For example, a document created in Microsoft Word can be attached to an e-mail message and retrieved by the recipient with the appropriate e-mail program. Many e-mail programs, including Eudora,Netscape Messenger, and Microsoft Outlook, offer the ability to read files written in HTML, which is itself a MIME type.
TELNETTelnet is a program that allows you to log into computers on the Internet and use online databases, library catalogs, chat services, and more. There are no graphics in Telnet sessions, just text. To Telnet to a computer, you must know its address. This can consist of words (locis.loc.gov) or numbers ( 140.147.254.3 ). Some services require you to connect to a specific port on the remote computer. In this case, type the port number after the Internet address. Example: telnet nri.reston.va.us 185.
Telnet is available on the World Wide Web. Probably the most common Web-based resources available through Telnet have been library catalogs, though most catalogs have since migrated to the Web. A link to a Telnet resource may look like any other link, but it will launch a Telnet session to make the connection. A Telnet program must be installed on your local computer and configured to your Web browser in order to work.
With the increasing popularity of the Web, Telnet has become less frequently used as a means of access to information on the Internet.
FTPFTP stands for File Transfer Protocol. This is both a program and the method used to transfer files between computers. Anonymous FTP is an option that allows users to transfer files from thousands of host computers on the Internet to their personal computer account. FTP sites contain books, articles, software, games, images, sounds, multimedia, course work, data sets, and more.
If your computer is directly connected to the Internet via an Ethernet cable, you can use one of several PC software programs, such as WS_FTP for Windows, to conduct a file transfer.
FTP transfers can be performed on the World Wide Web without the need for special software. In this case, the Web browser will suffice. Whenever you download software from a Web site to your local machine, you are using FTP. You can also retrieve FTP files via search engines such as FtpFind, located at / http://www.ftpfind.com/. This option is easiest because you do not need to know FTP program commands.
E-MAIL DISCUSSION GROUPSOne of the benefits of the Internet is the opportunity it offers to people worldwide to communicate via e-mail. The Internet is home to a large community of individuals who carry out active discussions organized around topic-oriented forums distributed by e-mail. These are administered by software programs. Probably the most common program is the listserv.
A great variety of topics are covered by listservs, many of them academic in nature. When you subscribe to a listserv, messages from other subscribers are automatically sent to your electronic mailbox. You subscribe to a listserv by sending an e-mail message to a computer program called a listserver. Listservers are located on computer networks throughout the world. This program handles subscription information and distributes messages to and from subscribers. You must have a e- mail account to participate in a listserv discussion group. Visit Tile.net at / http://tile.net/ to see an example of a site that offers a searchablecollection of e-mail discussion groups.
Majordomo and Listproc are two other programs that administer e-mail discussion groups. The commands for subscribing to and managing your list memberships are similar to those of listserv.
USENET NEWSUsenet News is a global electronic bulletin board system in which millions of computer users exchange information on a vast range of topics. The major difference between Usenet News and e- mail discussion groups is the fact that Usenet messages are stored on central computers, and users must connect to these computers to read or download the messages posted to these groups. This is distinct from e-mail distribution, in which messages arrive in the electronic mailboxes of each list member.
Usenet itself is a set of machines that exchanges messages, or articles, from Usenet discussion forums, called newsgroups. Usenet administrators control their own sites, and decide which (if any) newsgroups to sponsor and which remote newsgroups to allow into the system.
There are thousands of Usenet newsgroups in existence. While many are academic in nature, numerous newsgroups are organized around recreational topics. Much serious computer- related work takes place in Usenet discussions. A small number of e-mail discussion groups also exist as Usenet newsgroups.
The Usenet newsfeed can be read by a variety of newsreader software programs. For example, the Netscape suite comes with a newsreader program called Messenger. Newsreaders are also available as standalone products.
FAQ, RFC, FYIFAQ stands for Frequently Asked Questions. These are periodic postings to Usenet newsgroups that contain a wealth of information related to the topic of the newsgroup. Many FAQs are quite extensive. FAQs are available by subscribing to individual Usenet newsgroups. A Web-based collection of FAQ resources has been collected by The Internet FAQ Consortium and is available at / http://www.faqs.org/.
RFC stands for Request for Comments. These are documents created by and distributed to the Internet community to help define the nuts and bolts of the Internet.
WELCOME GUEST ENJOY YOUR STAY HERE...
TELL A FRIEND ABOUT US..
