Vídeos sobre seguridad/inseguridad y hacking

esta recompilacion la encontre en el foro de elhacker.net muy buena por sierto , tambien hay muchas en distintas web pero con diferentes enfacis , aqui solo hay una pequeña parte asi que disfruten y felices labs.

-----------------------------------------------------------------------------------------------------

1. Basic Socket Programming: (4 videos - 65 mins)

1.1 Presentation on Socket Programming basics (25 mins)
1.2 "Type with Me" exercise - a simple TCP server (19 mins)
1.3 Coding a TCP Echo server (13 mins)
1.4 Coding a TCP Echo client (9 mins)

http://www.security-freak.net/sockets/socket-programming.html


2. Packet Sniffing using Raw Sockets: (7 videos - 86 mins)

2.1 Presentation on raw socket basics (14 mins)
2.2 Sniffer coding basics (15 mins)
2.3 Sniffer - Ethernet header parsing (10 mins)
2.4 Sniffer - IP header parsing (14 mins)
2.5 Sniffer - TCP header parsing (10 mins)
2.6 Sniffer - Data parsing (9 mins)
2.7 A look at Tcpdump and Ethereal (14 mins)

http://www.security-freak.net/raw-sockets/raw-sockets.html


3. Packet Injection using Raw Sockets: (6 videos - 75 mins)

3.1 Packet injection basics presentation (10 mins)
3.2 Your first packet injection program (9 mins)
3.3 Ethernet header contruction & injection (10 mins)
3.4 IP header construction & injection (14 mins)
3.5 TCP header and data contruction & injection (17 mins)
3.6 ARP Request query injector (15 mins)

http://www.security-freak.net/packet-injection/packet-injection.html


4. Architecture of a Proactive Security Tool: (4 videos - 43 mins)

4.1 The "Sniff - Think - Inject" logic - a presentation (10 mins)
4.2 Programming the Framework (7 mins)
4.3 Communication via the Framework (8 mins)
4.4 ARP DoS tool using the Framework (18 mins)

http://www.security-freak.net/architecture/architecture.html


5. Encryption Basics using RC4: (3 videos - 38 mins)

5.1 RC4 basics presentation (13 mins)
5.2 Understanding RC4 via simulations (13 mins)
5.3 File encryption / decryption using RC4 (12 mins)

http://www.security-freak.net/encryption/encryption-rc4.html

---

Irongeek - Hacking Illustrated

http://www.irongeek.com/i.php?page=security/hackingillustrated

---

Hackeando Smart Cards de Fedex Kinko’s
http://foro.elhacker.net/index.php/topic,116216.0.html

---

Hackeando webs de Lineage 2 - video
http://foro.elhacker.net/index.php/topic,154731.0.html

---

Pocket Bluesnarfer
http://foro.elhacker.net/index.php/topic,109882.0.html

---

Local JPG shell Inclusion
http://foro.elhacker.net/index.php/topic,158322.0.html

---

Obteniendo Shell con LFI +[VIDEO]
http://foro.elhacker.net/hacking_basico/obteniendo_shell_con_lfi_video-t217499.0.html

---

EaryhLink.net Hacked By w32-Gen
http://foro.elhacker.net/index.php/topic,148012.0.html

---

Videos SHMOOCON 23-25 Marzo 2007
http://www.shmoocon.org/2007/videos/

---

Ataques a controladores de dispositivos inalambricos
http://foro.elhacker.net/index.php/topic,132675.0.html

---

http://icaix.com/tutoriales/ARP.htm
http://icaix.com/tutoriales/ettercap.htm
http://icaix.com/tutoriales/arpwatch.htm

Botnets:
http://www.youtube.com/swf/l.swf?swf=http%3A//s.ytimg.com/yt/swf/cps-vfl87070.swf&video_id=BRhauoXpNSs&rel=1&eurl=&iurl=http%3A//i3.ytimg.com/vi/BRhauoXpNSs/hqdefault.jpg&sk=gMf9z_gob8ycD6nHUKObudoDxM_nJtRaC&ap=%26fmt%3D18&cr=US&avg_rating=4.66666666667&length_seconds=129&allow_ratings=1&title=Symantec%20Guide%20to%20Scary%20Internet%20Stuff%20-%20Botnets

De los chicos de Backtrack.fr (en francés)
http://benjy-blog.blogspot.com/

Si quieres meter ataques a teléfonos móviles, te falta el ataque Blueline contra teléfonos Motorola.

Doc: http://gospel.endorasoft.es/bluetooth/seguridad-bluetooth/blueline.html
Video: http://www.youtube.com/watch?v=4bnE5_esbOU

Youtube Hacking Too Easy: Spammers Exploiting
http://www.youtube.com/watch?v=eiW1b7KwvQI

Hacking windows xp passwords TUTORIAL!!!!
http://www.youtube.com/watch?v=qxOCQIQYuHM

Hacking wireless networks with KisMac
http://www.youtube.com/watch?v=G38PD5FyUxE

Hacking WLAN
http://www.youtube.com/watch?v=eKrAZpANoeM

How to Bypass a Windows XP Password Without any Programs
http://www.youtube.com/watch?v=oC8c7zKLnU4

Easy Windows Password Hack
http://www.youtube.com/watch?v=brpBGTyp5Qw

Fake Virus Tutorial
http://www.youtube.com/watch?v=lwSzbnIybeA

Hacking Email & Passwords
http://www.youtube.com/watch?v=j_tMFUqowRQ

Basic Yahoo ID Cracking
http://www.youtube.com/watch?v=Q5vaC0XidNc

Tripod-Lycos distribute Malware
http://www.youtube.com/watch?v=ZsJAfYimpdM

Auditing MD5 Password Hashes: http://www.irongeek.com/i.php?page=videos/md5-password-cracking

Y otra pagina para bajar videos:

http://www.hackerscenter.com/video/

tambien es exelente esta
http://www.milw0rm.com/video/#

mas de 40 videos

un curso completo de ethical hacking y es basado en videos http://foro.elhacker.net/hacking_avanzado/career_academy_hacking_penetration_testing_and_counter_17cd-t169709.0.html

Explotacion de la Vulnerabilidad RPC/DCOM: MS03-026

La sigueinte informacion es publicada con fines educativos y para ilustrar de forma real el impacto que puede tener el no estar al dia con las actualizaciones de Microsoft.

Herramientas necesarias:

* Nmap
* Metasploit 3.1
* TFTP

Como funciona

El Remote Procedure Call (RPC) permite el intercambio de información entre equipos, y está presente por defecto en el protocolo TCP bajo el puerto 135 en Windows NT 4.0, 2000 y XP.

Existe una vulnerabilidad en la parte de RPC encargada del intercambio de mensajes sobre TCP/IP, que ocasiona que uno de ellos incorrectamente creado, permita a un atacante ejecutar cualquier código con los privilegios locales (Mi PC).

Para explotar esta vulnerabilidad un atacante debe establecer una conexión TCP/IP al RPC Endpoint Mapper remoto y enviar un mensaje malformado, que provoque un desbordamiento de búfer en la memoria, pudiendo ejecutar programas, ver o borrar información, o crear nuevas cuentas con todos los privilegios.

SOs que afecta:

* Microsoft Windows NT® 4.0
* Microsoft Windows NT 4.0 Terminal Services Edition
* Microsoft Windows 2000
* Microsoft Windows XP
* Microsoft Windows Server™ 2003

Como se explota

Debemos instalar y verificar que este corriendo nuestro Servidor TFTP.

Utilizamos nmap para realizar un escaneo de los dispositivos conectados a la red. Cualquier equipo con Widows y con el puerto 135 abierto es candidato a se explotado.

Posterior mente realizamos los pasos descritos en el siguiente video.
http://rapidshare.com/files/121542450/LAINV1.rar.html

Contramedidas

Actualizar el sistema operativo con el parche correspondiene y mantener al dia las actualizaciones de nuestros equipos y o bien, contar con un firewall.


NOTA: cabe destacar que la recompilacion es hecha por varios users del foro asi que muchos agradecimientos a ellos , si alguien quiere aportar mas estan habilitadas las respuestas y comentarios.

