How to view websites with Tor router in Termux

Hello everyone~, this is IRISnoir from Hackingarise. Bringing to you another tutorial. This time about how to use Termux to look at a site anonymously with Tor.

This is dedicated for those who wants to do stuff in their Termux without having the need to install or purchase a VPN. Using a VPN is better than a Proxy though, but only if you can purchase them, also if you don’t want to download then another technique is through here.

I’m not gonna bother you with the details so let’s get into it.

Now, you will need these tools installed into your Termux:
– tor to initialize an anonymous circuit
– proxychains-ng to anonymize yourself with the help of Tor
– lynx to use as a Text-based web browser

Now, the first thing you need to do is to fire up Tor with:
tor
And then wait for it to finish building a Tor circuit.

Then go to your next session, use Lynx with Proxychains with:
proxychains4 lynx
And it will then check for the circuit. You can edit the configuration file of proxychains at:
$PREFIX/etc/proxychains.conf
And add more proxies to the roster to form a powerful chain. You might need to swap from strict_chain to dynamic_chain to ignore dead proxies and move on.

Now, you can enter a website URL and your IP will be hidden to the websites. Neat, right?

Again, don’t rely too much on proxies as they are not as good as a VPN. This is only for if you cannot afford or if you don’t want to download.

Question: Why don’t you make it for Google Chrome. That is much more convenient
Answer: Google Chrome Android version doesn’t support that feature where you can activate Tor as a external/plugin.

Disclaimer: This tutorial is only for educational purposes, stay ethical as Hackingarise is not responsible for any of your malicious acts or any trouble you get into.
I hope you enjoy. If you do, please share with your friends. Have a nice day. Also check this out.

How to capture phone-call packets

Hey guys~ This is IRISnoir from Hackingarise. Bringing to you another tutorial. This time it’s about how we can observe phone-call packets using the ultimate network sniffer: Tshark.

Now, if you are unfamiliar with it then maybe you should check this out.

Now, let me explain how this works:

Take this scenario as an example. You wanna tease/scare your friend by sending them their location. But you will need their IP. That’s why you proceed to call them with an app that has its traffic UNENCRYPTED. Then when you call them, you can intercept the traffic and observe the packets. Thus finding their IP and additional info.

You must have Tshark set up first.
tsudo tshark --color
Then it will begin to sniff packets in the air.

Now what you need to do is to call your friend.
As you are calling, the system makes a ‘request’ to call the target.
Then, as the target approves the call and picks up. It sends a reply back. Keep that in mind. It will appear as a handshake reply.

Notice that at the source – destination part.
Let’s say your IP is 192.168.1.69
And your friend’s IP is 69.133.74.20

When the request packet is sent, it appear as something like this:
192.168.1.69 -> 69.133.74.20 WireGuard Handshake Request

And if your friend picks up, it appears as something like this:
69.133.74.20 -> 192.168.1.69 WireGuard Handshake Reply

Then you can extract the IP then track it.

Thank you for taking your time to read. If you find this helpful, why not share. Have a nice day. Remember, stay ethical as Hackingarise is not responsible for any of your malicious acts. Once again, thank you for reading and being a part of our community.

How to spoof MAC address

Hello everyone, this is IRISnoir from Hackingarise. Coming with another tutorial. This time about how to change your MAC.

Now, let’s get to the point.
Changing MAC requires 4 things.

Root privilege

Tool name: macchanger
Located: root-repo

A valid MAC in mind (as it will stay as “Authenticating…” if MAC is invalid, sniff the network to see avalible MAC addresses)

A kernel mod. To make it compatible to change MAC.

Now, you need to use the command:
macchanger -m [INSERT MAC] [INSERT INTERFACE]

The MAC will be spoofed. You can do tricks and then change back to lower your chance of being caught.

Please remain ethical as Hackingarise isn’t responsible for any of your malicious acts. Thank you for reading this. If you like, please share around. Have a nice day!

MITM with Xerosploit

Welcome to hacking a rise i this post we are going to show you how to perform a man in the middle attack with a tool called Xerosploit this tool was designed by LionSec

What is Xerosploit

Xerosploit is a penetration testing toolkit whose goal is to perform man in the middle attacks for testing purposes. It brings various modules that allow to realist efficient attacks, and also allows to carry out denial of service attacks and port scanning. Powered by bettercap and nmap.