Showing posts with label faq. Show all posts
Showing posts with label faq. Show all posts
Saturday, September 12, 2009
Sunday, August 2, 2009
ULTIMATE GUIDE FOR PASSWORD FILES. part 2
5. Shadowed Passwd's
Now if you happen to find a passwd fiel that looks something like this: "joetest:*:102 :100::/home/joetest:/usr/bin/re stsh"
which has a user name, not a programs, you have a shadowed passwd. The shadow file has the encrypted passwords on it. Depending on the Operating System, the passwd file may be in different places. To find out what Operating system your target is running from telnet (connected to that server of course) type uname -a and it should say, if you cannot get to telnet there is other methods of finding out. Here is a guide to systems passwd file locations (taken from a text on passwd files by Kryto.) A token is the * (or other symbol) beside a shadowed passwds user name
UNIX Paths (Courtesy of 2600)
UNIX Path Token
----------------------------AIX 3 /etc/security/passwd !
or /tcb/auth/files/first letter #
A/UX 3.0 s /tcb/files/auth/?/ * BSD4.3 -Reno /etc/master.passwd * ConvexOS 10 /etc/shadpw * ConvexOS 11 /etc/shadow * DG/UX /etc/tcb/aa/user/ * EP/IX /etc/shadow x HP-UX /.secure/etc/passwd * IRIX 5 /etc/shadow x Linux 1.1 /etc/shadow * OSF/1 /etc/passwd [.dir|.pag] * SCO Unix #.2 .x /tcb/auth/files/ / * SunOS4.1+ c2 /etc/security/passwd.adjunct ##username SunOS 5.0 /etc/shadow optional NIS+ private secure maps/tables/whatever
System V Release 4.0 /etc/shadow x System V Release 4.2 /etc/security/* database
Ultrix 4 /etc/auth[.dir|.pag] *
UNICOS /etc/udb * Anyway once you have the passwd file (with user names) and shadow file you can find a unshadowing program which combines the passwd file and the shadow passwd and combines them into what a regualr passwd file would be. A unshadowing program can be found at http://www.hackersclub.com/k m/downloads/password_crack er/ucfjohn2.zip Now some servers have the shadow file on retrictions so no one without a special account on the server can get to it.
________________________6. Crackers
Now that you have gotten a passwd file, what the hell do you do it it to get passwords from it? Thats where crackers come in.
A cracker takes the passwd file and a wordlist and compares the wordlist to the passwd files encrypted passwd. I have used many different crackers. Everyone has their favorite. My personal favorite is one called PaceCrack95 Ver. 1.1
http://tms.netrom.com/~cassi dy/utils/pacec.zip
Many people swear that John the Ripper is the greatest but i have problems with it, but it can be gotten off any decent hacking page. Same for Cracker Jack. A Cracker will load a wordlist and a passwd file and compare the two. When it cracks a password it will tell you the user name and the unencrypted password. You don't need to write it down because the program auto saves it. Cracker Jack saves the file as jack.pot and i think John the Ripper does too. PaceCrack95 Ver. 1.1 saves it to the files name (ex., passwd.txt.db) with the exact name and makes it a.DB file. I like to keep a passwd file once i have cracked it and later try out a new passwd cracker on it with the same wordlist and see if it works or if it is fake. It helps
________________________7. Wordlists
Wordlists are a nessicity to cracking passwd files. They are just huge lists of words. The biggest wordlist is avaliable from here: ftp://ftp.ox.ac.uk/pub/wordlists/
If you get a passwd file from another contry get a wordlist with the same launguage as the worlist came from, as the users would probably use words they are familier with There are some programs which can make random numbers to what you specify but that might not be really great, since there is such a huge amount of number combinations they could use. I am not completly saying they are useless since i have cracked a password with one before, I had fashoned my own list of 4 digit numbers since people might use their phone number and well it worked
________________________8. What to do with a Cracked Passwd file
What you can do with a passwd is up to you. The nice thing to do is inform the administator of the server that, accounts on his (or her) server are insucure and possibly open to anyone hacking an account and bringing havok upon their server. Some other things you can do is fire up good ole telnet and connect to one of theirrts and see what you could do with that account. The possiblities are endless. You could hack a webpage (i wouldn't do that on account of how lame it is to destruct someones piece of work.)
