana
Normally a keylogger can be easily detected by a Good Antivirus program, but hackers use some methods such as hexing, binding, crypting and similar techniques to make it harder to be detected by antivirus programs. In this case Zemana Antilogger comes handy as the program is specially developed to protect your system against harmful keyloggers.

Online Scanning

When ever you receive a suspicious file, you scan it with online scanners such as Multi Engine antivirus scanner which scans your file with 24 antivirus engines and reports it back to you if the file is recognized as a virus or spyware. This ensures that none of the malicious programs can escape from being detected as there are 24 different antivirus engines are involved in the scanning process.

Sandboxie

Sandboxi is another great program to help you protect your computer against harmful keyloggers and spywares. Sandboxie runs your computer in an isolated space which prevents your program from making permanent changes to other programs in your computer.
When ever you receive a file that looks suspicious, just run the program with Sandboxie so even if it is a keylogger or any other virus it will not make permanent changes to your computer system.
To run a program in Sandboxie follow the steps as mentioned below:
1. Open sandboxie and click on sandbox menu on the top
2. Now goto Default sandbox
3. Then click on run any program
4. Now select the file you wish to run in sandboxie and click open

Keyscrambler

Keyscammer is one of the best protection against keyloggers that you can have, Keyscrambler is a small program which encrypts your typed keystrokes so even if the victim has installed a key logger on your system, he or she will get encrypted keys. Keyscrambler currently supports Firefox, Internet explorer and other applications, however its premium version supports more than 160 applications.