Hacks & Cracks

ICQ

NetBus

TCP/IP

Protection

Welcome to my little Hack & crack section.

Several people have made comments about that I don't share any knowledge on this page so I have changed my mind a little bit now. However I don't think I'm going to explain everything in detail, some fun you gotta keep for yourself.

If you have something you wanna share...please do it.

((Sorry for not having any cracks, don't know if I dare to tell'em here.))

ICQ

As you might know there are several ways to 'have fun'.
ICQ (I Seek you) is a cool program, really neat and handy.
The negative thing with it is that hackers feel the same way.

ICQ is dangerous!!

To be able to do anything on the net you need to know the 'targets' TCP/IP address. Through ICQ you can easily achieve that with a little hack called IPcrack. Normally you can in the ICQ settings hide your IP, but with this crack I can see it anyway. =)

Now, when we know the 'targets' IP we can start having fun.
Flooding is cruel but I like to use it just as a joke, only sending one message and NOT to bomb the target with hundreds off mess. That's not fair.

Before we can start flooding we need to know the TCP port used by the ICQ, normally when ICQ starts up it uses port 1027, but after a while the port is changed. Now we need a scanner, and there's a lot of scanners out there. Among many I use 7th Sphere portscan 1.1 you can also download from Microsoft the ActiveX package, it contains several portscanner's and many other components.

All these hacks has nothing to do with ICQ, you can just grab a random TCP/IP address to scan and to nuke, flood or whatever you like. However I DON'T think that's a good idea. First you don't know anything of who's the owner of that IP, could be the police. *Oh oo*
It can also belong to a IT company or someone with some greate knowledge about computers and they might not like what you are doing.

Remember that this kind of use is not popular among the ISP's or other Telecom company and they can see what you are doing!!

You are NEVER invisible on Internet, don't you forget that.

There is also some progs to protect you from this kind of stunts, and if you can find a palls IP address he can also find yours.

-Do I have it?

-How do I get rid off it?

NetBus v 1.53

Yeah, what the heck u prolly know all about it anyway by now.

NetBus is NOT a virus nor a Trojan because it doesn't copy it self or start on a specific trigger or event. It's simply a remote control software just like pcANYWHERE.

(Note. to use pcANYWHERE you need a license)

NetBus v. 1.60

NetBus is a fun and enjoyable application written by a nice guy who I can't mention the name off because a new Swedish law PUL. A stupid law by the way. The purpose with NetBus is NOT to destroy anything or to 'steal' information. Because NetBus shows everything it does, and it can also leave a trace after the intruder in a .txt file on the victims computer if he takes a screendump from you.
LP.TXT. The log file you can find in the same directory as NetBus and it contains the intruders IP address and the TCP port used for transmitting the data.

NetBus v. 1.7

Well, I have not tested it myself yet but what I can understand from some reading there is a few changes.

In 1.7 it's possible to change the port so you can't be sure to find it on 12345 anymore. However if you from the console type the command 'netstat' you can se all your current connections, but this might not help you if you don't know how to use that information.

-How do I know if I got it?

1. You can test to connect with Telnet, IP 127.0.0.1 port 12345. If Telnet succeeds it answers with "NetBus v. 1.53" or another version number.
2. You can download NetBus and try to connect to yourself.
3. You can search your registry by running REGEDIT and search/find.

HKEY_LOKAL_MACHINE\SOFTWARE\MICROSOFT\WINDOWS\
CurrentVersion\Run

Check this location to se if your computer is 'infected'.

Note: The latest versions of Norton Antivirus can detect NetBus, and also Dr. Solomon. I haven't checked Mc Affee but I'm sure they will detect it too.

-How do I get rid off it?

Put $10 on my PG 901950-6 and I tell you *smile*

Find the file SysEdit.exe and execute it from a DOS prompt with /remove. This will remove it form your registry. You can also delete the entries directly in regedit but I wouldn't recommend that if your not so familiar with computers.

It's not for sure that the file name is sysedit. Who knows, someone might have renamed the file. You can also look in the task manager and se if you find it there. If you shut sysedit down from the task manager it will be activated the next time you boot your computer. You may not see it in the Task manager because of the /nomsg.

If you have any questions or doesn't understand you can mail me or visit a NetBus homepage.

Last about NetBus, if you think this application is cruel I can tell you there's an application 10 times worse this one...
But that one I will not share with you......yet *hehe*

Happy NetBus'ing!

TCP/IP

Some brief information about TCP/IP or actually about TCP.

Under Construction

Protection

I would recommend two applications to protect you with.

1. Netbuster
2. NukeNabber

Both appl. runs on 95/98/NT

NetBuster

Netbuster is written by a Swede as well and listen on that port where NetBus would be. Netbuster simulates to be an NetBus server so if anyone tries to connect to you they belive you have netbus. Now the fun part starts, you can send messages back to their client. 500 mess in new windows, thats alot off windows to close. The application also logg the IP address from the intruder. You can find Netbuster on http://surf.to/netbuster.

NukeNabber

NukeNabber listens on some predefinded ports and loggs every atempt made, it also will warn you with a popup box and some sound. You can configure it to close that port after a connection and thereby stop any nuke, flood or DOS attack. It supports alot of protocol and is one of the best tools, you can find it on http://www.dynamsol.com/puppet/

You can add more ports to be monitored but that will recuire som knowledge, it will work fine on standard settings to.