MBR stands for master boot record that is automatically created when creating the first partition harrdisk. The location is always on the first disk sector. MBR is a very important data structure that contains the partition table and a number of executable code for the boot start (way to hard to make loading the operating system). serves to store information about Operating System, and then be read by theBIOS.
Master Boot Record, a small program that is executed when a computer boots up. Typically, the MBR resides on the first sector of the hard disk. The program begins the boot process by looking up the partition table to determine which partition to use for booting. It then transfers program control to the boot sector of that partition, which continues the boot process. In DOS and Windows systems, you can create the MBR with the FDISK /MBR command.
In this partitioning scheme, the partition is divided into three types, namely
Primary Partition or the primary partition, the partition that can be used to performthe operating system boot process and store user data. There were only fourpieces only in a single hard disk. If there is an additional partition, then the amountwill be reduced to three primary partitions.
Extended Partition or additional partitions, the partitions that can accommodatemultiple logical partitions. This partition is actually one kind of primary partition. The numbers should only be one piece only.
Logical Partition or logical partition, that partition can not be used to make the process of booting the operating system, and can only store user data. Amount is not restricted, meaning that in a single hard disk may have a lot to have its main office logical partition to a single additional partition.
Structure File System
FAT16
FAT16 is a file system that uses the allocation unit that has a limit of up to 16-bit, so it can store up to 216 units of allocation (65536 pieces). This file system has a capacity limit of up to 4 Gigabyte sizes only. Allocation unit size used by the FAT16 partition depends on the capacity to be about to be formatted.Pros:FAT16 is a file system that is compatible in almost every Operating System be it Windows 95/98/Me, OS / 2, Linux and even Unix.Disadvantages:FAT16 has a capacity of a fixed number of clusters in a partition, so the larger the hard drive the size of the cluster will be greater, meaning that no matter how small the file still will take 32KB of disk. Another bad thing is FAT16 does not support compression, encryption and access control in a partition. FAT16 is a file system that uses the allocation unit that has a limit of up to 16-bit, so it can store up to 216 units of allocation (65536 pieces). This file system has a capacity limit of up to 4 Gigabyte sizes are in addition to the allocation unit sizes used by FAT16 partition depends on the capacity that was about to be formatted for example if the partition size is less than 16 megabytes, then Windows will use the FAT12 file system, and if the partition size larger of 16 Megabytes, then Windows will use the FAT16 file system.
FAT32
FAT32 began in the know in 1976 and used on Windows 95 SP2 operating system, and the continued development of FAT16. Because it uses large file allocation table (32-bit), FAT32 can theoretically address on the allocation of up to 232 units (4,294,967,296 pieces). Nevertheless, its implementation, the number of allocation units that can be addressed by FAT32 is 228 (268 435 456 pieces).Pros:FAT32 offers the ability to accommodate larger jumlat cluster in the partition. It also developed the ability to drive is better than FAT16.Weaknesses:However FAT32 has a weakness that does not have FAT16 is limited in the operating system that can recognize FAT32. FAT16 can not as well known by almost all the Operating System, but it does not matter if you are running FAT32 on Windows XP because Windows XP does not matter what file system in use on that partition. FAT32 file system is not able to accommodate single file size of 4gb or more. Not only that, some argue that the FAT32 filesystem is more easily fragmented than NTFS, if fragmentation increases, the performance will certainly go down.
