cyber squad: KALI LINUX

Kali Linux Tutorial: Hack A Web Browser Using BeEF

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="background-color: white; clear: both; color: #5e5e5e; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; text-align: center; transition: all 0.3s ease;">
</div>
<div style="background-color: white; font-family: montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<span style="background-color: white; color: black; font-family: "verdana" , sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;"><img height="464" src="http://tools.kali.org/wp-content/uploads/2014/02/beef.png" width="640" /></span><br />
<span style="background-color: white; color: black; font-family: "verdana" , sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">BeEF was developed by a group of developers led by <a href="https://twitter.com/WadeAlcorn" style="outline: 0px; text-decoration: none; transition: all 0.3s ease;" target="_blank">Wade Alcorn</a>. Built on the familiar Ruby on Rails platform, BeEF was developed to explore the vulnerabilities in browsers and test them. In particular, BeEF is an excellent platform for testing a browser’s vulnerability to cross-site scripting (XSS) and other injection attacks.</span><br />
<div style="background-color: white; font-family: montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span>
<h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; font-size: medium; outline: 0px; transition: all 0.3s ease;">Step 1: Start Cooking BeEF</span></h3>
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" />BeEF is built into Kali Linux, and it can be started as a service and accessed via a web browser on your localhost.</span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black;"><span style="font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;">Here is a complete tutorial about hacker's OS Kali Linux, so read this before you go ahead: </span><a href="http://www.picateshackz.com/2015/01/an-introduction-to-hackers-os-kali.html" style="outline: 0px; text-decoration: none; transition: all 0.3s ease;">An Introduction To Hacker’s OS: Kali Linux Setup Tutorial</a></span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"> So let’s start by firing up Kali and cooking a bit of BeEF. Start the BeEF service by going to<b style="outline: 0px; transition: all 0.3s ease;">“Applications” -> “Kali Linux” -> “System Services” -> “BeEF” -> “beef start.”</b></span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><b style="outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></b></span></div>
<div class="separator" style="clear: both; outline: 0px; text-align: center; transition: all 0.3s ease;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjE19dYRhoyZ6yNYJfM3zgzNAwpZoRueBR7SFkg8dnveKzsAcC92mCI0y2Ew5Sn6n7CbPDGX5C4m_ygWqklelGYwLvXQr4wAWw09wNpQgwXShpVBh1iHqdNaO-Danuenci_9lP0IMkVPMkh/s1600/kali-linux-hack-web-browser-using-BeFF-+picateshackz.com+1.jpg" imageanchor="1" style="clear: none; float: none; margin-left: 1em; margin-right: 1em; outline: 0px; text-decoration: none; transition: all 0.3s ease;"><span style="color: black;"><img alt="kali-linux-hack-web-browser-using-BeFF- picateshackz.com" border="0" height="476" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjE19dYRhoyZ6yNYJfM3zgzNAwpZoRueBR7SFkg8dnveKzsAcC92mCI0y2Ew5Sn6n7CbPDGX5C4m_ygWqklelGYwLvXQr4wAWw09wNpQgwXShpVBh1iHqdNaO-Danuenci_9lP0IMkVPMkh/s640/kali-linux-hack-web-browser-using-BeFF-+picateshackz.com+1.jpg" style="border: 0px; box-sizing: border-box !important; height: auto !important; max-width: 100%; outline: 0px; position: relative; transition: all 0.3s ease;" title="" width="640" /></span></a></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; font-size: medium; outline: 0px; transition: all 0.3s ease;">Step 2: Opening a Browser to BeEF</span></h3>