You could use an exploit in sendmail and get root or install a sniffer on the system and get all the passwords you could ever want from it. You could use the account to do work on OTHER servers that you sure as hell wouldn't want to do from your own. If your account is canceled you can use a hacked accounts dial up till you purchase a new one. Like I said the list goes on and on. I am sure noone wants you doing anything destuctive (its lame anyhow.) And the best thing to do is report the problem to the system admin so, if he finds out he won't freak and call your admin and tell him you have been doing naughty things or even call the cops. I hope this text was informative enough to fufill your needs
Now if you happen to find a passwd fiel that looks something like this: "joetest:*:102 :100::/home/joetest:/usr/bin/re stsh"
which has a user name, not a programs, you have a shadowed passwd. The shadow file has the encrypted passwords on it. Depending on the Operating System, the passwd file may be in different places. To find out what Operating system your target is running from telnet (connected to that server of course) type uname -a and it should say, if you cannot get to telnet there is other methods of finding out. Here is a guide to systems passwd file locations (taken from a text on passwd files by Kryto.) A token is the * (or other symbol) beside a shadowed passwds user name
UNIX Paths (Courtesy of 2600)
UNIX Path Token
----------------------------AIX 3 /etc/security/passwd !
or /tcb/auth/files/first letter #
A/UX 3.0 s /tcb/files/auth/?/ * BSD4.3 -Reno /etc/master.passwd * ConvexOS 10 /etc/shadpw * ConvexOS 11 /etc/shadow * DG/UX /etc/tcb/aa/user/ * EP/IX /etc/shadow x HP-UX /.secure/etc/passwd * IRIX 5 /etc/shadow x Linux 1.1 /etc/shadow * OSF/1 /etc/passwd [.dir|.pag] * SCO Unix #.2 .x /tcb/auth/files/
System V Release 4.0 /etc/shadow x System V Release 4.2 /etc/security/* database
Ultrix 4 /etc/auth[.dir|.pag] *
UNICOS /etc/udb * Anyway once you have the passwd file (with user names) and shadow file you can find a unshadowing program which combines the passwd file and the shadow passwd and combines them into what a regualr passwd file would be. A unshadowing program can be found at http://www.hackersclub.com/k m/downloads/password_crack er/ucfjohn2.zip Now some servers have the shadow file on retrictions so no one without a special account on the server can get to it.
________________________6. Crackers
Now that you have gotten a passwd file, what the hell do you do it it to get passwords from it? Thats where crackers come in.
A cracker takes the passwd file and a wordlist and compares the wordlist to the passwd files encrypted passwd. I have used many different crackers. Everyone has their favorite. My personal favorite is one called PaceCrack95 Ver. 1.1
http://tms.netrom.com/~cassi dy/utils/pacec.zip
Many people swear that John the Ripper is the greatest but i have problems with it, but it can be gotten off any decent hacking page. Same for Cracker Jack. A Cracker will load a wordlist and a passwd file and compare the two. When it cracks a password it will tell you the user name and the unencrypted password. You don't need to write it down because the program auto saves it. Cracker Jack saves the file as jack.pot and i think John the Ripper does too. PaceCrack95 Ver. 1.1 saves it to the files name (ex., passwd.txt.db) with the exact name and makes it a.DB file. I like to keep a passwd file once i have cracked it and later try out a new passwd cracker on it with the same wordlist and see if it works or if it is fake. It helps
________________________7. Wordlists
Wordlists are a nessicity to cracking passwd files. They are just huge lists of words. The biggest wordlist is avaliable from here: ftp://ftp.ox.ac.uk/pub/wordlists/
If you get a passwd file from another contry get a wordlist with the same launguage as the worlist came from, as the users would probably use words they are familier with There are some programs which can make random numbers to what you specify but that might not be really great, since there is such a huge amount of number combinations they could use. I am not completly saying they are useless since i have cracked a password with one before, I had fashoned my own list of 4 digit numbers since people might use their phone number and well it worked
________________________8. What to do with a Cracked Passwd file
What you can do with a passwd is up to you. The nice thing to do is inform the administator of the server that, accounts on his (or her) server are insucure and possibly open to anyone hacking an account and bringing havok upon their server. Some other things you can do is fire up good ole telnet and connect to one of theirrts and see what you could do with that account. The possiblities are endless. You could hack a webpage (i wouldn't do that on account of how lame it is to destruct someones piece of work.)
You could use an exploit in sendmail and get root or install a sniffer on the system and get all the passwords you could ever want from it. You could use the account to do work on OTHER servers that you sure as hell wouldn't want to do from your own. If your account is canceled you can use a hacked accounts dial up till you purchase a new one. Like I said the list goes on and on. I am sure noone wants you doing anything destuctive (its lame anyhow.) And the best thing to do is report the problem to the system admin so, if he finds out he won't freak and call your admin and tell him you have been doing naughty things or even call the cops. I hope this text was informative enough to fufill your needs
HACKERZ HIDEOUT;most commony asked questions and their answers (F.A.Q]
This FAQ was written due to the amount of repeated questions asked
Via email. I receive anywhere from 50-200 emails daily asking
me questions about hacking. This hopefully will answer some
of the more common questions.