FUENTE:http://foro.elhacker.net/hacking_avanzado/videos_sobre_seguridadinseguridad_y_hacking-t166107.0.html

saludos roboticos

Reproducir videos en ASCII

trata de la reproducción de videos en modo ASCII usando el MPlayer. Los pasos son muy sencillos: basta con tener el reproductor MPlayer instalado y las librerías CACA [?]. Una vez tengamos esto, ejecutamos el siguiente comando:

mplayer -vo caca nombre_del_video.avi

fuente:http://casidiablo.net/videos-letras-mplayer/

El resultado es algo como esto:

170 Videos De Hacking

nunca me canse de repetirles a mis conocidos ke #RE es el mejor foro de todos en el under
cosas como estas se pueden encontrar dentro del foro , mas todos los servicios y herramientas al alcance de uno

1. Installation of soks of proxy of server on vulnerable the system
http://video.antichat.net/file1.html

2. XSS- vulnerability in forums SMF 1.05
http://video.antichat.net/file2.html

3. XSS on Wapbbs. Forum vbulletin. Obtaining the password of the privileged user.
http://video.antichat.net/file3.html

4. XSS on mail Yandex.Ru
http://video.antichat.net/file4.html

5. Sql injection in cursor php_.fusion
http://video.antichat.net/file5.html

6. XSS in forums FastBB
http://video.antichat.net/file6.html

7. XSS in forums XMB
http://video.antichat.net/file7.html

8. Interception of session on server pochta.ru
http://video.antichat.net/file8.html

9. Seizure IRC of the channel
http://video.antichat.net/file9.html

10. We rock mp3 free of charge
http://video.antichat.net/file10.html

11. COSMO chat. admin it did not advance the right
http://video.antichat.net/file11.html

12. Breaking of cursor new sploytom (ZENER)
http://video.antichat.net/file12.html

13. ExBB 1.9.1. PHP-inklhding into adminke and other vulnerabilities
http://video.antichat.net/file13.html

14. zmail.ru: Sniffer and session. We read strange letters.
http://video.antichat.net/file14.html

15. Service of the virtual postcards Vcard Lite. Part of 2.
http://video.antichat.net/file15.html

16. Service of the virtual postcards Vcard Lite. Part 1.
http://video.antichat.net/file16.html

17. [ FLASH ] rues on IBM AIX
http://video.antichat.net/file17.html

18. [ FLASH ] sequential of rues ispravlenym eksploytom
http://video.antichat.net/file18.html

19. Is utilized short hyphen. We make no invisible.
http://video.antichat.net/file19.html

20. Vulnerability www.chatmoscow.ru
http://video.antichat.net/file20.html

21. IRC. Mockery above Slader-Non
http://video.antichat.net/file21.html

22. Vulnerabilities SetccMS (XSS)
http://video.antichat.net/file22.html

23. Installation Apache, Php, Perl, Mysql to localhost
http://video.antichat.net/file23.html

24. Php- injection in the script of news CuteNews v1.3.1
http://video.antichat.net/file24.html

25. Method of the interpretation of khesha IPB 2..x and breaking the forum
http://video.antichat.net/file25.html

26. Breaking Invision Power Board sploytom
http://video.antichat.net/file26.html

27. New vulnerability PunBB
http://video.antichat.net/file27.html

28. cuz uze google?n'yandex before askin ? stupid questions %)
http://video.antichat.net/file28.html

29. WWWThreads Bug
http://video.antichat.net/file29.html

30. Breaking phpBB 2.0.15 new sploytom
http://video.antichat.net/file30.html

31. Active XSS in LiveJournal.com
http://video.antichat.net/file31.html

32. Installation of proxy to unix the machine
http://video.antichat.net/file32.html

33. XSS in phpBB with use phpNuke
http://video.antichat.net/file33.html

34. Idea of defeysa of the site through the search demands!
http://video.antichat.net/file34.html

35. Defeys of the site through the vulnerability in PunBB (php include)
http://video.antichat.net/file35.html

36. Breaking OF LARGE BROTHER - tntbrat.ru. SQL - injection.
http://video.antichat.net/file36.html

37. Breaking hack-info.net through PHP injection and GIF the file
http://video.antichat.net/file37.html

38. Breaking of the mailbox through the holes on the server
http://video.antichat.net/file38.html

39. SQL- Eng. in IPB 1. *, 2. *. Obtaining khesha of admina
http://video.antichat.net/file39.html

40. History of the breaking of one site
http://video.antichat.net/file40.html

41. XSS in MercuryBoard. New.
http://video.antichat.net/file41.html

42. Vulnerability IkonBoard. Reading it is file
http://video.antichat.net/file42.html

43. Error of khostera in tuning of system.
http://video.antichat.net/file43.html

44. Obtaining administrative privelegiy in paBugs
http://video.antichat.net/file44.html

45. Vulnerability phpBB in module downloads.php
http://video.antichat.net/file45.html

46. XSS in many search with- swing. It is in detail.
http://video.antichat.net/file46.html

47. Breaking phpBB new sploytom
http://video.antichat.net/file47.html

48. XSS in PunBB 1..x
http://video.antichat.net/file48.html

49. XSS in MercuryBoard 1..x
http://video.antichat.net/file49.html

50. Vulnerability in SR Guestbook
http://video.antichat.net/file50.html

51. Breaking of box on e-mail.ru (part of 2)
http://video.antichat.net/file51.html

52. Breaking of box on nm.ru (part 1)
http://video.antichat.net/file52.html

53. Seizure of the site through the injection in Zorum
http://video.antichat.net/file53.html

54. SQL injection in forums Minibb 1.6
http://video.antichat.net/file54.html

55. XSS in forums phorum
http://video.antichat.net/file55.html

56. XSS in forums He11.net and LedForums
http://video.antichat.net/file56.html

57. XSS in vBulletin 2..kh.kh
http://video.antichat.net/file57.html

58. XSS in forums zorum
http://video.antichat.net/file58.html

59. Bases of work with John The Ripper
http://video.antichat.net/file59.html

60. Analysis vzlomanoy BD
http://video.antichat.net/file60.html

61. Registration KeySpy Generator
http://video.antichat.net/file61.html

62. Vulnerability in phpBB 2.0.12 (KEZ)
http://video.antichat.net/file62.html

63. Vulnerability in phpBB 2.0.12 (max_.pain89)
http://video.antichat.net/file63.html

64. We obtain seriynik for progi through ArtMoney
http://video.antichat.net/file64.html

65. We read strange letters on mail.ru through the sessions
http://video.antichat.net/file65.html

66. SQL injection in LedForums
http://video.antichat.net/file66.html

67. Example Post- Flood through DenyoLaunch III
http://video.antichat.net/file67.html

68. SQL injection in search.php in phpBB 2.0.6
http://video.antichat.net/file68.html

69. SQL injection in MercuryBoard 1.1.0
http://video.antichat.net/file69.html

70. Study of protection WinRAR 3..0b =)
http://video.antichat.net/file70.html

71. Second method of the theft of nikov in the chat room
http://video.antichat.net/file71.html

72. CHAT ROOM. Seizure of nikov.
http://video.antichat.net/file72.html

73. Presence s/n for WinZIP 8..0b
http://video.antichat.net/file73.html

74. We make patch for BlueFace (CodeFusion)
http://video.antichat.net/file74.html

75. We make patch for WinZIP 8..0b (CodeFusion)
http://video.antichat.net/file75.html

76. We penetrate in strange comp. through Remote Administrator
http://video.antichat.net/file76.html

77. Pincha no longer catches the antivirus
http://video.antichat.net/file77.html

78. Survey of bagov in cgi scripts.
http://video.antichat.net/file78.html

79. Idea of brutoforsa amperesecond through HTTP demands.
http://video.antichat.net/file79.html

80. As to drive away as?ku. One of the methods.
http://video.antichat.net/file80.html

81. By vlom with the aid of rAdmin Of brutforsera!
http://video.antichat.net/file81.html

82. one additional method to skachat? paid mp3 c of site mp3search.ru.
http://video.antichat.net/file82.html

83. Defeys on the rapid. Bagi on the server. Admin did not advance right on the folders.
http://video.antichat.net/file83.html