How to install Xerosploit

git clone https://github.com/LionSec/xerosploit
cd xerosploit && sudo python install.py

Using Xerosploit

Now we have it installed we can now run to but typing xerosploit in terminal

now we type help for the list commands

so are first command is iface tell you your network interface

now we type gateway to check is are gateway is set right

now we look for targets on the network so we now type scan

so the target im picking is my phone 192.168.8.100 so type it in to the terminal

now this bring us to modules so type help

portscanner

: Port Scanner

dos : DoS Attack

ping : Ping Request

injecthtml : Inject Html code

injectjs : Inject Javascript code

rdownload : Replace files being downloaded

sniff : Capturing information inside network packets

MODULES

dspoof : Redirect all the http traffic to the specified one IP

yplay : Play background sound in target browser

replace : Replace all web pages images with your own one

driftnet : View all images requested by your targets

move : Shaking Web Browser content

deface : Overwrite all web pages with your HTML code

we are going to use sniff so type sniffer and then run a little terminal will open up this were are targets data will be displayed

now to cancel press ctrl+c and type back to go back to menu

and all you have to do is pick another module and then run it 🙂 there ya have it lads

Disclamer

Hackingarise does not take responsiblity for the actions you make commit with this tool and/or knowledge!! We make these posts for educational purposes and to teach how hackers can use certain tools to hack you and we do not try to inspire any blackhat activities in the doing of so!!

Final thoughts

Xerosploit is a handy little tool for noobs that dont yet understand the way man in the middle attacks work this script is simple to use and install.

Right lads that’s it hope you enjoyed it and see you in the next one laughingman

How to dos with Hping3

welcome to hacking a rise I am the one and only Laughingman in this post Im going to show u the basics of Hping3

What is Hping3

Hping3 is a network tool able to send custom TCP/IP packets and to display target replies like ping program does with ICMP replies. hping3 handle fragmentation, arbitrary packets body and size and can be used in order to transfer files encapsulated under supported protocols.

What Hping is used for

Test firewall rules
Advanced port scanning
Test net performance using different protocols, packet size, TOS (type of service) and fragmentation.
Path MTU discovery
Transferring files between even really fascist firewall rules.
Traceroute-like under different protocols.
Firewalk-like usage.Test firewall rules
Advanced port scanning
Test net performance using different protocols, packet size, TOS (type of service) and fragmentation.
Path MTU discovery
Transferring files between even really fascist firewall rules.
Traceroute-like under different protocols.
Firewalk-like usage.

How to use Hping3

lets start with the help menu so type hping3 --help in to terminal

Right lads let start with a simple icmp scan what this dose is send icmp pings to target (icmp stand for its internet control message protocol) so open terminal and type hping3 192.168.8.1

so next we wanna check the tcp packages of the target so what this next command dose is send the icmp ping to port 443 so type hping3 192.168.8.1 -c 10 -p 443 -c is the amount package you want to send to the target -p is the port to send them to

If you wanna look at a more detailed report so type hping3 192.168.8.1 -c 10 -p 443 -V

so now we get to the part you all click on this post to see how to dos with Hping3 WHOOP WHOOP

so open terminal and type
hping3 -S --flood -V 192.168.8.1

-S Sets SYN tcp flag.Which mean you are sending syn packets.

–flood Sends lots of packets and ignore the response.it sends packets as fast as possible.

After few minutes when hping3 floods system with lots of packets he will be forced to quit network.

so say we want to hide were the dos is coming from type this command to terminal
hping3 -S -U --flood --rand-source -V 192.168.8.1

DISCLAMER

dont be a dick head we take no responsibility for any actions taking by are viewers we do not condole any non legal actions as were purely for educational reasons

Thats it lads hope you enjoyed this post make sure the share and check out are discord link in in menu and join use on facebook and twitter dont forget to sub to the blog to be the first to know when a new post is posted all the best lads ~Laughingman

Session hijacking on lan

Welcome to hacking a rise I’m the Laughing man in this post is to show you session hijacking wile on LAN when i mean LAN this can be a public network or your own i will be using my home network as i dont wanna brake any laws so the tools need is Ettercap,hamster,ferret (thank god most these are install on Kali Linux whoop whoop were is ferret is installed on kali 32 bit only ) this is a handy way to gain password usernames and credit card info
so now lets move on .

What is session hijacking

session hijacking, sometimes also known as cookie hijacking is the exploitation of a valid computer session—sometimes also called a session key—to gain unauthorized access to information or services in a computer system.

What is ettercap

Ettercap is a free and open source network security tool for man-in-the-middle attacks on LAN. It can be used for computer network protocol analysis and security auditing. It runs on various Unix-like operating systems including Linux, Mac OS X, BSD and Solaris, and on Microsoft Windows.
Find out more

What is hamster

It acts as a proxy server that replaces your cookies with session cookies stolen from somebody else, allowing you to hijack their sessions. Cookies are sniffed using the Ferret program.
Find out more

What is ferret

It grabs session cookies that travel across the LAN. Hamster is a proxy that “manipulates” everything grabbed by Ferret.

installing ferret

So im using a 64 bit os of kali so im going have to install ferret as its not installed on kali 64 bit only 32 bit so open terminal and type dpkg --add -architecture i386 && apt-get update && apt install ferret-sidejack:i386 If you have a 32 version of kali skip this step

