Ethical Hacking Workshop Presentation

2. Contents
• Windows password cracking
• Cryptography
• Steganography
• Virus writing
• Phishing
• Google Hacking
• Wi-Fi Hacking
• Unblocking
• Patching android apps
• SQL injection

3. Windows Password Cracking
1. In case if the victim’s machine is logged in (as administrator)
Method I-

4. •Method II – Using command prompt or Power-shell

5. 2. By creating the Backdoor (Exploiting the Stick Key Feature of Windows)

6. We can exploit the loop hole by replacing sethc.exe with cmd.exe

7. Countermeasures
• Don’t keep your admin account logged in in
you absence.
• Set BIOS password to prevent USB boot.
• Encrypt you drives using tools like Bitlocker,
True Crypt.

8. Cryptography
• The Art of writing and solving codes.

9. Example - 1
Encrypted Form
8 1 3 11 9 14 7
Decrypted Form
H A C K I N G
Key- Letter’s Positions in Alphabet

10. Example – 2
Encrypted Form-
44 2 222 55 444 66 4
Decrypted Form-
H A C K I N G
Key- Telephone Keypad

11. Need of Encryption
• To protect a user's identity and privacy.
• To add an extra layer of protection for
the confidential information residing on
your PC and devices.

12. Steganography
• Steganography is the hiding of a secret
message within an ordinary message/file and
the extraction of it at its destination.
• Binding Method

13. • Include Method
• Tools- Open Stego, Stego Magic, Quick Stego

14. Virus Writing
• Steps involved-
1. Creating Batch file.
2. Icon changing and Binding.
Icon changing tool – IconChanger
Binding tool – Shockwave’s File Binder

15. Phishing
• Phishing is the attempt to obtain sensitive
information such as usernames, passwords.

17. Tabnapping

19. •Phishing attack using Z-Shadow

20. Google Hacking
• Technique that uses Google Search and other
Google applications to find security holes in
the configuration and computer code that
websites use.
• intitle
• Inurl
Tool – Google Hacks

21. Wi-Fi Hacking
• Netcut

22. Unblocking
• Rabb.it

23. • Glype Proxy

24. • The Way back Machine
• Unblocking download limits with Mac
Spoofing

25. Top Proxy tools
• Tor Browser
• Psiphon
• Ultra Surf
• Hotspot Shield

26. Patching

27. SQL Injection
• Code injection technique, used to attack data-
driven applications
• Live Demo
www.codebashing.com