84. Vulnerability of site on cursor runcms
http://video.antichat.net/file84.html

85. Story about troyane pinch 1.0
http://video.antichat.net/file85.html

86. The new vulnerability Mybb. XSS works in all browsers.
http://video.antichat.net/file86.html

87. Breaking IcrediBB (SQL-injection)
http://video.antichat.net/file87.html

88. Baga in the the guest MPM Guesbook Pro
http://video.antichat.net/file88.html

89. As to rock mp3 for free from site mp3search.ru
http://video.antichat.net/file89.html

90. Sql-injection on cursor Php-Nuke
http://video.antichat.net/file90.html

91. SQL-injection in forum Zorum
http://video.antichat.net/file91.html

92. XSS and SQL-injection MyBB the forum
http://video.antichat.net/file92.html

93. Seizure Flesch chat room (part of 2)
http://video.antichat.net/file93.html

94. Seizure Flesch chat room (part 1)
http://video.antichat.net/file94.html

95. XSS in the forums in sparenykh BB tags VBulletin 3.0. *
http://video.antichat.net/file95.html

96. As to become adminom of forum ITA V1.49.
http://video.antichat.net/file96.html

97. Vulnerabilities in Zeroboard.
http://video.antichat.net/file97.html

98. Video about the the new XSS in the forums in sparenykh BB the tags
http://video.antichat.net/file98.html

99. UNION in SQL demands. Example of work.
http://video.antichat.net/file99.html

100. Vozmozhye vulnerabilities in scripts Manlix.
http://video.antichat.net/file100.html

101. As to become adminom on the site made in Flat-nuke.
http://video.antichat.net/file101.html

102. Error of adminov with installation Guestbook v1.1. Defeys on the rapid.
http://video.antichat.net/file102.html

103. Defeys for the small. Defeys on the rapid.
http://video.antichat.net/file103.html:

104. Again PHPBB. if the provider of dull.
http://video.antichat.net/file104.html

105. XSS vulnerability in forum forum.antichat.ru (vbulletin 3.0.3)
http://video.antichat.net/file105.html

106. To the article about mail.ru. We steal Cooks in the chat room. More detailed video.
http://video.antichat.net/file106.html

107. To the article about mail.ru. We steal Cooks in the chat room. We become moderators chat.mail.ru.
http://video.antichat.net/file107.html

108. php inklyuding KorWeblog
http://video.antichat.net/file108.html

109. Breaking e-mail?ov 2. Sorting of passwords. Is utilized Brutus (under Windows).
http://video.antichat.net/file109.html

110. Breaking e-mail?ov. Is utilized THC - Hydra.
http://video.antichat.net/file110.html

111. Vulnerability Ultimate PHP Board (UPB) v1.9
http://video.antichat.net/file111.html

112. Forum Russian Board Or as it is not necessary to write authorization system. (found Max_.pain)
http://video.antichat.net/file112.html

113. As to obtain strange letters on ramblere
http://video.antichat.net/file113.html

114. LiteForum 2 (SQL-injection)
http://video.antichat.net/file114.html

115. We look passwords on forum Powered by Web Wiz Forums.
http://video.antichat.net/file115.html

116. Overcrowding of buffer. Theory.
http://video.antichat.net/file116.html

117. We steal UIN, having a base of the users
http://video.antichat.net/file117.html

118. As to steal the Internet on 445 port
http://video.antichat.net/file118.html

119. Baga ConfYmi 2.1
http://video.antichat.net/file119.html

120. We obtain root, I use sploita.
http://video.antichat.net/file120.html

121. Practitioner Flood
http://video.antichat.net/file121.html

122. VIDEO SQL Injection IPB 2.0. *
http://video.antichat.net/file122.html

123. Bagi of white resist- site mag.su
http://video.antichat.net/file123.html

124. Real breaking PHPBB
http://video.antichat.net/file124.html

125. SQL injection in forum IbProArcade
http://video.antichat.net/file125.html

126. Breaking PHPBB
http://video.antichat.net/file126.html

127. Fraud Online of games.
http://video.antichat.net/file127.html

128. Breaking of forum MiniBB
http://video.antichat.net/file128.html

129. SQL injection in the forum * He11.net Forums v1.0 *
http://video.antichat.net/file129.html

130. Seizure of the site through through cosmo-chat. Continuation?
http://video.antichat.net/file130.html

131. XSS in forum ExBB 1.9.1 THE II rocking shell- A
http://video.antichat.net/file131.html

132. XSS in forum ExBB 1.9.1
http://video.antichat.net/file132.html

133. SQL-injection in forum phpBB 2.0.6
http://video.antichat.net/file133.html

134. XSS in forum Web Wiz Forums v7.7 on securitylab.ru
http://video.antichat.net/file134.html

135. SQL-injection in the popular forum UBB threads 6.2.3
http://video.antichat.net/file135.html

136. Fulfillment shell- commands through curved perl- script (sendmail)
http://video.antichat.net/file136.html

137. We obtain seriynik for progi (php-injection)
http://video.antichat.net/file137.html

138. XSS in the chat room on kc-camapa.ru
http://video.antichat.net/file138.html

139. Breaking of the site through cgi- error: paypy
http://video.antichat.net/file139.html

140. Seizure of the site through cosmo-chat
http://video.antichat.net/file140.html

141. We drive away paid script free of charge (ezUpload pro 2.2)
http://video.antichat.net/file141.html

142. Yuzayem random cgi-telnet =)
http://video.antichat.net/file142.html

143. XSS in the chat room on muz-tv.ru
http://video.antichat.net/file143.html

144. Breaking of the site through cgi- error: of the byte
http://video.antichat.net/file144.html

145. Breaking of the site through php-injection and knowledge SQL
http://video.antichat.net/file145.html

146. We penetrate adminku of the news script Absolute Engine
http://video.antichat.net/file146.html

147. Breaking of site on cursor shad0wed portal 5
http://video.antichat.net/file147.html

148. Difeys through the injection in Advanced Guestbook 2.2
http://video.antichat.net/file148.html

149. Breaking of the school site through the vulnerability on home page of teacher.
http://video.antichat.net/file149.html

150. Breaking of the site through standard PHP- injection.
http://video.antichat.net/file150.html

151. Obtaining root rights on server yargsm.ru
http://video.antichat.net/file151.html

152. 6 video recordings about the recent attack on the living periodical.
http://video.antichat.net/file152.html

153. The fulfillment of the arbitrary code in Microsoft Windows with working WMF it is file.
http://video.antichat.net/file153.html

154. Demonstartsiya of the filling of shela to forums IPB of version 2.0.4 when the password of administrator is present.
http://video.antichat.net/file154.html

155. Breaking of program XoftSpy.
http://video.antichat.net/file155.html

156. Vparivaniye of troyana. Operation of vulnerability ?not complete way to the processor? Windows (total) commander.
http://video.antichat.net/file156.html

157. Obtaining adminki and the filling of shela in cursor e107
http://video.antichat.net/file157.html

158. Installation IRC of boat under Windows.
http://video.antichat.net/file158.html

159. Registration of program Advanced Security Level.
http://video.antichat.net/file159.html

160. interesnya idea about how it is possible to flood Shell to forums phpBB of any versions, if there is access to the administratorskoy panel.
http://video.antichat.net/file160.html

161. Breaking of paid hosting- provider with the use of old vulnerability in phpBB on one of the sites of hosting and the curvedly disposed server under control FreeBSD.
http://video.antichat.net/file161.html

162. ?Admin Password Exploit? (author)
http://video.antichat.net/file162.html

163. Breaking e107 with use ImageManager/manager.php - the built-in file is manager.
XSS is not used!
http://video.antichat.net/file163.html

164. Khalyavnyy Internet in the local network.
http://video.antichat.net/file164.html

165. Seizure of the IRK- boat, which repeats phrases =)
http://video.antichat.net/file165.html

166. Video about the breaking of server under control Windows 3.1
http://video.antichat.net/file166.html

167. Theft of the 6- marking icq through that attached to it e-mail.
http://video.antichat.net/file167.html

168. Use wwwhack based on example vBulletin.
http://video.antichat.net/file168.html

169. One additional hole in cursor e107.
http://video.antichat.net/file169.html

170. Theft it is no in the chat room through breaking e-mail?a (by brutoforsom).
http://video.antichat.net/file170.html

Fuente

mirror
http://darioxhcx.blogspot.com/2009/01/170-videos-de-hacking.html

Video: Interceptando contraseñas en nuestra red

En este video podemos apreciar como se capturan contraseñas de equipos en red, el método utiliza la conocida aplicación de seguridad Cain & Abel.

Cain & Abel nos servirá para correo POP3, obtener contraseñas de correos electrónicos, sean Hotmail, Yahoo, Gmail, o de cualquier sitio web donde se ingrese una contraseña, sea desde nuestro equipo o equipos cercanos al nuestro.

Fuente:http://xkod.com.pe/software/video-interceptando-contrasenas-en-nuestra-red/

Video Headsets Hijacking

A través del blog de Collin Mulliner, experto en seguridad Bluetooth y en Pocket PCs, he llegado a un video de Joshua Wright en el que se muestra lo sencillo que resulta comprometer la seguridad de un dispositivo Manos Libres Auriculares. Esta técnica, conocida como Headsets Hijacking, no es nueva. De hecho, ya hablé de ella en mi Proyecto de Fin de Carrera a nivel teórico basándome en las experiencias de Kevin Finisterre con varios Manos Libres.