Starting the attack

So now we can start are attack so go to applications down to sniffing and spoofing

start ettercap pick the interface you want to use since I’m using WiFi I’m picking wlan0 the go to host and scan for hosts click the host list and add them to target or dont now go to mitm and click arp poisoning and click sniff remote connection

Now we load up ferret open a terminal and type ferret -i wlan0

now open a new terminal and start hamster by just typing hamster

Copy the link and pasted it to Firefox

no you see the target to see the cookies click on the ip and it take you to the cookies

Disclimer

listen to me lads
Hacking a rise dose not take responsibility for any actions or harm inflicted by you as this is purely for educational reasons Two show how easy it is for a hacker to gain your password, usernames , credit card info wile on public networks.

hope you enjoyed this lads gud luck and happy hacking

laughing man

Nmap Basic's part one Simple scan

Welcome back to hacking arise lads Laughing Man here with a very basic understanding of some the commands in Nmap Free Security Scanner

What is Nmap network scanner

Nmap is a free and open-source network scanner created by Gordon Lyon. Nmap is used to discover hosts and services on a computer network by sending packets and analyzing the responses. Nmap provides a number of features for probing computer networks, including host discovery and service and operating system detection Find out more

How To use Nmap

First let me start by saying i have Nmap install on my system but for people using termux type pkg install nmap this will install it on your termux as many os systems have it installed like Kali,parrot,cyborg hawk,black arch arch strike etc …

So see nmap full commands type Nmap in terminal or man nmap this gave you the manual for nmap in the terminal

note

some times when scanning you will be blocked this dont mean it dont work means the target not responding to the pings so if this happens use -Pn (eg nmap -Pn google.com and for IP’s nmap -Pn 127.0.0.1 )

simple scan

so this a simple command for a simple scan for ips or a website its easy just type nmap 127.0.0.1
well you wont be using the local host so if its a website put the url or if its a ip type it.

Post scanning

Right now lets move on to ways to find the ports we need so lets start by looking for a specific port this be port 80 so in terminal type nmap -p 80 127.0.0.1

so scanning one port is easy so lets scan two ports at one time so type nmap -p 80,433 127.0.0.1

now what we want to get all the ports on a ip or server we use this command nmap -p 1-9999 127.0.0.1

Ip Range

Now we move on two ip range scanning this help you nmap a network and see what devices are on it the two main commands for that are
nmap 127.0.0.1/28

or we can use this one nmap 127.0.0.1/14

what id we want to see everyone on the network we use the nmap 127.0.0.* this gave you everyone on the network 1 to 256

now lets take out a few ips to be excluded from the scan type nmap 127.0.0.* --exclude 127.0.0.1,127.0.0.2

top 20 ports

you way ask your self whats the top 20 ports well there

21/tcp closed ftp
22/tcp closed ssh
23/tcp closed telnet
25/tcp closed smtp
53/tcp closed domain
80/tcp closed http
110/tcp closed pop3
111/tcp closed rpcbind
135/tcp closed msrpc
139/tcp closed netbios-ssn
143/tcp closed imap
443/tcp closed https
445/tcp closed microsoft-ds
993/tcp closed imaps
995/tcp closed pop3s
1723/tcp closed pptp
3306/tcp closed mysql
3389/tcp closed ms-wbt-server
5900/tcp closed vnc
8080/tcp closed http-proxy

using this command nmap --top-ports 20 127.0.0.1
this will gave you that list and tell ya what ones is open .

Right lads we leave it at that and im going for a coffee and enjoying rest me fathers day lol whoop whoop

ALL THE BEST lAUGHINGMAN

Man in the Middle simple attack

so today we are going to learn man in the middle attack. What is a man in the middle attack?? well a man in the middle attack is when a hacker connect’s to a WiFi network mostly public WiFi from here he can alter the connection between the router and the client with this we can inject the beef-xss hook to the browser or inject payloads sniff their passwords,credit card details mostly can do anything me personally I love using them to mine me some monero but this not about what i like to do lol this about helping you guys how to do this so let’s get started

alright lets start opening a terminal when it opens type nmap -sn 192.168.8.0/24 this the local host if u wanna find yours use ifconfig to find your me i just put 192.168.1.0/24 you all got that since I be running this on my own home network my local host is 192.168.8.118

so lets forward the packages sudo sysctl -w net.ipv4.ip_forward=1

no we intercept the package from target to the router with arpspoof arpspoof -i wlan0 -t 192.168.8.122 -r 192.168.8.1

now open a new terminal and type driftnet -i wlan0

The little box pops up will display the pics on the web pages

and open another one and type urlsnarf -i wlan0

this will list all the connection on HTTP that the target vists.

I will do a update with more advance man in the middle attacks and how to preform over https 🙂

HACK THE PLANT LOL

How to pull ip off Xbox live