Many of you know about my new project, the HackerInstitute.com. Well, I just want you all to know that I just released an Ethical Hacking module straight from the Hacker Institute for.. wait for it.. free! Wooot!

Come get get it @ www.HackerInstitute.com.

Oh, and if you like it, you can sign up for the Hacker Institute because I’ve also re-opened registration. Yay! This day is getting better by the second!

Once again, here’s a link to the site: http://www.HackerInstitute.com

Heya! It’s been what seems like years since I actually posted something besides a podcast on MrCracker.com. This is going to change, I will now never post anything again. Just kidding :p, I’m planning on completely relaunching MrCracker.com.

I don’t want MrCracker.com to die a slow death so I’m taking some action. I will be completely redesigning the whole site, getting full time interesting writers and adding on some co-hosts to the CrackerCast Podcast since it must get pretty annoying having only my voice pounding your ear lobes.. and it’s always nice to have other opinions on different topics even though I’m obviously always right. Oh yeah, and I’m planning on starting a video podcast as well.

What I need from you is some guidance. I’m doing this for you, so I want to know exactly what you want. What do you like about the site? Podcast? What should I change? What kind of things should I start covering (ex. tools, techniques)? What type of features should I add to the site? Tell me! Now!

Overall, I just want to become more consistent with this site. Release new posts and podcasts regularly, and it would help if I had an idea of what you wanted to read/hear.

Why is there a big muscular black dude in this post? I don’t know either.

So comment below. Please .

This Episode of CrackerCast looks at this weeks hacker news and looks at a web hacking technique called SQL Injection.

 
Download .mp3 (right-click -> save link as…)
You can subscribe to the podcast feed via one of the two feeds below (might take a day for itunes to update it) :FeedBurner or iTunes

Hacker website of the week: 

www.iexploit.org, it contains a list of top security tools.

**This is a guest article about how to gain the Audix Voicemail System that is popularly used today. Unlike you, this person got off his ass and earned some $$ writing about what he loves. He has accomplished something with his life, he has written for MrCracker.com . What have you done?  Click Here to start.**

So as many of you know cell phone voicemails are incredibly insecure. Now for reconnaisance thisisn’t useful when you are gathering information on big companies. Mostly due to the fact that employeecell phones are often private. When doing reconnaisance you should always be aware of the information youhave already found, and how it can be used. Thats where an employee directory comes in handy. Many top businessess use the Audix voicemail system so knowledge of the system is invaluable. Now every Audix system hassomething called a system number which is what you will call to access your voicemail remotely. The only thing you will need to access someones voicemail is their extension, and the password they chose for their voicemail.Just like in any other situation we will try basic passwords ( remember a password can be between 4-15 digits).The most common passwords used are 1234,12345,123456,birthdays,anniversaries, and the extension itself.

Now finding system numbers may seem difficult, and it is. There are ways around that pesky number though.We will start with the easiest; finding publicized numbers. So many schools/businessess publish their audix systeminstructions for their employees. These files tend to contain data such as system numbers, extensions, and default passwords.Now these could be difficult to find by random searching, but you’re in luck. I have created a google dork which hasvery good results “inurl:audix system instructions”, and useful but not as effective “intitle: audix setup instruction”.

We have covered how to use the audix system, and how to find publicized audix systems, but say thecompany you are gathering information on has not publicized their Audix system number. Now how exactly couldyou get this number? Well there is a number of ways the easiest, and if done properly most successful is tosimply social engineer it. People forget these numbers constantly so find an employee’s name ( for maximum success choosesomeone who isn’t ranked very high.) You will need the help desk number to which is easily found, it is normally the contact number. What you say is up to you, but remember your goal is to gain the system number; so your best bet is to saysomething like you’ve never had to access your voicemail outside the office, and you’re unsure of which number to call.

If the social engineer methods fail there is one more that is hit and miss. Sometimes improperly configuredAudix systems will allow you to access the system directly as if you were calling the number. Now the easiestway to do this is to call as many numbers as you can after hours, so no one answers, and try hitting 0,# or *. Now what you are lookingfor is something about the Audix system, and if it works you will hear a message about dialing to another extension. That is when youchoose the correct number, and try different extensions, and passwords.”"

This Episode of CrackerCast looks at this weeks hacker news and looks at a web hacking technique called cross site scripting or XSS for short.