El ataque es sencillo de entender y se desarrolla del mismo modo que el ataque Car Whisperer contra dispositivos Manos Libres de Automóvil. Básicamente...

La primera vez que dos dispositivos Bluetooth intentan establecer comunicación, se utiliza un procedimiento de emparejamiento para crear una clave de enlace común a partir de un código de seguridad Bluetooth (clave PIN), que es requerido a cada dispositivo y que debe ser el mismo para los dos. Posteriormente, cuando los mismos dispositivos se comuniquen, utilizarán la clave de enlace para funciones de autenticación y cifrado.

El hecho de incorporar una clave PIN por defecto (por ejemplo, 0000) en un dispositivo Bluetooth significa que cualquier usuario con conocimiento de esa clave estándar puede emparejarse con el dispositivo y comunicarse con él de forma autorizada. En el caso de un Manos Libres Auriculares, un atacante podría acceder a las funciones de audio implementadas en el terminal y llevar a cabo las siguientes acciones con fines maliciosos:

Capturar el audio recogido por el micrófono del dispositivo



Inyectar audio que sería reproducido por el auricular.



Como bien comenta Josh, es importante que el dispositivo Manos Libres esté activado pero no en uso en el momento del ataque, es decir, que no esté cursando una llamada telefónica.

Para llevar el ataque, Josh hace uso de tres elementos importantes:
- La herramienta Car Whisperer del grupo Trifinite, para Linux.
- Una antena unidireccional para incrementar el alcance del adaptador Bluetooth y detectar dispositivos a mayor distancia.
- Una Tablet PC Nokia 770, que corre sobre Linux, para controlar el portatil de su mochila de forma inalámbrica y pasar desapercibido mientras lleva a cabo el ataque.

Realmente hace un poco el paripé ya que el ataque podría ser desarrollado perfectamente desde la Tablet PC Nokia 770 si la herramienta Car Whisperer estuviera portada a Maemo, la plataforma de desarrollo de las Tablet PC de Nokia con Linux, al igual que otras herramientas del grupo Trifinite.

Sin más, os dejo con el vídeo:

funte:http://elblogdegospel.blogspot.com/2007/09/headsets-hijacking-video.html

Videos hacking

Una recopilacion de todos los videos con tecnicas propias del hacking, aportados en Club Hacker.
Posteadas por hack_crack y yo x)
-----------------------------------------------------------------------------------------------------------------------------
REFERENCIAS GENERALES:
http://www.milw0rm.com/video/

TODOS LOS VIDEOS DE TODAS LAS CONFERENCIAS DE DEFCON, BLACKHAT, CODECON + tools !
http://mirrors.easynews.com/blackhat&defcon/

Cita:

BOTNETS

Building a botnet
Botnet Attacks
Botnets Defences
Botnet source code_overachievers
Adding Exploit

http://rapidshare.com/files/92971605/Botnets.part01.rar
http://rapidshare.com/files/92978512/Botnets.part02.rar
http://rapidshare.com/files/92984094/Botnets.part03.rar
http://rapidshare.com/files/93020483/Botnets.part04.rar
http://rapidshare.com/files/93023585/Botnets.part05.rar

Cita:

SEGURIDAD EN LINUX

http://news.ah4.org/ftp/20040516/01/

Cita:

HACKING

DEFCON 15
http://video.google.co.uk/videosearc...0&so=2&start=0

--------------------------------------------------------------------------------------------------------------------

Denial of service attack
Cpuhog
Ping of death
Teardrop attack
Jolt2
Smurf attack
SYN attack
UDP Floods
Distributed Dos
DDOS Tools: Trin00

http://rapidshare.com/files/94110420...tnet.part1.rar
http://rapidshare.com/files/94113521...tnet.part2.rar

---------------------------------------------------------------------------------------------------------------------------

http://www.irongeek.com/i.php?page=videos/xpmacbridge
http://www.irongeek.com/i.php?page=v...rcapfiltervid1
http://www.irongeek.com/i.php?page=videos/cainvoip1
http://www.irongeek.com/i.php?page=videos/knoppix1
http://www.irongeek.com/i.php?page=videos/nessus
http://www.irongeek.com/i.php?page=v...sswordCracking
http://www.irongeek.com/i.php?page=videos/nmap1
http://www.irongeek.com/i.php?page=v...amdump2auditor
http://www.irongeek.com/i.php?page=videos/wardrive1
http://www.irongeek.com/i.php?page=v...o2000interface
http://www.irongeek.com/i.php?page=videos/slack1
http://www.irongeek.com/i.php?page=v...recovercookies
http://www.irongeek.com/i.php?page=videos/gear1
http://www.irongeek.com/i.php?page=videos/networkactiv
http://www.irongeek.com/i.php?page=videos/chkrootkit1
http://www.irongeek.com/i.php?page=videos/brutus1
http://www.irongeek.com/i.php?page=videos/cain1
http://www.irongeek.com/i.php?page=videos/installvnc
http://www.irongeek.com/i.php?page=v...interactiveCMD
http://www.irongeek.com/i.php?page=v...garoundaswitch
http://www.irongeek.com/i.php?page=videos/emailip
----------------------------------------------------------------------------------------------------------------
Aqui les dejare unos buenos videos variados de hacking."hermoso"



1. Installation of soks of proxy of server on vulnerable the system
http://video.antichat.net/file1.html

2. XSS- vulnerability in forums SMF 1.05
http://video.antichat.net/file2.html

3. XSS on Wapbbs. Forum vbulletin. Obtaining the password of the privileged user.
http://video.antichat.net/file3.html

4. XSS on mail Yandex.Ru
http://video.antichat.net/file4.html

5. Sql injection in cursor php_.fusion
http://video.antichat.net/file5.html

6. XSS in forums FastBB
http://video.antichat.net/file6.html

7. XSS in forums XMB
http://video.antichat.net/file7.html

8. Interception of session on server pochta.ru
http://video.antichat.net/file8.html

9. Seizure IRC of the channel
http://video.antichat.net/file9.html

10. We rock mp3 free of charge
http://video.antichat.net/file10.html

11. COSMO chat. admin it did not advance the right
http://video.antichat.net/file11.html

12. Breaking of cursor new sploytom (ZENER)
http://video.antichat.net/file12.html

13. ExBB 1.9.1. PHP-inklhding into adminke and other vulnerabilities
http://video.antichat.net/file13.html

14. zmail.ru: Sniffer and session. We read strange letters.
http://video.antichat.net/file14.html

15. Service of the virtual postcards Vcard Lite. Part of 2.
http://video.antichat.net/file15.html

16. Service of the virtual postcards Vcard Lite. Part 1.
http://video.antichat.net/file16.html

17. [ FLASH ] rues on IBM AIX
http://video.antichat.net/file17.html

18. [ FLASH ] sequential of rues ispravlenym eksploytom
http://video.antichat.net/file18.html

19. Is utilized short hyphen. We make no invisible.
http://video.antichat.net/file19.html

20. Vulnerability www.chatmoscow.ru
http://video.antichat.net/file20.html

21. IRC. Mockery above Slader-Non
http://video.antichat.net/file21.html

22. Vulnerabilities SetccMS (XSS)
http://video.antichat.net/file22.html

23. Installation Apache, Php, Perl, Mysql to localhost
http://video.antichat.net/file23.html

24. Php- injection in the script of news CuteNews v1.3.1
http://video.antichat.net/file24.html

25. Method of the interpretation of khesha IPB 2..x and breaking the forum
http://video.antichat.net/file25.html

26. Breaking Invision Power Board sploytom
http://video.antichat.net/file26.html

27. New vulnerability PunBB
http://video.antichat.net/file27.html

28. cuz uze google’n'yandex before askin ‘ stupid questions %)
http://video.antichat.net/file28.html

