As you know in the web there are many different kinds of dangerous programs in the web. Some of them are really disruptive for your computer or company, but some of them can disrupt your reputation. I think that everybody have some personal picture somewhere in the computer. Well, this is ok, no problem. You don’t have to delete them straight away. But You just need to pay attention!

There are some programs that once executed they start searching for all your pictures in the machine and they will send it to the attacker. Everybody should be aware of this, but expecially girls should pay more attention.

Please read about this here I really like this programmer…
What do you think? Please leave a comment

Any question? You need our FAST help? Go to our forum and as for FREE!

Tagged with:
 

5 Responses to Stealing all the pictures from the victim’s hard drive.

  1. h3xx says:

    Interesting.. with metasploit u can use normal jpg file as an exploit tool with reverse shell, so the victim will think that’s normal jpg, but when he/she will try to preview it (dont even have to open it), she/ he will lunch an exploit and send reverse shell to attacker, so the attacker will be able to upload tools like netcat and create new user accounts with administrator privilages.

    So keep your system up to date, dont open any files from person u dont know and always keep your antivirus up to date. Thats are the basics (sometimes useless against 0 day attacks) but even those basics are difficult to understand by “average” users.

    Is linux more secure then windows?

    Yes and no. If linux is not up to date (kernel, software) it can be hacked same fast as windows, in some cases even faster.

  2. Sergio says:

    Thank you for your comment!
    Please say something more about metasploit, maybe some links with some procedures? Does it work for linux only or for windows as well?
    I am really interested on learning this…

  3. h3xx says:

    Hey, srry for delay :P

    Metasploit is basically a tool that contains exploits against different software. U can ask: so im able to hack someone pc’s using Metasploit? the aswer is.. Yes, but.. .. there is always a ..but

    How do u know if the victim is vulnerable? How do u know what kind of software is using.. can be a problem to find out.. unless.. u will use great tool called Nessus. Nessus will tell u exacly what the victim has on.. better, will tell u also what kind of vulnerablilietes the system and installed software have. With those information u can prepare Metasploit for an attack. With abit of luck u will get reverse tcp shell without a problem.
    Metasploit and Nessus are basically for free. The problem is that Metasploit is not very updated tool, u will not find there new exploits because the idea is: first inform developer about a security whole, wait for an update, then release exploit to public . With Nessus is simmilar situation, if u are using free version u will get updates not so often like the “payment” version.
    Nobody will give u “ready,working” exploit just for free :)
    Of course u can go to milw0rm.com and try one of the posted there but trust me, u will not know what to do with them :)

    ook I will not go deeper, if u are interested, go to metasploit and nessus website to learn more.

    cheers

  4. sergio says:

    Hello h3xx, I put a comment here: http://www.security-exchange.net/forums/showthread.php?p=10228#post10228

    When you have a moment, please let me know (there in the forum) about jpgs

  5. [...] the system is vulnerable also pictures can infect the computer… look here for more infos http://www.security-exchange.net/new…ms-hard-drive/ __________________ Security questions? Visit the Security Exchange forum Security-Exchange News [...]

Leave a Reply

Your email address will not be published. Required fields are marked *

*

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>