Download .mp3 (right-click -> save link as…)
You can subscribe to the podcast feed via one of the two feeds below (might take a day for itunes to update it) :FeedBurner or iTunes


News stories mentioned:
Anonymous probed for hack threat against WikiLeaker captor

Student hacked into his high school’s grade system like a real-life Ferris Bueller

4chan students hack district schools; Changed grades and $9,000 meals

Microsoft Xbox Live Marketplace Hacked For $1.2 M

Hacker website of the week:

www.sectools.org , it contains a list of top security tools.”"

This Episode of CrackerCast looks at this weeks hacker news and talks about the different types of proxies.

Download .mp3 (right-click -> save link as…)

You can subscribe to the podcast feed via one of the two feeds below (might take a day for itunes to update it) :FeedBurner or iTunes

News stories mentioned:

Hacking culture’s dramatic rise in India

Nearly one-third of all Malware created in 2010

London hacker who posed as student gets suspended sentence

Hacker manages to issue a tsunami warning

Hacker website of the week:

internetopenurla.blogspot.com“”

This Episode of CrackerCast looks at this weeks hacker news and an interview with Kevin Mitnick.


Download .mp3 (right-click -> save link as…)

You can subscribe to the podcast feed via one of the two feeds below (might take a day for itunes to update it) :FeedBurner or iTunes

News stories mentioned:

Insecurity vendor’s website gets hacked
Apps Going Viral: When Your Smartphone Gets Hacked
Computer Expert Pleads Guilty to Hacker Stock Scheme
Oh Hai! Apple TV Officially Hacked

Hacker website of the week:

Infolookup.securegossip.com“”

This Episode of CrackerCast looks at this weeks hacker news and breaks down the fifth phase of the hacking process, covering your tracks.

Download .mp3 (right-click -> save link as…)

You can subscribe to the podcast feed via one of the two feeds below (might take a day for itunes to update it) :FeedBurner or iTunes

News stories mentioned:

“”

This Episode of CrackerCast looks at this weeks hacker news and breaks down the fourth phase of the hacking process, maintaining access.

Download .mp3 (right-click -> save link as…)

You can subscribe to the podcast feed via one of the two feeds below (might take a day for itunes to update it) :FeedBurner or iTunes

News stories mentioned:

“”

The following is a guest post by Anonymous915. This is the third part in a series of articles on his view of hacking. If you are interested in writing for MrCracker.com, click here. Otherwise, Enjoy.

I’m back. Being that summer was in session, let’s say school was out, and I disappeared for a while doing some stuff for business purposes. So last time I wrote, School of Hacks – Part 2, I emphasized the use or learning and understanding a UNIX/Linux Operating System. Based on the feedback, it goes without saying that learning Python is a popular response to learn next.

I plan to get you started on the right foot and in doing so, I anticipate we will program a strong password generator. The very first lesson of course, is this lesson: Installing Python on Linux. In part 2 of this series, I described the the meaning behind Linux distributions, most Linux distributions come with Python installed. However, I will show you how to install Python on Debian and Fedora Linux. I chose these two distributions because they are the two major distros other systems are based on. Ubuntu, Knoppix, Linspire and others are Debian based while Fedora is RPM based just as Mandriva, SUSE and all Red Hat versions.

RPM Based Python installation

• Boot up your favorite RPM based Linux ditro, I’m using Fedora.
• Go to the Python for Linux RPM page at http://www.python.org/download/releases/2.4/rpms/
• Download the Binaries for Fefora Core 3, they are i386 RPM
• When the download is complete, open a console and go to the python-2.4.2.4….. file
• Make sure you have root access, otherwise type the following commands

localhost:~$ su

Password: [enter your root password]

• Type in the following command

• rpm -1 python2.4-2.4-1pydotorg.i386.rpm

• you should get a message, to read message

cat /var/spool/mail/root | less

• You should be able to start Python by typing Python on the console. This command can also be used prior to installation or to see the Python version currently installed.

Debian based systems could also already be pre-installed with Python. However, if need be, installing on a Debian based system might be a little easier.
Debian Based Python installation

• Boot up your favorite Debian based ditro, I’m running Debian 5

• Open a console and make sure you have root access, otherwise type the following commands

localhost:~$ su

Password: [enter your root password]

• Type in the following command

localhost:~# apt-get install python

• At this point, you should be able to start Python on the console on a Debian based system.

Although this covers a broad range of distributions, the categories of Linux distributions also include Gentoo, a portage package distro.

• Start up Gentoo
• Download the Python ebuild
• Reference the Gentoo Python Developers Guide

If you can go to a console, and  type:

python <enter>
1+1 <enter>

you should see and answer of 2, if so, you have properly installed Python on Linux and this should get you started in programming Python.”"