(Q) Why doesn't the hideout have anything on viruses?
(A) I personally do not believe in viruses. They are not a form of
hacking. The intent of viruses is to be malicious. Some viruses
are not malicious but there are few of those. I do however like
to see new and exciting ones. Most nowadays are modified copies
of original viruses. Plain and simple...if you want to learn
about them read an Assembly book.
(Q) Where can I get that cool background usic you have on your
webpage?
(A) I don't mind people taking me stuff...in fact it's a form of
flattery in my opinion. However you should know that in Netscape
(and maybe other www browsers) you can view the document source
code. Look for the.MID and copy that code. If you want to
download the file direct. www.hackersclub.com/km/midis /midi.html and download
the ones you want. I've also made it where you can listen to them before you download.
(Q) Why don't you carry Warez? (Pirated Software)
(A) Should I even answer this? All emails of this nature are deleted without an
answer. Its simple pirated software is illegal. Do you want your server seized?
Most of the Warez Websites you see won't last 3 months. SPA/BSA will find you along
with MS reps and other software companies who pay people to hunt these sites down.
Your best bet if your looking for this software and such is either look for these sites
via a search engine or join IRC and jump into channels like #exceed and download to
your hearts content. I did write a text file on getting pirated software in IRC.
Download it from the file area.
(Q) No cracks either?
(A) Yup. Cracks are illegal too if you use them to crack software *YOU* personally didn't buy.
You can read the legit SPA form in the LAW area of the HackerZ Hideout. However if you
use the cracks on software you own already (registered copies of course) it is legal.
(Q) Do you personally hack?
(A) Long time ago I use to mess around and cause havoc. Now I just bring together all aspects
of the scene and deliver a small piece to people. I am retired and will stay that way.
My plans are to run a good hacking page for people who are curious in learning.
(Q) What do you use for your graphics?
(A) Adobe PhotoShop v3 with the Alien Skin Plugins. Most of the graphics are made by me or by
my wife.
(Q) Why does it take so long for you webpage to load?
(A) I did a lot of graphics and added music to the pages. I wanted my site to be visually
appealing along with being a good source of information. If you have already seen the
site with the graphics, I have put together a TEXT version of the Hideout.
(Q) Can I link to your site?
(A) By all means go for it. Tell everyone about this site.
(Q) Why do you ban links from Geocites and Angelfire?
(A) Those 2 places seem to censor and move Hack/Phreak/Warez pages off to frequently. Plus
with only 1-2 megs in space there isn't much a page could have. Links and information
maybe. I will only make cases for those pages that really do have a lot of information.
(Q) What is Warez-Waldo?
(A) Warez-Waldo is nothing more than an IRC channel on Effnet. We don't trade Warez or
distribute pirated software. We are a group of people who go in there to hang out and
converse like everyday people. We are not a pirate group, hack group or courier group.
(Q) Do you subscribe to 2600 magazine?
(A) Yes. Don't you? Magazine is full of goodies and the chief editor happens to have the
same last name as I do. =)
(Q) Why run a hacking page?
(A) I've thought about this for a long time. I think the reason I run such a page if for
learning purposes. I think because of all the research and hands on training that I have
had it has helped me achieve a goalI know what a hacker might think of in terms of breaking in that most system admins can
only dream of. I live, breath and lust for computers. All I can say is that for once
in my life I have a job where I am happy and haven't complained and I owe it to playing
on the computer.
(Q) Will you ever hack again?
(A) Of course but it will be only on my personal machines or maybe even helping out people
at work protect their data.
(Q) How do I view your files?
(A) The files that I have are most than likely compressed using pkzip. If you are a windows
user I would suggest getting Winzip. You can download a shareware copy at www.winzip.com.
If you're a beloved dos user, you can download the latest pkware from www.shareware.com. You
will need to save these files to your computer's hard drive and use these programs to
uncompress them. ** ALWAYS ** scan the files before executing them.
(Q) What do I do with the C files?
(A) These C programs are for Unix. You can download them but you will need to compile them
using your Unix shell account.
(Q) Can I get on your mailing list for updates?
(A) On the Entrance page to the Hideout there is a section at the bottom where you can choose
the page to monitor on the Hideout. When it gets update you will receive an email saying
it was updated.
(Q) Why you put a lame dos trick/hack in the newbies area?
(A) How many people know the ASCII blank?? I would say most people don't. Especially parents
and teachers. Its a good little trick to *START* off with. Mainly to get the brain cells active..RoneY...
