Netcat and Cymothoa Revision

This is a revision of a previous paper, because the attack is reversed, In this condition I was move and extract cymothoa folder on desktop and I'll try to execute cymothoa from Backtrack as Attacker.

And this will connected with Attacker's computer

 

At this condition victim and attacker was connected at port 8888

With this posistion mean I was enter to cymothoa folder and execute cymothoa

Cymothoa active running in terminal attacker (Backtrack) on real position in Victim's system as remote

I type ps -axu to look service running on victim's system and choose bash with pid 1689 as root access, after choose to definetely application service I'll infect is by cymothoa

Cymothoa will infected process with pid 1689 on port 8888 as remote access's port and this is bash shell service

As look at above, that service application has infected by cymothoa with remote method from netcat.

This is so dangerous infection, cause cymothoa have same character with real cymothoa as parasite.

Maltego

 

  Do registration with email and activate account with verification as email used to register maltego and login from maltego

Maltego is a tool intended to obtain accurate information and give information on the linkage of information from another one, each variable can be tracked based on the option "transform" in the menu Maltego, maltego can track the following categories: Infrastucture :

1. AS (An internet Autonomous System
2. DNS Name
3. Domain
4. IPv4 Address
5. Location
6. MX Record (DNS Mail)
7. NS Record (DNS Name Server)
8. Netblock
9. URL
10. Website

Personal :

1. Document
2. Email Address
3. Person
4. Phone Number
5. Phrase
6. Twit (from Twitter)
7. Affiliation (Facebook)
8. Affiliation (Twitter)

As we look like that information Maltego is a unique platform developed to deliver a clear threat picture to the environment that an organization owns and operates. Maltego’s unique advantage is to demonstrate the complexity and severity of single points of failure as well as trust relationships that exist currently within the scope of your infrastructure.

Maltego can be used for the information gathering phase of all security related work. It will save you time and will allow you to work more accurately and smarter.

Maltego aids you in your thinking process by visually demonstrating interconnected links between searched items.

Maltego provide you with a much more powerful search, giving you smarter results.

If access to "hidden" information determines your success, Maltego can help you discover it.

Source : http://www.paterva.com

Hacking

"Hacking is not how smart you are but how you try harder than anyone to thinking and doing over than ordinary"


This is what I found in my journey on study here, now, continued and later.