IHackedThisBox - Security Library

IHTB Library

IHTB offers tools, ideas and methods to IMPROVE security measures and practices,
along with circumvention of these measures and practices. While playing with these 
tools & information, don't be stupid & use good judgment (=

IHTB Reading Room

 » Hacking with your cat
 Using netcat for some hax0r & administrator techniques.

 » Netcat hacking Tutorial 
 Learn a few  tricks using the almighty netcat...

Get netcat or netcat Read Me.
Original netcat README

» XSS hacking exposed & explained

New paper in the works

 This covers XSS/cross site scripting hacking techniques
 along with filtering techniques to protect your servers.
 Final release coming soon!

» Security Incident Reporting
 Paper covering incident reporting.

»  Chroot-howto. 
 eclipsex has started a tutorial on using chroot.

IHTB Quick References

 We have references for popular tools such as nmap, nessus and tcpdump. 
 Along with more guides ranging from performing network reconnaissance, 
 web application penetration testing to programming syntax.

Current Topics: 
 Network tools & protocols 
 Security testing & tools
 Passwords & word lists
 programming & operating systems, + more.. check it out.
 
IHTB Quick References

» Index of Quick Hacks
 A collection of some quick hacks.

» TCPDump Explained
 Quick write up about using tcpdump and some of its 
 advanced features for use by network ninjas.

» Ascii Table - Hex/Dec
 Ascii table in decimal and hex values.

» Get A Client Workstation, and own the domain
 Get one workstation and own the domain?!?! WTF?!?! READ...

» Windows privilege escalation using Program.exe
 Yay!

» Common Ports
 List of common attacked ports

» Password Cracking And Recovery

Password Cracking Information

Most passwords are built on the notion of time. Some users won't deny that a password is uncrackable; they merely say that it would take so long to crack them that it isn't even worth trying.

Through a bit of ingenuity, curiosity, and a stroke of luck, Scott Crawford managed to come across passwords that couldn't be cracked, at least not by today's tools.

Table of uncrackable alt characters

Common Brute Force Character Set:

* 0123456789
* abcdefghijklmnopqrstuvwxyz
* ABCDEFGHIJKLMNOPQRSTUVWXYZ
* !@#$%^&*()-_+=
* ~`[]{}|\:;’<>,.?/

Password Crackers:
JTR - John The Ripper, nuff said..
Cain & Abel - If MS Office was a password cracking suite, this would be it!
Rainbow Crack - Rainbow Tables anyone?
l0phtCrack 5 - The king of windows password/hash cracking.

Misc Tools & Utility's

» Audit-Solaris.sh.txt
  Utility to gather the required information & data needed to perform 
  a forensic audit on Solaris.

» No Contrast ctheme
  Just because you are paranoid, it doesn't mean they are NOT watching 
  you. With the help of ctheme and this script you can at least stop 
  them from seeing your laptop/desktop screen via shoulder surfing (=.

» RSA Crypto Dolphin
  RSA Encryption Dolphin - perl.

» IHTB Word List Compilation - README
 This compilation contains password list collected from various archives 
 around the internet. I decided there was not a very good maintained & 
 updated list around anymore, so I have begun collecting lists from 
 all the popular olders ones that I can find around still and slowly 
 begin merging them all together and attempt to re-organize and remove 
 duplicates from each.

Work with the security community, not against it
Site best viewed in 1024x768 resolution with eyes open...