29. WWWThreads Bug
http://video.antichat.net/file29.html

30. Breaking phpBB 2.0.15 new sploytom
http://video.antichat.net/file30.html

31. Active XSS in LiveJournal.com
http://video.antichat.net/file31.html

32. Installation of proxy to unix the machine
http://video.antichat.net/file32.html

33. XSS in phpBB with use phpNuke
http://video.antichat.net/file33.html

34. Idea of defeysa of the site through the search demands!
http://video.antichat.net/file34.html

35. Defeys of the site through the vulnerability in PunBB (php include)
http://video.antichat.net/file35.html

36. Breaking OF LARGE BROTHER - tntbrat.ru. SQL - injection.
http://video.antichat.net/file36.html

37. Breaking hack-info.net through PHP injection and GIF the file
http://video.antichat.net/file37.html

38. Breaking of the mailbox through the holes on the server
http://video.antichat.net/file38.html

39. SQL- Eng. in IPB 1. *, 2. *. Obtaining khesha of admina
http://video.antichat.net/file39.html

40. History of the breaking of one site
http://video.antichat.net/file40.html

41. XSS in MercuryBoard. New.
http://video.antichat.net/file41.html

42. Vulnerability IkonBoard. Reading it is file
http://video.antichat.net/file42.html

43. Error of khostera in tuning of system.
http://video.antichat.net/file43.html

44. Obtaining administrative privelegiy in paBugs
http://video.antichat.net/file44.html

45. Vulnerability phpBB in module downloads.php
http://video.antichat.net/file45.html

46. XSS in many search with- swing. It is in detail.
http://video.antichat.net/file46.html

47. Breaking phpBB new sploytom
http://video.antichat.net/file47.html

48. XSS in PunBB 1..x
http://video.antichat.net/file48.html

49. XSS in MercuryBoard 1..x
http://video.antichat.net/file49.html

50. Vulnerability in SR Guestbook
http://video.antichat.net/file50.html

51. Breaking of box on e-mail.ru (part of 2)
http://video.antichat.net/file51.html

52. Breaking of box on nm.ru (part 1)
http://video.antichat.net/file52.html

53. Seizure of the site through the injection in Zorum
http://video.antichat.net/file53.html

54. SQL injection in forums Minibb 1.6
http://video.antichat.net/file54.html

55. XSS in forums phorum
http://video.antichat.net/file55.html

56. XSS in forums He11.net and LedForums
http://video.antichat.net/file56.html

57. XSS in vBulletin 2..kh.kh
http://video.antichat.net/file57.html

58. XSS in forums zorum
http://video.antichat.net/file58.html

59. Bases of work with John The Ripper
http://video.antichat.net/file59.html

60. Analysis vzlomanoy BD
http://video.antichat.net/file60.html

61. Registration KeySpy Generator
http://video.antichat.net/file61.html

62. Vulnerability in phpBB 2.0.12 (KEZ)
http://video.antichat.net/file62.html

63. Vulnerability in phpBB 2.0.12 (max_.pain89)
http://video.antichat.net/file63.html

64. We obtain seriynik for progi through ArtMoney
http://video.antichat.net/file64.html

65. We read strange letters on mail.ru through the sessions
http://video.antichat.net/file65.html

66. SQL injection in LedForums
http://video.antichat.net/file66.html

67. Example Post- Flood through DenyoLaunch III
http://video.antichat.net/file67.html

68. SQL injection in search.php in phpBB 2.0.6
http://video.antichat.net/file68.html

69. SQL injection in MercuryBoard 1.1.0
http://video.antichat.net/file69.html

70. Study of protection WinRAR 3..0b =)
http://video.antichat.net/file70.html

71. Second method of the theft of nikov in the chat room
http://video.antichat.net/file71.html

72. CHAT ROOM. Seizure of nikov.
http://video.antichat.net/file72.html

73. Presence s/n for WinZIP 8..0b
http://video.antichat.net/file73.html

74. We make patch for BlueFace (CodeFusion)
http://video.antichat.net/file74.html

75. We make patch for WinZIP 8..0b (CodeFusion)
http://video.antichat.net/file75.html

76. We penetrate in strange comp. through Remote Administrator
http://video.antichat.net/file76.html

77. Pincha no longer catches the antivirus
http://video.antichat.net/file77.html

78. Survey of bagov in cgi scripts.
http://video.antichat.net/file78.html

79. Idea of brutoforsa amperesecond through HTTP demands.
http://video.antichat.net/file79.html

80. As to drive away as’ku. One of the methods.
http://video.antichat.net/file80.html

81. By vlom with the aid of rAdmin Of brutforsera!
http://video.antichat.net/file81.html

82. one additional method to skachat’ paid mp3 c of site mp3search.ru.
http://video.antichat.net/file82.html

83. Defeys on the rapid. Bagi on the server. Admin did not advance right on the folders.
http://video.antichat.net/file83.html

84. Vulnerability of site on cursor runcms
http://video.antichat.net/file84.html

85. Story about troyane pinch 1.0
http://video.antichat.net/file85.html

86. The new vulnerability Mybb. XSS works in all browsers.
http://video.antichat.net/file86.html

87. Breaking IcrediBB (SQL-injection)
http://video.antichat.net/file87.html

88. Baga in the the guest MPM Guesbook Pro
http://video.antichat.net/file88.html

89. As to rock mp3 for free from site mp3search.ru
http://video.antichat.net/file89.html

90. Sql-injection on cursor Php-Nuke
http://video.antichat.net/file90.html

91. SQL-injection in forum Zorum
http://video.antichat.net/file91.html

92. XSS and SQL-injection MyBB the forum
http://video.antichat.net/file92.html

93. Seizure Flesch chat room (part of 2)
http://video.antichat.net/file93.html

94. Seizure Flesch chat room (part 1)
http://video.antichat.net/file94.html

95. XSS in the forums in sparenykh BB tags VBulletin 3.0. *
http://video.antichat.net/file95.html

96. As to become adminom of forum ITA V1.49.
http://video.antichat.net/file96.html

97. Vulnerabilities in Zeroboard.
http://video.antichat.net/file97.html

98. Video about the the new XSS in the forums in sparenykh BB the tags
http://video.antichat.net/file98.html

99. UNION in SQL demands. Example of work.
http://video.antichat.net/file99.html

100. Vozmozhye vulnerabilities in scripts Manlix.
http://video.antichat.net/file100.html

101. As to become adminom on the site made in Flat-nuke.
http://video.antichat.net/file101.html

102. Error of adminov with installation Guestbook v1.1. Defeys on the rapid.
http://video.antichat.net/file102.html

103. Defeys for the small. Defeys on the rapid.
http://video.antichat.net/file103.html:

104. Again PHPBB. if the provider of dull.
http://video.antichat.net/file104.html

105. XSS vulnerability in forum forum.antichat.ru (vbulletin 3.0.3)
http://video.antichat.net/file105.html

106. To the article about mail.ru. We steal Cooks in the chat room. More detailed video.
http://video.antichat.net/file106.html

107. To the article about mail.ru. We steal Cooks in the chat room. We become moderators chat.mail.ru.
http://video.antichat.net/file107.html

108. php inklyuding KorWeblog
http://video.antichat.net/file108.html

109. Breaking e-mail’ov 2. Sorting of passwords. Is utilized Brutus (under Windows).
http://video.antichat.net/file109.html

110. Breaking e-mail’ov. Is utilized THC - Hydra.
http://video.antichat.net/file110.html

111. Vulnerability Ultimate PHP Board (UPB) v1.9
http://video.antichat.net/file111.html

112. Forum Russian Board Or as it is not necessary to write authorization system. (found Max_.pain)
http://video.antichat.net/file112.html