Via email. I receive anywhere from 50-200 emails daily asking
me questions about hacking. This hopefully will answer some
of the more common questions.
(Q) Why doesn't the hideout have anything on viruses?
(A) I personally do not believe in viruses. They are not a form of
hacking. The intent of viruses is to be malicious. Some viruses
are not malicious but there are few of those. I do however like
to see new and exciting ones. Most nowadays are modified copies
of original viruses. Plain and simple...if you want to learn
about them read an Assembly book.
(Q) Where can I get that cool background usic you have on your
webpage?
(A) I don't mind people taking me stuff...in fact it's a form of
flattery in my opinion. However you should know that in Netscape
(and maybe other www browsers) you can view the document source
code. Look for the.MID and copy that code. If you want to
download the file direct. www.hackersclub.com/km/midis /midi.html and download
the ones you want. I've also made it where you can listen to them before you download.
(Q) Why don't you carry Warez? (Pirated Software)
(A) Should I even answer this? All emails of this nature are deleted without an
answer. Its simple pirated software is illegal. Do you want your server seized?
Most of the Warez Websites you see won't last 3 months. SPA/BSA will find you along
with MS reps and other software companies who pay people to hunt these sites down.
Your best bet if your looking for this software and such is either look for these sites
via a search engine or join IRC and jump into channels like #exceed and download to
your hearts content. I did write a text file on getting pirated software in IRC.
Download it from the file area.
(Q) No cracks either?
(A) Yup. Cracks are illegal too if you use them to crack software *YOU* personally didn't buy.
You can read the legit SPA form in the LAW area of the HackerZ Hideout. However if you
use the cracks on software you own already (registered copies of course) it is legal.
(Q) Do you personally hack?
(A) Long time ago I use to mess around and cause havoc. Now I just bring together all aspects
of the scene and deliver a small piece to people. I am retired and will stay that way.
My plans are to run a good hacking page for people who are curious in learning.
(Q) What do you use for your graphics?
(A) Adobe PhotoShop v3 with the Alien Skin Plugins. Most of the graphics are made by me or by
my wife.
(Q) Why does it take so long for you webpage to load?
(A) I did a lot of graphics and added music to the pages. I wanted my site to be visually
appealing along with being a good source of information. If you have already seen the
site with the graphics, I have put together a TEXT version of the Hideout.
(Q) Can I link to your site?
(A) By all means go for it. Tell everyone about this site.
(Q) Why do you ban links from Geocites and Angelfire?
(A) Those 2 places seem to censor and move Hack/Phreak/Warez pages off to frequently. Plus
with only 1-2 megs in space there isn't much a page could have. Links and information
maybe. I will only make cases for those pages that really do have a lot of information.
(Q) What is Warez-Waldo?
(A) Warez-Waldo is nothing more than an IRC channel on Effnet. We don't trade Warez or
distribute pirated software. We are a group of people who go in there to hang out and
converse like everyday people. We are not a pirate group, hack group or courier group.
(Q) Do you subscribe to 2600 magazine?
(A) Yes. Don't you? Magazine is full of goodies and the chief editor happens to have the
same last name as I do. =)
(Q) Why run a hacking page?
(A) I've thought about this for a long time. I think the reason I run such a page if for
learning purposes. I think because of all the research and hands on training that I have
had it has helped me achieve a goalI know what a hacker might think of in terms of breaking in that most system admins can
only dream of. I live, breath and lust for computers. All I can say is that for once
in my life I have a job where I am happy and haven't complained and I owe it to playing
on the computer.
(Q) Will you ever hack again?
(A) Of course but it will be only on my personal machines or maybe even helping out people
at work protect their data.
(Q) How do I view your files?
(A) The files that I have are most than likely compressed using pkzip. If you are a windows
user I would suggest getting Winzip. You can download a shareware copy at www.winzip.com.
If you're a beloved dos user, you can download the latest pkware from www.shareware.com. You
will need to save these files to your computer's hard drive and use these programs to
uncompress them. ** ALWAYS ** scan the files before executing them.
(Q) What do I do with the C files?
(A) These C programs are for Unix. You can download them but you will need to compile them
using your Unix shell account.
(Q) Can I get on your mailing list for updates?
(A) On the Entrance page to the Hideout there is a section at the bottom where you can choose
the page to monitor on the Hideout. When it gets update you will receive an email saying
it was updated.
(Q) Why you put a lame dos trick/hack in the newbies area?
(A) How many people know the ASCII blank?? I would say most people don't. Especially parents
and teachers. Its a good little trick to *START* off with. Mainly to get the brain cells active..RoneY...
Subscribe to:
Posts (Atom)
MY STATS
