Rooting on Metasploitable : Ubuntu Server

Now I'll show how to rooting on ubuntu server, this is vulnerable server running on ubuntu machine, and how to attacking this machine we need to powerful tool that is Metasploit, this is my favorite tools on Backtrack cause multicomplex function of ability, I called this tools "Ametasploiterasu".

For mapping network and indentification of target service use nmap

So now we can look service and version of target system, from this data we can search vulnerable service to gate enterance into target machine, now open console of Ametasploiterasu (MSFCONSOLE) on terminal

I choose to try exploiting on samba service, I choose that caused by nmap result, so when I open msf console and search exploit for samba

I choose this exploit, cause this explout is multi samba and have rank excellent, use this exploit like here

I look option by type "show options" and we can look what the next option we need to fill, like LHOST as own IP, RHOST as IP Target, RPORT as Port we'll use on target machine and PAYLOAD as shellcode to get system on target here I do

And run exploit to try injecting payload and exploit into target system if that is success that will show process like this

After enterance into target machine we can try to type "ls" to look directory like this

I try to check id and who as I now in machine with command id and whoami

Now we had as root that mean we sucess get root or rooting in target system, after all we can get password hash into /etc/shadow

And now its time to crack password from this hash in /etc/shadow, I copy this into text editor and save as txt format and I save into john folder cause I use john the ripper to crack password hash like this

Finish.

Session Hijacking : Facebook Account

This is article I write about Session Hijacking with cookies to bypass login and enterance into facebook's account in one LAN, first need is prepare tools, you can use whatever OS but I recommend use Backtrack (Linux) cause All we need include in Backtrack

1. Nmap for Network Mapping
2. Wireshark for Packet Analys
3. Mozilla Firefox for Browser
4. Greasemonkey (Add-on for Firefox) install here
5. Cookies Injector on Userscript.org (Java script code for Greasemonkey) install here

This article I simulate with Virtualbox to running victim's system, first to do we need to scan network with nmap but we need to know own IP use ifconfig (linux) or ipconfig (windows) on terminal (linux) or cmd (windows to seeing own IP address

After we know our IP address we can scan network (in normal setting of LAN security), we can use nmap like here

After we know Target's IP now we can open Wireshark and hunting cookies on LAN.

I choose wlan interface cause I connect on network with WiFi, then this will open wireshark in Wireless interface

After this start to read packet on Wlan Interface type http.cookie on filter bar in Wireshark, that will filter just read packet on http protocol and filter contain cookie, if this work try to find "datr" packet into cookie of facebook from source of target's IP (192.168.1.3) like here

Click on cookie with right click and copy > Bytes > Printable Text Only
Go to Facebook Login Page this our Firefox had costumize with Greasemonkey include Script Code

Press ALT+C to popup cookies injector  and paste cookie data into injector like here

  

 After write cookie into our browser now try to refresh page of browser and this is result

And this is from Victim side

With this session attacker can use account like as real owner account as long as victim active, cause when victim logout session will expired and attacker will force to logout too.

Tips to prevent to be victim

* When you use Internet on public network make sure your network channel is safe from sniffer (Ettercap, Chain & Abel, etc.) look arp table with command #arp -a
* Use Protector your channel in LAN (Tuxcut with protect me mode or AntiNetcut)
* Renew your cookies as often as possible
* Use Private Network