Backtrack Tutorials

Information Gathering: Email Harvester

Quick tutorial on how to extract email addresses from web sites.

Unlike search engines, email harvesters are only looking for email addresses. They are usually sent by spammers and any addresses they find are added to their spam database. Obviously this is a bad thing and you don’t want harvesters to find your address.

To deal with havesters, display the address using an image file so harvesters can’t see it. Users must manually enter the address into an email, you could also protect the page containing the address with a password, ”encode” the address using JavaScript or the most commom, use a contact form.

To prevent other people to harvest your email, do not post your email at the public area (forum, website etc) and disable “display email address” on your public profile.

Let’s cut the crap and start with the tutorial:

1. Go to Metasploit console by typing msfconsole, and then run:

# msf> use gather/search_email_collector

2. Now you need to set up the domain you want to locate the email address then type “run” or “exploit” and wait for results as shown in snapshot:

# set DOMAIN globo.com

# run

As you can see harvester has found 3 emails from globo.com!

That’s it. . . now collect as many emails as you can and sell to spammers! Just kidding. . .

QR-Code Generator Attack Vector

QR Code is the trademark for a type of matrix barcode.

With this Backtrack QR Code Generator you could either create a code redirecting to your site or aQRCode with a URL (or your IP) then create a SET attack vector to assist with the attack.

1. Open SET toolkit

2. Choose Social-Engineering Attacks, then option 9 (QRCode Generator Attack Vector)

3. Now choose URL to redirect your QRCode, or your IP, with your fake site Don’t forget to write “http://; before your IP

After that you’ll see a message that your QRCode has been generated.

Test your QRCode and ~~hack some poor guy~~.

Hacking Email Accounts with Hydra

The purpose of this article is not to show how to hack email accounts, but to demonstrate the power of Hydra combined with a strong wordlist.

Hydra is a tool that makes cracking protocols such as pop3, ftp and telnet relatively easy. In my example, I will be cracking an email account (my own). Hydra uses brute force, so you HAVE to have the word in your wordlist in order to hack the email.

Wordlist Post

I’ll be hacking a pop3 email account but you can use other protocols, such as:

TELNET, FTP, FIREBIRD, HTTP-GET, HTTP-HEAD, HTTPS-GET, HTTPS-HEAD, HTTP-PROXY, HTTP-PROXY-NTLM, HTTP-FORM-GET, HTTP-FORM-POST, MYSQL, POSTGRES, POP3-NTLM, IMAP, IMAP-NTLM, NCP, NNTP, SMTP-AUTH, SMTP-AUTH-NTLM, SSH2, SNMP, CVS, VNC, POP3, VMWARE AUTH.

1. Open Hydra typing “xhydra” or go through menu.

2. On the Target tab, enter the target, the port, the protocol and check the options like below:

3. On the Passwords tab, enter the username (the email account you want to ~~hack~~ check password strength). Check the “Password List” button (then choose the path to your password list), “try login as password” and empty password options.

A dictionary attack using a wordlist relies on the fact that most users choose weak passwords. Very common passwords include password, computer, work, and most of the popular female names.
A wordlist can be used to to attempt a dictionary attack against any system which allows repetitive login attempts, such as SSH or POP3. But you already knew that. . . My word lists:

Social Engineering – set Toolkit – Facebook Hack

- Social Engineering: Understood to mean the art of manipulating people into performing actions or divulging confidential information.

I’m going to show you how to hack facebook account using backtrack 5. Just follow the steps.

1. Open your backtrack 5’s terminal and type cd /pentest/exploits/set (or go through start menu), then type ./set to open the Social Engineering Tool Kit SET