Hack Like a Pro: How to Install & Use a Secure IRC Client with OTR « Null Byte :: WonderHowTo

Welcome back, my amateur hackers!As many of you know, Null Byte will soon be re-establishing its IRC channel. In preparation of that event, I want to show how to set up a secure IRC client with OTR, orOff the Record.OTR does all the right things to make your instant messages secure; AES encryption, Diffie-Hellman key exchange, and SHA-1 hash. If you don't know what those items are, check out my article onCryptography Basics for the Aspiring Hacker.OTR provides us the security we need to communicate freely:Authentication: You can be certain the person you are talking to is who they say they are.Deniability: After a chat session ends, no one can identify either end of the conversation.Encryption: No one can read your messages en route.Perfect Forward Security: If your private keys are intercepted or otherwise obtained by a third party, your previous conversations will not be compromised.If you need any testimonials as to the security of OTR, when Edward Snowden was being hunted down by the NSA in Hong Kong and Russia, he would ONLYcommunicate by OTRand, of course, he remained free. If that's not a testimonial to its security, I don't know what would be.OTR is really a protocol for secure IRC communication. As such, many IRC clients use OTR if properly configured, while others require a plugin to use OTR. In this tutorial, we will be installing Pidgin with the OTR plugin.Step 1: Install Pidgin with OTRThe first thing we need to do is install a client with OTR. I have chosenPidginbecause it is widely used and has an OTR plugin. Of course, many other IRC clients have OTR plugins and you are free to use those.We can get Pidgin and OTR together from the Kali repository by typing;kali > apt-get install pidgin-otrAs it installs, it will look something like this. Make certain to answer "y" when prompted.When it has completed installing all the necessary components and libraries, it will look something like the above.Step 2: Open PidginNow that we have installed Pidgin, it will be installed on our Kali GUI at Applications -> Internet -> Pidgin Internet Messenger, as seen below.Image viawonderhowto.comWhen you click on Pidgin, you will be greeted by a screen like that below—click on Add to add an account to Pidgin.Step 3: Add AccountsIn this case, I am adding my IRC (protocol) account under the username "otw" to the freenode.net server. Of course, use your own username and password. Also, you can use the Pidgin client on any "chat" protocol including AIM, Google Talk, ICQ, MSN, Yahoo, and others.When I click "Add," it opens a Buddy List and a screen to enter more accounts.Step 4: Add the OTR PluginNext, we need to add the OTR plugin to our Pidgin client. On the Buddy List, click on Tools -> Plugins -> Off-the-Record, then click "Configure Plugin."Now check the button next to the OTR then click close, and close again to enable the plugin. Make certain that the checkboxes "Enable private messaging" and "Automatically initiate private messaging" are checked. Then will automatically encrypt your communication when using this client. I would also suggest that you check "Don't log OTR conversations" so that no record exists of your conversationLastly, we need to generate private keys. From the same OTR Plugin configuration screen, click on the "Generate." Be patient, this can take awhile.Now we are capable of safe and secure IRC and other chats knowing that no one can intercept and read our conversations. That should enable us to speak freely about any subject without fear of repercussions.In my next article on OTR, I will show you how to authenticate a user with OTR in our Pidgin client so that you can be certain that the person you are communicating with is actually who they say they are, so keep coming back my amateur hackers!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseRelatedHow To:Use Private Encrypted Messaging Over TorThe Hacks of Mr. Robot:How to Send Ultra-Secure EmailsHow to Become Anonymous Part 2:Tails: The OS Made for AnonymityIRC Guide:Universal NickNameHow To:Encrypt your Skype Messages to Thwart Snooping Eyes Using PidginNews:Anonymity, Darknets and Staying Out of Federal Custody, Part Four: The Invisible InternetCommunity Byte:Coding a Web-Based Password Cracker in PythonCommunity Byte:Coding an IRC Bot in Python (For Beginners)Community Byte:HackThisSite Walkthrough, Part 1 - Legal Hacker TrainingHow To:Create an SSH Tunnel Server and Client in LinuxCommunity Byte:Hack Our IRC Bot to Issue CommandsCommunity Byte:HackThisSite Walkthrough, Part 2 - Legal Hacker TrainingHow To:Safely Log In to Your SSH Account Without a PasswordHow To:Mask Your IP Address and Remain Anonymous with OpenVPN for LinuxCommunity Byte:HackThisSite Walkthrough, Part 3 - Legal Hacker TrainingHow To:Use Wireshark to Steal Your Own Local PasswordsHow To:Create a Free SSH Account on Shellmix to Use as a Webhost & MoreHow To:Remotely Control Computers Over VNC Securely with SSHHow To:Burn an XDG3 Formatted Xbox 360 Game ISO with WindowsNews:Gathering Data for Fun and ProfitCommunity Byte:HackThisSite, Realistic 5 - Real Hacking SimulationsHow To:Push and Pull Remote Files Securely Over SSH with PipesCommunity Byte:HackThisSite Walkthrough, Part 10 - Legal Hacker TrainingCommunity Byte:HackThisSite, Realistic 4 - Real Hacking SimulationsCommunity Byte:HackThisSite Walkthrough, Part 8 - Legal Hacker TrainingCommunity Byte:HackThisSite Walkthrough, Part 7 - Legal Hacker TrainingGoodnight Byte:Hack Our IRC Bot to Issue CommandsCommunity Byte:HackThisSite, Realistic 3 - Real Hacking SimulationsCommunity Byte:HackThisSite, Realistic 2 - Real Hacking SimulationsCommunity Byte:HackThisSite, Realistic 1 - Real Hacking SimulationsListen In:Live Social Engineering Phone Calls with Professional Social Engineers (Week 2)Listen In:Live Social Engineering Phone Calls with Professional Social EngineersHow To:Completely Mask & Anonymize Your BitTorrent Traffic Using AnomosHow To:Run an FTP Server from Home with LinuxCommunity Byte:HackThisSite Walkthrough, Part 9 - Legal Hacker TrainingSecure Your Computer, Part 3:Encrypt Your HDD/SSD to Prevent Data TheftNews:Complete Arch Linux Installation, Part 1: Install & Configure ArchHow To:Hack Wireless Router Passwords & Networks Using HydraNews:WebChat for Null Byte IRC!Secure Your Computer, Part 4:Use Encryption to Make a Hidden Operating System