(06-25-2011, 01:38 AM)J2ack Wrote: That's really a good stuff dude...But am bit confused that how will it work if I am behind a router, and so if I give my global IP, will the victim can still connect back to my machine ? I doubt.... any suggestion ?

(06-25-2011, 02:18 PM)1llusion Wrote: Well, with global IP, the stuff works pretty much the same. All you have to do is open the right ports (type: "show options" and look for LPORT=[the port you have to open])

However, in this case, you firewall might cause problems, because the victim will be accessing a folder in your computer and generally, this is very unwanted ... Never tried it and I would love to see somebody test it!

Post your results if you have some!

(05-04-2011, 08:32 PM)1llusion Wrote:

Spoiler:

Hi,

Since many are interested in hacking Windows 7, I will post couple of tuts how to do it.

So, in the first part, I will show you how to make a Denial of Service atack (DoS, NOT DDoS!!! DoS and DDoS are 2 completely different things!) with using an exploit (yay! no more booters!)

So how to do it? - Theory

Well basically we will use an exploit, that will start infinite loops on the computer, leading the computer to freezing - Denial of service. Remember, this will freeze the computer COMPLETELY, not only the internet. Therefore its very dangerous attack and I do not suggest you to use it on anybody without permission.

Similar exploit used to be on old PHP versions where when you have put in url:

Code:

www.example.ext/index.php?file=index.php

the server would start an infinite loop since it would always call the same command.

The actual exploiting:

So, startup metasploit and use this exploit:

Code:

dos/windows/smb/ms10_006_negotiate_response_loop

actually, by metasploit its defined as auxiliary since it doesn't allow remote code execution.

From here, there is not much to set... actually you can do "exploit" right away, if you want to set this attack on some specified network, you can set the ip by:

Code:

set srvhost [desired ip]

After exploiting / The victims side

So when you start the exploit, a server will start. Your victim has to connect to it to get the exploit. You can see the path bellow:

Code:

\\10.0.1.19\Shared\Anything

The IP might change there. Now, this isn't URL as you can see. I'm not sure how its called (damn my noobiness) but try putting:

Code:

\\local net IP

into RUN or into webbrowser. You can acess files of other computer with this.
This is leading to the (in my eyes kinda funny) idea, how to protect yourself from people looking at your files Just simply let this running and when they hit the folder BAM their PC will freeze

Ok, hope you liked this tut, enjoy!!! If you have any questions, ask bellow!