NTFS (New Technology File System)NTFS on first introduced in Windows NT and the file system that is very different compared to FAT technology. NTFS or New Technology File System1, is a file system in the flyer that came by the Microsoft Windows NT operating system family, which consists of Windows NT 3.x (NT 3.1, NT 3.50, NT 3.51), Windows NT 4.x (NT 4.0 with all service packs), Windows NT 5.x (Windows 2000, Windows XP, and Windows Server 2003), and Windows NT 6.x (Windows Vista, Windows 7). NTFS works on the principle btree and using Full Indexing. Because of that fragmentation can be reduced to a minimum. Then, each file on a NTFS has a checksum, which allows the file is repaired perfectly when times are troubled NTFS.Pros:NTFS offers better security, file compression, clusters, and even support data encryption. NTFS is the default file system for Windows XP and Windows if you do a regular upgrade you will be asked whether you want to upgrade to NTFS or keep using FAT. NTFS also has features to accommodate more than one piece of data in a file room. This feature is called Alternate Data Stream.Weaknesses:Disadvantages of NTFS that is often discussed is the compatibility of older software or operating systems like win 9x and ME. Microsoft's old operating system is not able to read NTFS file system. In addition, some people considered that the NTFS file system is not universal, because the OS other than microsoft is not able to perform read-write on NTFS partitions, but this has been resolved. Some argue that the NTFS system partition berfile would be difficult to repair if a problem occurs, NTFS file systems are currently quite popular, so there is recovery tools that supports a data recovery and repair NTFS partitions berfile system.
EXT2
Ext2 or second extended file system A file system for Linux kernel. Though not including the file system journaling, but the successor of ext3 provides features journaling and is almost completely compatible with ext2.
The first file system used in Linux Operating System is the most Minix FS completely free of bugs, but uses 16-bit offset and maximum size only 64 MB. The file name is also limited to only 14 characters. To overcome this, was made new file system that starts with the addition of a virtual file system layer on the kernel Linux.
The first file system used in Linux Operating System is the most Minix FS completely free of bugs, but uses 16-bit offset and maximum size only 64 MB. The file name is also limited to only 14 characters. To overcome this, was made new file system that starts with the addition of a virtual file system layer on the kernel Linux.
EXT3
Ext3 or third extended file system is a journaling file system commonly used the Linux Operating System. Ext3 journaling is a development version of the file ext2 system as a whole is almost compatible with ext2. The lack of features journaling is what makes it better than ext2 which makes it more reliable and menghilagkan need to check the file system after a shutdown is not properly.
Although speed is not better than other Linux file systems such as JFS,
ReiserFS and XFS, ext3 but has significant benefits that allow upgrades
in place from ext2 file system without having to back up and restore data to mean reduce CPU power consumption. Ext3 is also perceived to be safer than the file system Other Linux because kederhanaannya and extensive trials.
ReiserFS and XFS, ext3 but has significant benefits that allow upgrades
in place from ext2 file system without having to back up and restore data to mean reduce CPU power consumption. Ext3 is also perceived to be safer than the file system Other Linux because kederhanaannya and extensive trials.
Ext3 file system adds these features than its predecessor:
File system journaling
The addition of an online file system
Htree index for the broader directory
File system journaling
The addition of an online file system
Htree index for the broader directory
Without this, the ext3 file system would be equivalent to ext2. There are three levels of journaling available in implementing ext3 on Linux systems:
Journal (lowest risk)
Metadata and content files stored in the journal before it is done to the main file system.
Ordered (medium risk)
Only metadata is stored in the journal, the contents of the file is not saved but guaranteed that that the contents of the file saved to disk before the metadata corresponding to the marked-commit the journal.
Only metadata is stored in the journal, the contents of the file is not saved but guaranteed that that the contents of the file saved to disk before the metadata corresponding to the marked-commit the journal.
Writeback (highest risk)
Only metadata is stored in a journal, not the file contents. Contents may be on-write file
before or after the journal is updated. As a result, the file is modified just before crash
can occur.
Only metadata is stored in a journal, not the file contents. Contents may be on-write file
before or after the journal is updated. As a result, the file is modified just before crash
can occur.
WEB HACKING
The first open DVWA and login
user = admin
pass= password
After which it will appear like the picture below
user = admin
pass= password
After which it will appear like the picture below
ATTACK VECTOR BROWSER EXPLOIT AND FILE EXPLOIT
Ok First step open beef
Open address 127.0.0.1/beef/
and replace address 127.0.0.1 with 192.168.43.1 (if batrack) as below
Next copy address browser at Beef and paste to Url windows
And replace address use if batrack
And now try sending Alert dialog
And see result to windows
And next we try to exploit
Type command to msfconsole like command above
Next i'm sorry i'm confused
Open address 127.0.0.1/beef/
and replace address 127.0.0.1 with 192.168.43.1 (if batrack) as below
And replace address use if batrack
And now try sending Alert dialog
And next we try to exploit
Type command to msfconsole like command above
Next i'm sorry i'm confused
USE AUXILIARY IN METASPOLIT
OK here I try to use dos modules / http / apache_mod_isapi.