113. As to obtain strange letters on ramblere
http://video.antichat.net/file113.html

114. LiteForum 2 (SQL-injection)
http://video.antichat.net/file114.html

115. We look passwords on forum Powered by Web Wiz Forums.
http://video.antichat.net/file115.html

116. Overcrowding of buffer. Theory.
http://video.antichat.net/file116.html

117. We steal UIN, having a base of the users
http://video.antichat.net/file117.html

118. As to steal the Internet on 445 port
http://video.antichat.net/file118.html

119. Baga ConfYmi 2.1
http://video.antichat.net/file119.html

120. We obtain root, I use sploita.
http://video.antichat.net/file120.html

121. Practitioner Flood
http://video.antichat.net/file121.html

122. VIDEO SQL Injection IPB 2.0. *
http://video.antichat.net/file122.html

123. Bagi of white resist- site mag.su
http://video.antichat.net/file123.html

124. Real breaking PHPBB
http://video.antichat.net/file124.html

125. SQL injection in forum IbProArcade
http://video.antichat.net/file125.html

126. Breaking PHPBB
http://video.antichat.net/file126.html

127. Fraud Online of games.
http://video.antichat.net/file127.html

128. Breaking of forum MiniBB
http://video.antichat.net/file128.html

129. SQL injection in the forum * He11.net Forums v1.0 *
http://video.antichat.net/file129.html

130. Seizure of the site through through cosmo-chat. Continuation…
http://video.antichat.net/file130.html

131. XSS in forum ExBB 1.9.1 THE II rocking shell- A
http://video.antichat.net/file131.html

132. XSS in forum ExBB 1.9.1
http://video.antichat.net/file132.html

133. SQL-injection in forum phpBB 2.0.6
http://video.antichat.net/file133.html

134. XSS in forum Web Wiz Forums v7.7 on securitylab.ru
http://video.antichat.net/file134.html

135. SQL-injection in the popular forum UBB threads 6.2.3
http://video.antichat.net/file135.html

136. Fulfillment shell- commands through curved perl- script (sendmail)
http://video.antichat.net/file136.html

137. We obtain seriynik for progi (php-injection)
http://video.antichat.net/file137.html

138. XSS in the chat room on kc-camapa.ru
http://video.antichat.net/file138.html

139. Breaking of the site through cgi- error: paypy
http://video.antichat.net/file139.html

140. Seizure of the site through cosmo-chat
http://video.antichat.net/file140.html

141. We drive away paid script free of charge (ezUpload pro 2.2)
http://video.antichat.net/file141.html

142. Yuzayem random cgi-telnet =)
http://video.antichat.net/file142.html

143. XSS in the chat room on muz-tv.ru
http://video.antichat.net/file143.html

144. Breaking of the site through cgi- error: of the byte
http://video.antichat.net/file144.html

145. Breaking of the site through php-injection and knowledge SQL
http://video.antichat.net/file145.html

146. We penetrate adminku of the news script Absolute Engine
http://video.antichat.net/file146.html

147. Breaking of site on cursor shad0wed portal 5
http://video.antichat.net/file147.html

148. Difeys through the injection in Advanced Guestbook 2.2
http://video.antichat.net/file148.html

149. Breaking of the school site through the vulnerability on home page of teacher.
http://video.antichat.net/file149.html

150. Breaking of the site through standard PHP- injection.
http://video.antichat.net/file150.html

151. Obtaining root rights on server yargsm.ru
http://video.antichat.net/file151.html

152. 6 video recordings about the recent attack on the living periodical.
http://video.antichat.net/file152.html

153. The fulfillment of the arbitrary code in Microsoft Windows with working WMF it is file.
http://video.antichat.net/file153.html

154. Demonstartsiya of the filling of shela to forums IPB of version 2.0.4 when the password of administrator is present.
http://video.antichat.net/file154.html

155. Breaking of program XoftSpy.
http://video.antichat.net/file155.html

156. Vparivaniye of troyana. Operation of vulnerability “not complete way to the processor” Windows (total) commander.
http://video.antichat.net/file156.html

157. Obtaining adminki and the filling of shela in cursor e107
http://video.antichat.net/file157.html

158. Installation IRC of boat under Windows.
http://video.antichat.net/file158.html

159. Registration of program Advanced Security Level.
http://video.antichat.net/file159.html

160. interesnya idea about how it is possible to flood Shell to forums phpBB of any versions, if there is access to the administratorskoy panel.
http://video.antichat.net/file160.html

161. Breaking of paid hosting- provider with the use of old vulnerability in phpBB on one of the sites of hosting and the curvedly disposed server under control FreeBSD.
http://video.antichat.net/file161.html

162. “Admin Password Exploit” (author)
http://video.antichat.net/file162.html

163. Breaking e107 with use ImageManager/manager.php - the built-in file is manager.
XSS is not used!
http://video.antichat.net/file163.html

164. Khalyavnyy Internet in the local network.
http://video.antichat.net/file164.html

165. Seizure of the IRK- boat, which repeats phrases =)
http://video.antichat.net/file165.html

166. Video about the breaking of server under control Windows 3.1
http://video.antichat.net/file166.html

167. Theft of the 6- marking icq through that attached to it e-mail.
http://video.antichat.net/file167.html

168. Use wwwhack based on example vBulletin.
http://video.antichat.net/file168.html

169. One additional hole in cursor e107.
http://video.antichat.net/file169.html

170. Theft it is no in the chat room through breaking e-mail’a (by brutoforsom).
http://video.antichat.net/file170.html


espero les ayude
saludos

h@ck_crªck
---------------------------------------------------------------------------------------------------------------------

Fuente:http://www.latinohack.com/LH/foro/showthread.php?t=4860

Video tutoriales sobre Hacking

Algunos videos que tratan sobre la temática del Hacking en general …

http://irongeek.com/i.php?page=security/hackingillustrated

Y mas videos…..

http://137.132.19.24/security_course/vid_tutorials/

ire subiendo mas web con videos XD

saluds

Core Security's "Pen Testing Ninjitsu" webcast series

---------------------------------------------------------------------------------------
Pen Testing Ninjitsu Part I – “Windows Command Line Hero”
---------------------------------------------------------------------------------------
A brief introduction to the value of penetration testing + an overview of pen testing techniques using the Windows command shell.
* Presentation
* Slide deck

---------------------------------------------------------------------------------------
Pen Testing Ninjitsu Part II – “Crouching Netcat, Hidden Vulnerabilities”
---------------------------------------------------------------------------------------
An introduction to techniques for performing the functions of Netcat - such as moving files, scanning ports and creating backdoors - without using Netcat.
* Presentation
* Slide deck


---------------------------------------------------------------------------------------
Pen Testing Ninjitsu Part III – “After the Initial Compromise”
---------------------------------------------------------------------------------------
This installment explores what can happen after the initial vulnerability is compromised and a threat becomes truly invasive – and how to proactively assess your systems against such attacks. This installment will explore what can happen after the initial vulnerability is compromised and a threat becomes truly invasive – and how to proactively assess your systems against such attacks.
* Presentation
* Slide deck

Core Security Technologies

video de como hackear hotmail.

para que miren que hasta hotmail es hackeable les dejo un video que haciendo uso de xss entran a la cuenta de otro usuario robandole las cookies.

http://milw0rm.com/video/watch.php?id=35
gracias a SDaniel tenemos un mirror del video

http://georod.100webspace.net/xss-hotmail.swf

y si les falla el vinculo otro mirror en google pages

http://carzel.googlepages.com/xss-hotmail.swf

Fuente: http://carzel.wordpress.com/2006/09/11/video-de-como-hackear-hotmail/

Video de como crackear WEP desde Windows con CAIN

Este video fue creado por irongeek, el cual utilizando drivers beta de airpcap que permiten poner la tarjeta wireless en modo monitor en windows y utilizando cain logra rompen una clave WEP de 128 bits desde windows.

el video puede ser visto desde el siguente link:

http://www.irongeek.com/i.php?page=videos/airpcap-wireshark-cain-wep-cracking

los drivers para poner en modo monitor la tarjeta wifi en su version beta utilizados en el video los pueden descargar desde aqui:

http://rs123.rapidshare.com/files/29501895/setup_airpcap_2_0_beta_tx.exe

Fuente: http://carzel.wordpress.com/2007/06/08/video-de-como-crackear-wep-desde-windows-con-cain/

Videos de como crackear WPA,WEP con WIFISLAX

En la pagina de wifislax.com me he econtrado con videos de uso de este grandioso liveCd hacindo las diferentes tecnicas para romper las contraseñas de redes inalambricas con seguridad WPA,WEP y ocupando el nuevo ataque de fragmentación para romper WEP con el cual solo es necesario la captura de un paquete IVS para romper una clave de 128bit, sin ocupar este ataque es necesario al menos 300 mil paquetes IVS.

http://www.wifislax.com/soporte/videos.html

Otros videos desde la pagina oficial de la suite aircrack

http://www.aircrack-ng.org/doku.php?id=videos

Wesside-ng rompiendo WEP en 1 Minuto

wesside-ng es la nueva herramienta de la suite aircrack para romper claves inalabricas con seguridad WEP la cual incluye muchas tecnicas las cuales se ejecutan de forma iteligente seleccionando la red automaticamente aplicando el ataque especifico a la red y automaticamente reinyectando paquetes y al final obtiene la clave sin ninguna intervension del usuario.

para romper la contraseña solo debemos ejecutar

wesside-ng -i wlan0

y automaticamente nos dara la contraseña despues de 1 minuto.

para los interesados les dejo un video de como rompen una red wireless con seguridad WEP en 1 minuto.

la imagen fue tomada del siguiente video

http://www.ethicalhacker.net/content/view/167/2/

mas informacion en la pagina de aircrack:

http://www.aircrack-ng.org/doku.php?id=wesside-ng.es

Video sobre DNS Spoofing con Ettercap

Video creado por IronGeek que demuestra como realizar un ataque de dns spoofing ocupando plugin de ettercap.