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" />The BeEF server can be accessed via any browser on our localhost (127.0.0.1) web server at port 3000. To access its authentication page, go to:<br style="outline: 0px; transition: all 0.3s ease;" /><br style="outline: 0px; transition: all 0.3s ease;" /><b style="outline: 0px; transition: all 0.3s ease;">http://localhost:3000/ui/authentication</b><br style="outline: 0px; transition: all 0.3s ease;" />The default credentials are “beef” for both username and password.</span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div class="separator" style="clear: both; outline: 0px; text-align: center; transition: all 0.3s ease;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjk7BiKBlQz2X_P7iA3v5TrRrXRMHhPhvhAqFyVl54Lkg1IHLlvaTQJyBLBHppoIKZ8QSZrIsF4b0Y3sA-QVSVtKrocMp22xx4SlnszpLt8pDLdKtCSl6HNC7yvMcwQ7n32ctiQ8NHJ8fE2/s1600/kali-linux-hack-web-browser-using-BeFF-+picateshackz.com+2.jpg" imageanchor="1" style="clear: none; float: none; margin-left: 1em; margin-right: 1em; outline: 0px; text-decoration: none; transition: all 0.3s ease;"><span style="color: black;"><img alt="kali-linux-hack-web-browser-using-BeFF- picateshackz.com" border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjk7BiKBlQz2X_P7iA3v5TrRrXRMHhPhvhAqFyVl54Lkg1IHLlvaTQJyBLBHppoIKZ8QSZrIsF4b0Y3sA-QVSVtKrocMp22xx4SlnszpLt8pDLdKtCSl6HNC7yvMcwQ7n32ctiQ8NHJ8fE2/s1600/kali-linux-hack-web-browser-using-BeFF-+picateshackz.com+2.jpg" style="border: 0px; box-sizing: border-box !important; height: auto !important; max-width: 100%; outline: 0px; position: relative; transition: all 0.3s ease;" title="" /></span></a></div>
<div class="separator" style="clear: both; outline: 0px; text-align: center; transition: all 0.3s ease;">
<span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;">Great! Now you have successfully logged into BeEF and are ready to begin using this powerful platform to hack web browsers.<br style="outline: 0px; transition: all 0.3s ease;" /><br style="outline: 0px; transition: all 0.3s ease;" />Note that in the screenshot below that my local browser, 127.0.0.1, appears in the left hand “Hooked Browsers” explorer after I clicked on the link to the demo page. BeEF also displays its “Getting Started” window to the right.</span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div class="separator" style="clear: both; outline: 0px; text-align: center; transition: all 0.3s ease;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxeluiS8ukcbLe_GRqq71cR3W0ky8URe-pbe_VpUj-zxEZs5Iwlf-jDFwrHxQ0G7-mYaFZ5FcHgOqCCFN2rFqaUYYmvshvbLq666TaYj21O5-QzR6QEQqPnMINP8GcK8NJ8Xt5GOebvlem/s1600/kali-linux-hack-web-browser-using-BeFF-+picateshackz.com+3.jpg" imageanchor="1" style="clear: none; float: none; margin-left: 1em; margin-right: 1em; outline: 0px; text-decoration: none; transition: all 0.3s ease;"><span style="color: black;"><img alt="kali-linux-hack-web-browser-using-BeFF- picateshackz.com" border="0" height="456" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhxeluiS8ukcbLe_GRqq71cR3W0ky8URe-pbe_VpUj-zxEZs5Iwlf-jDFwrHxQ0G7-mYaFZ5FcHgOqCCFN2rFqaUYYmvshvbLq666TaYj21O5-QzR6QEQqPnMINP8GcK8NJ8Xt5GOebvlem/s640/kali-linux-hack-web-browser-using-BeFF-+picateshackz.com+3.jpg" style="border: 0px; box-sizing: border-box !important; height: auto !important; max-width: 100%; outline: 0px; position: relative; transition: all 0.3s ease;" title="" width="640" /></span></a></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span>
<h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; font-size: medium; outline: 0px; transition: all 0.3s ease;">Step 3: Viewing Browser Details</span></h3>
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" />If I click on the local browser, it will provide with more choices to the right including a “Details” window where we can get all the particulars of that browser. Since I am using the Iceweasel browser built into Kali, which is built upon Firefox, it shows me that the browser is Firefox.<br style="outline: 0px; transition: all 0.3s ease;" /><br style="outline: 0px; transition: all 0.3s ease;" />It also shows me the version number (24), the platform (Linux i686), any components (Flash, web sockets, etc.), and more information that we will be able to use in later web application hacks.