This module implements the Internet Server extension API. It allows Internet Server extensions (e.g. ISAPI .dll modules) to be served by Apache for Windows, subject to the noted restrictions.
First open #msfconsole
#show auxiliary
Then follow the commands as shown below
This module implements the Internet Server extension API. It allows Internet Server extensions (e.g. ISAPI .dll modules) to be served by Apache for Windows, subject to the noted restrictions.
First open #msfconsole
#show auxiliary
Then follow the commands as shown below
ABOUT SOCIAL ENGENERING AND SOCIAL ENGENERING TOOLKIT
SOCIAL ANGENERING
Social Engineering is defined as the process of deceiving people into giving away access or confidential information. The act of manipulating people into performing actions or divulging confidential information. While similar to a confidence trick or simple fraud, the term typically applies to trickery or deception for the purpose of information gathering, fraud, or computer system access; in most cases the attacker never comes face-to-face with the victim.
SOCIAL ANGENERING TOOLKIT
What Is Social Engineering Toolkit
I will discuss about the usage of social engineering toolkit on backtrack 5 to hack a windows operating system, but before going to the actual tutorial I want to share the basic introduction of social engineering toolkit that would really help for the beginner.
The Social-Engineering Toolkit (SET) is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing. It’s main purpose is to augment and simulate social-engineering attacks and allow the tester to effectively test how a targeted attack may succeed.
Social Engineering is defined as the process of deceiving people into giving away access or confidential information. The act of manipulating people into performing actions or divulging confidential information. While similar to a confidence trick or simple fraud, the term typically applies to trickery or deception for the purpose of information gathering, fraud, or computer system access; in most cases the attacker never comes face-to-face with the victim.
SOCIAL ANGENERING TOOLKIT
What Is Social Engineering Toolkit
I will discuss about the usage of social engineering toolkit on backtrack 5 to hack a windows operating system, but before going to the actual tutorial I want to share the basic introduction of social engineering toolkit that would really help for the beginner.
The Social-Engineering Toolkit (SET) is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing. It’s main purpose is to augment and simulate social-engineering attacks and allow the tester to effectively test how a targeted attack may succeed.
ABOUT MSFPAYLOAD AND MSFENCODE
MSFPAYLOAD
Msfpayload is component of Metasploit allows to generate shellcode, Executables, and much more for use in exploits outside of the Framework. Shellcode can be generated in many formats including C, Ruby, JavaScript, and even Visual Basic for Applications. Each output format will be useful in various situations. For example, if we are working with a Python-based proof of concept, C-style output might be best; or working on a browser exploit, a JavaScript output format might be best.
MSFencode
The shellcode generated by msfpayload is fully functional, but it contains several null characters that, when interpreted by many programs, signify the end of a string, and this will cause the code to terminate before completion.
OK For example
Now we’ll run a simple encoding of an MSF payload by importing raw
output from msfpayload into msfencode to see how the result affects our antivirus
detection:
Msfpayload is component of Metasploit allows to generate shellcode, Executables, and much more for use in exploits outside of the Framework. Shellcode can be generated in many formats including C, Ruby, JavaScript, and even Visual Basic for Applications. Each output format will be useful in various situations. For example, if we are working with a Python-based proof of concept, C-style output might be best; or working on a browser exploit, a JavaScript output format might be best.
MSFencode
The shellcode generated by msfpayload is fully functional, but it contains several null characters that, when interpreted by many programs, signify the end of a string, and this will cause the code to terminate before completion.
OK For example
Now we’ll run a simple encoding of an MSF payload by importing raw
output from msfpayload into msfencode to see how the result affects our antivirus
detection:
Subscribe to:
Posts (Atom)