pueden ver el video en la pagina del creador:

http://www.irongeek.com/i.php?page=videos/dns-spoofing-with-ettercap-pharming

Video de como hackear Gmail con SurfJack

Video que demuestra como robar la session a traves del robo de cookies en Gmail

El Video fue realizado con SuftJack una nueva herramienta creada en Python que permite robar cookies con solo tener acceso al trafico de la Red la cual puede ser utilizada no solo en Gmail si no en multitud de sitios.

la herramienta puede ser descargada aqui:

http://code.google.com/p/surfjack/downloads/list

y el manual en pdf aqui:

http://resources.enablesecurity.com/resources/Surf%20Jacking.pdf

Fuente:

Video que demuestra como robar la session a traves del robo de cookies en Gmail

El Video fue realizado con SuftJack una nueva herramienta creada en Python que permite robar cookies con solo tener acceso al trafico de la Red la cual puede ser utilizada no solo en Gmail si no en multitud de sitios.

la herramienta puede ser descargada aqui:

http://code.google.com/p/surfjack/downloads/list

y el manual en pdf aqui:

http://resources.enablesecurity.com/resources/Surf%20Jacking.pdf

368 videos tutoriales hacking

Una pagina que almacena 368 vídeos ,algunos estan muy buenos les dejo el linck

1- Video PHP Injection By Thorking Baixar

2- Video sobre Implantando um Backdoor em um servidor e fazendo conex?o reversa By ThorKing Baixar

3- Video mostrando como quebrar senhas de arquivos ZIP By ThorKing baixar

4- Video keylogger Ardamax By Thorking baixar

5- Video que mostra como recuperar senhas MSN salvas no PC By ThorKing baixar

6- Video sobre Criptografia By ThorKing baixar

7- Video Acunetix Scanner de Vulnerabilidades By Thorking baixar

8- Video Configurando Firewall XP By ThorKing baixar

9- Video Perl" Exploit Kullanimi" Baixar

10- Video JPEG Admin-Exploit Baixar

11- Video Remote File Inclusion, ?rnek bir saldiri Baixar

12- Video Rootserver hacking 4 Noobs Baixar

13- Video MD5-password-cracken Baixar

14- Video Server Rooting Baixar

15- Video Windows Server Rooting (Remote Desktop Connection) Visualizar

16- Video Xss Genis Anlatimli Video Cooke ?almak Visualizar

17- Video Zone-h Alma..! (mostra como registrar um deface no zone-h Baixar

18- Video Pegando IP pelo MSN com o NetCat Visualizar

19- Validando seu Windows XP Como Original-by fatality Baixar

20- Video ensinando como derrubar uma pessoa no MSN Visualizar


21- Video ensinando a criar pagina falsa do ORKUT By zelogatto Baixar
22- Video ensinando a criar pagina falsa do ORKUT By Fvox Baixar


23- Video-Curso Completo de Sound Forge Baixar


24- Video Executando Um Killer Com Seu Server [Invisivel] Baixar

25- Video-Aula de C capitulo 1 by Nilton Baixar
26- Video-Aula de C capitulo 2 by Nilton Baixar
27- Video-Aula de C capitulo 3 by Nilton Baixar

28- Video Beast (Trojan) indetectavel Baixar

29- Video SpyOne(Trojan) indetectavel by hackerbrasilll Baixar
30- Video SpyOne(Trojan) indetectavel by 374gj Baixar

31- Video de como deixar o MSN amarelinho(receber msg no celular) Baixar

31- Video de como Pegar serial sem precisar entrar nas paginas Baixar

32- Video Aprenda a configurar uma Maquina Virtual Baixar

33- Video que explica No-ip, para que serve e como funciona Baixar

34- Video sobre esteganografia By Souzadc baixar

35- Video sobre Deface em PhpBB baixar
36- Video sobre Deface em PhpBB 2.0.11 baixar
37- Video sobre Deface em PhpBB 2.0.11 e anteriores by Mig16 baixar

38- Video sobre Controle de acesso baixar

39- Video sobre burlar jogos em Java na Web baixar

40- Video sobre conex?o reversa usando NetCat +Winrar baixar

41- Video sobre senha segura baixar

42- Video mostrando como mudar avatar google baixar

43- Video sobre captura de e-mails na rede By Papai Noel baixar

44- Video hacking wireless By Oliver baixar

45- Video Attack Tool Kit +Programa usado baixar

46- Video hackeando CilemNews By H4x0r baixar

47- Terminal Server / RDP Cracking By ChrisG visualizar

48- MS-SQL Exploitation Video B ChrisG visualizar

49- RealVNC 4.1 Authentication Bypass using Metasploit Framework By ChrisG Visualizar

50- Exploiting Mic*ft RPC DCOM using Metasploit Framework BY ChrisG visualizar

51-Exploiting Mic*ft RPC DCOM using Metasploit Framework(Spanish)By freed0m visualizar

52- Webmin File Disclosure Demo By pseudo visualizar

53- WMF + SWF Exploit By ZoNe_VoRTeX visualizar

54- Cross Site Scripting HQ 0 Day fUSiON visualizar

55- Windows Server Rooting (Remote Desktop Connection) Chironex visualizar

56- 0-DAY Simple SQL Injection By x128 visualizar

57- Intruders D-Link Wireless Access Point Configuration Disclosure By diesl0w visualizar

58- vBulletin XSS Demonstration with Session Hijacking BY splices visualizar

59- CRLF (Carriage Return and Line Feed) Injection Demonstration By Paisterist visualizar

60- PHP Remote File Inclusion / Windows Backdoor By WiLdBoY visualizar

61- Heap Overflow Basics (Spanish) By Paisterist visualizar

62- (WBB Portal) Cross-Site Scripting Using Unsanitized jpg File By Tontonq visualizar

63- Multiple Websites Embedded SWF File Vulnerability Demonstration By Shadow visualizar

64- Simple ASP Administrator SQL Injection by (ruiner_zer0) visualizar

65- JPortal CMS SQL Injection Exploit in Action by (ruiner_zer0) visualizar

66- phpBB Session Handling Authentication Bypass Demonstration (ruiner_zer0) visualizar

67- JSP 1 or 1 SQL Injection Demonstration by (ruiner_zer0) visualizar

68- Demonstration of Blind MySQL Injection (bsqlbf) By aramosf visualizar

69- Demonstration of Blind MySQL Injection (mysql_bftools) By reversing visualizar

70- KF Hacking up Bluetooth with his WIDCOMM Code Kevin Finisterre visualizar

71- Tunneling Exploits Through SSH (whoppix) By muts visualizar

72- Cracking WEP in 10 Minutes (kismac) By muts visualizar

73- Cracking WEP in 10 Minutes (whoppix) BY muts visualizar

74- Muts Showing WMF 0day in Action (metasploit) BY muts visualizar

75- Reverse Engineering with LD_PRELOAD Qnix visualizar

76- Qnix Demonstrating Exploration of Simple Buffer Overflows By Qnix visualizar

77- MS Windows NetpIsRemote() Remote Overflow Exploit (MS06-040) By wezyr Baixar

78- FTP Root After Remote File Inclusion By DarkFuneral Baixar

79- Simple XSS by dark funeral Baixar Baixar

80- PHPBB 2.0.X Cookie Session Bypass By DarkFuneral Baixar

81- Php Nuke manual cookie creation By Azza Visualizar

88- Videos based on Buffer Overflows By hypn0 Baixar

83- Ipb 2.1.* <= 2.1.6 admin password change By Azza Visualizar

84- PHPNUKE 7.X SQL Injection In Search Module by DarkFuneral Baixar

85- install VNc in shell By HeXHaCKeRs baixar passwd hexhackers

86- EffeTech HTTP Sniffer visualizar

87-Criando Worms By Lynn Visualizar

88-Video Usando o Brutus AET 2.0 Visualizar

89- Video usando Angry IP Scanner Visualizar

90- Video usando o Cain (WinXP) Visualizar

91- Video Battle Pong - Nuke Visualizar

92-Video usando o Languard Visualizar

93-Video usando o Languard II Visualizar

94-Video usando Petite 2.0 Visualizar

95-Video sobre Conex?o Reversa Visualizar

96-Video conectando por TelNet Visualizar

97-Video Removendo Trojan WF By Silvio Santos Visualizar

98-Video Mudando ?cones Execut?vel Visualizar

99- Video pegando IP Atrav?s do Outlock Visualizar

100-Video Pegando senha pelo google Visualizar

101- Video Derrubando a V?tima Visualizar

102- Video Assist?ncia Remota Visualizar

103-Video Pegando Senhas do Orkut Visualizar

104-Video Entre sem Votar em sites Visualizar

105- VideoEntre Sem Votar em sites II Visualizar

106-Video Fake MSN Visualizar

107- Video usando o Trojan Back Orifice Visualizar

108-Video usando o trojan Net Devil Visualizar

109-Video Juntando Arquivos Visualizar

110-Video Juntando Arquivos II Visualizar

111- Video Quem te Bloqueou no MSN Visualizar

112-Video Derrubando Contatos MSN Visualizar

113-Video Derrubando Contatos MSN II Visualizar

114-Video Flood no MSN Visualizar By Porps Visualizar

115-Video Veja quem te Deletou MSN visualizar

116-Video Pegando Senhas do MSN Visualizar

117-Video Pegando IP pelo MSN Visualizar

118- Video Hacker de MSN Visualizar

119-Video Diversos Truques MSN Visualizar

120-Video Usando o Nuke Visualizar

121-Video usando o N-Map Visualizar

122-Video usando o Trojan CIA 1.3 Visualizar

123-Video usando o Trojan Beast 2.7 Visualizar

124-Video Tune up (Temas Windows) Visualizar

125-Video Configurando Avast By Thiago Visualizar

126- Video Spam no Email Visualizar

127-Video Photoshop B?sicoBy Allexxandre Visualizar

128-Video usando o Trojan Sub Seven visualizar

129- Video Protegendo - se Visualizar

130-Video Protegendo - se II visualizar

131-Video Binder do Beast Visualizar

132-Video sobre SQL Injection Visualizar

133- Video sobre SQL Injection II Visualizar

134-Video Configurando Ad-Ware Visualizar

136-Video Navegando An?nimo Visualizar

137-Video Camuflando IP visualizar

138-Video o trojan Usando o Net Bus 1.7 Visualizar

139-Video Instalando trojan NetBus Pro Visualizar

140-Video Configurando trojan NetBus Pro Visualizar

141-Video Conectando trojan NetBus Pro Visualizar

142-Video Jogo de V?rus (Patch) visualizar

143-Video Languard R3X Visualizar

144-Video Configurando SpyBot Visualizar

145-Video sobre Dns Spoofing By slackware Baixar


146-Video VNC Mass Rooter Baixar


147-Nasa hacking By n00b06 Baixar

148-Vhcs Hacking Baixar

149-Creating a Windows Live CD for System Recovery and Pen-Testing with Bart's PE Builder Visualizar

150-Making Windows Trojans with EXE Binders (AKA:Joiners), Splice and IExpress Visualizar

151-128 Bit Wep Cracking With Injection! Baixar

152-Airplay replay attack - no wireless client required Baixar

153- BackTrack LiveCD to HD Installation Instruction Video Baixar

154-Bluesnarfer attack tool demonstration Baixar

155-Bluesnarfing a Nokia 6310i hand set Baixar

156-Complete Hacking Video using Metasploit - Meterpreter baixar

157-Cracking a 128 bit WEP key (Auditor) Baixar

158-Cracking a 128 Bit Wep key + entering the cridentials 21.5M Baixar

159-Cracking WPA Networks (Auditor) 50.4M Baixar

160-DoS attack against Windows FTP Server - DoS 8.8M Baixar

161-Exploiting some bugs of tools used in Windows. 15.5M Baixar

162-Exploiting weaknesses of PPTP VPN (Auditor) 5.4M Baixar

163-How to decrypt SSL encrypted traffic using a man in the middle attack (Auditor) 31.9M Baixar

164-John The Ripper 1.7 password cracker Installation Instruction Video 2.5M Baixar

164-MITM Hijacking 50.1M Baixar

166-Sniffing logins and passwords 6.1M Baixar

167-Snort Instruction video - howto install into backtrack 9.8M Baixar

168-Telnet Bruteforce 6.2M Baixar

168-Tunneling Exploits through SSH 17.5M Baixar

170-WEP Cracking using Aireplay v2.2 Beta 7 (Whax 3.0)4.8M Baixar

171-WPA Cracking using Aireplay v2.2 Beta 7 (Whax 3.0) Baixar

172-NTFS Alternate Data Stream BY Yugal.ras Baixar

173-Hosts File and Ad Blocking Visualizar

174-Passive OS Fingerprinting With P0f And Ettercap Visualizar

175-Cracking MD5 Password Hashes Visualizar

176-Setting Firefox's User Agent To Googlebot Visualizar


177- Using TrueCrypt With NTFS Alternate Data Streams Visualizar

178-Intro To TrueCrypt Visualizar

179-Intro To DD and Autopsy By Williamc and Twinvega Visualizar

180- Intro To Bluesnarfing By Williamc and Twinvega Visualizar

181-Network Printer Hacking: Irongeek's Presentation at Notacon 2006 Baixar

182-Irongeek's Guide to Buying a Used Laptop Baixar

183-Cracking Windows Passwords with BackTrack and the Online Rainbow Tables at Plain-Text.info Visualizar

184-Adding Modules to a Slax or Backtrack Live CD from Windows Baixar

185-Anonym.OS: LiveCD with build in Tor Onion routing and Privoxy Baixar

186-Make your own VMs with hard drive for free: VMware Player + VMX Builder Baixar

187-Using VMware Player to run Live CDs (Bootable ISOs) Baixar

188-SSH Dynamic Port Forwarding Baixar

189-WMF File Code Execution Vulnerability With Metasploit Baixar

190-Using VirtualDub and a cheap webcam as a camcorder Baixar

191-Firewalls with Sarah: Campus Computer Security Series Episode 2 Baixar

192-Updates and Patches with Anna: Campus Computer Security Series Episode 1 Baixar

193-Metasploit Flash Tutorial Baixar

194-Nmap Video Tutorial 2: Port Scan Boogaloo Baixar

195-Finding Rogue SMB File Shares On Your Network Baixar

196-WiGLE, JiGLE and Google Earth: Mapping out your wardrive Baixar

197-Droop's Box: Simple Pen-test Using Nmap, Nikto, Bugtraq, Nslookup and Other Tools Baixar

198-Quick Tour of Irongeek's Office and Security Lab Baixar

199-Fun with Ettercap Filters: The Movie Baixar

200-Basic Nmap Usage Baixar

201-Cracking Syskey and the SAM on Windows Using Samdump2 and John Baixar

202-Basic Tools for Wardriving Baixar

203-Making The Default XP Interface Look More Like Windows 2000 Baixar

204-Look for deleted data on the slack space of a disk Baixar

205-Recover deleted cookies or other files using Restoration Baixar

206-Some of my gear Baixar

207-Using NetworkActiv to sniff webpages on a Wi-Fi network Baixar

208-Boot from Phlak and run Chkrootkit to detect a compromise Baixar

209-Use Brutus to crack a box running telnet Baixar

210-Cain to ARP poison and sniff passwords Baixar

211-Install VNC Remotely Baixar

212-Start a session and get interactive commandline access to a remote Windows box Baixar

http://www.forcehacker.kit.net/videos.html


Aqui les dejo otros interesantes subidos a irongeek.com

http://www.irongeek.com/i.php?page=videos/xpmacbridge
http://www.irongeek.com/i.php?page=videos/ettercapfiltervid1
http://www.irongeek.com/i.php?page=videos/cainvoip1
http://www.irongeek.com/i.php?page=videos/knoppix1
http://www.irongeek.com/i.php?page=videos/nessus
http://www.irongeek.com/i.php?page=videos/LocalPasswordCracking
http://www.irongeek.com/i.php?page=videos/nmap1
http://www.irongeek.com/i.php?page=videos/samdump2auditor
http://www.irongeek.com/i.php?page=videos/wardrive1
http://www.irongeek.com/i.php?page=videos/xpto2000interface
http://www.irongeek.com/i.php?page=videos/slack1
http://www.irongeek.com/i.php?page=videos/recovercookies
http://www.irongeek.com/i.php?page=videos/gear1
http://www.irongeek.com/i.php?page=videos/networkactiv
http://www.irongeek.com/i.php?page=videos/chkrootkit1
http://www.irongeek.com/i.php?page=videos/brutus1
http://www.irongeek.com/i.php?page=videos/cain1
http://www.irongeek.com/i.php?page=videos/installvnc
http://www.irongeek.com/i.php?page=videos/interactiveCMD
http://www.irongeek.com/i.php?page=videos/sniffingaroundaswitch
http://www.irongeek.com/i.php?page=videos/emailip

Fuente:http://culturahack.com.ar/Foro/index.php?topic=921.0