</span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div class="separator" style="clear: both; outline: 0px; text-align: center; transition: all 0.3s ease;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwNnu-zYYB4j00EbfU8bAD8T6vvfIUJHaPlj0OT33OJeh9WXPLK3kD6cB-IGv6jZnetKXQ3u7V2DxjFrB4vYtrBKpDGHlEDm0YAtgpwMQNoyy7WvdOLfAAGYgjSSRvgX2jQWCbx8_l-2Zf/s1600/kali-linux-hack-web-browser-using-BeFF-+picateshackz.com+4.jpg" imageanchor="1" style="clear: none; float: none; margin-left: 1em; margin-right: 1em; outline: 0px; text-decoration: none; transition: all 0.3s ease;"><span style="color: black;"><img alt="kali-linux-hack-web-browser-using-BeFF- picateshackz.com" border="0" height="388" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwNnu-zYYB4j00EbfU8bAD8T6vvfIUJHaPlj0OT33OJeh9WXPLK3kD6cB-IGv6jZnetKXQ3u7V2DxjFrB4vYtrBKpDGHlEDm0YAtgpwMQNoyy7WvdOLfAAGYgjSSRvgX2jQWCbx8_l-2Zf/s640/kali-linux-hack-web-browser-using-BeFF-+picateshackz.com+4.jpg" style="border: 0px; box-sizing: border-box !important; height: auto !important; max-width: 100%; outline: 0px; position: relative; transition: all 0.3s ease;" title="" width="640" /></span></a></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span>
<h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; font-size: medium; outline: 0px; transition: all 0.3s ease;">Step 4: Hooking a Browser</span></h3>
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" />The key to success with BeEF is to “hook” a browser. This basically means that we need the victim to visit a vulnerable web app. This injected code in the “hooked” browser then responds to commands from the BeEF server. From there, we can do a number of malicious things on the victim’s computer.<br style="outline: 0px; transition: all 0.3s ease;" /><br style="outline: 0px; transition: all 0.3s ease;" />BeEF has a JavaScript file called “hook.js,” and if we can get the victim to execute it in a vulnerable web app, we will hook their browser! In future tutorials, we will look at multiple ways to get the victim’s browser hooked.<br style="outline: 0px; transition: all 0.3s ease;" /><br style="outline: 0px; transition: all 0.3s ease;" />In the screenshot below, I have “hooked” an Internet Explorer 6 browser on an old Windows XP on my LAN at IP 192.168.89.191.</span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div class="separator" style="clear: both; outline: 0px; text-align: center; transition: all 0.3s ease;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXq_b6TleHE47Y_U5E0KIfgwGLXCtiYUYRfVROxnk3kyEQs25LM-cUnST6Y3kJmTMQys0mjBVCqxnCud-TvcrnhHH7VLtlv4s3X2kCPF7J7IeaFPINvA1Vd0d9ejhFiQAD77HMgl3WxEzo/s1600/kali-linux-hack-web-browser-using-BeFF-+picateshackz.com+5.jpg" imageanchor="1" style="clear: none; float: none; margin-left: 1em; margin-right: 1em; outline: 0px; text-decoration: none; transition: all 0.3s ease;"><span style="color: black;"><img alt="kali-linux-hack-web-browser-using-BeFF- picateshackz.com" border="0" height="304" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjXq_b6TleHE47Y_U5E0KIfgwGLXCtiYUYRfVROxnk3kyEQs25LM-cUnST6Y3kJmTMQys0mjBVCqxnCud-TvcrnhHH7VLtlv4s3X2kCPF7J7IeaFPINvA1Vd0d9ejhFiQAD77HMgl3WxEzo/s640/kali-linux-hack-web-browser-using-BeFF-+picateshackz.com+5.jpg" style="border: 0px; box-sizing: border-box !important; height: auto !important; max-width: 100%; outline: 0px; position: relative; transition: all 0.3s ease;" title="" width="640" /></span></a></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span>
<h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; font-size: medium; outline: 0px; transition: all 0.3s ease;">Step 5: Running Commands in the Browser</span></h3>
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" />Now, that we have hooked the victim’s browser, we can use numerous built-in commands that can executed from the victim’s browser. Below are just a few examples; there are many others.</span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span>
<ul style="line-height: 1.5; list-style: none; margin: 0.5em 0px; outline: 0px; padding: 0px 2.5em; transition: all 0.3s ease;"><span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;">
<li style="line-height: 1.5; list-style: none; margin: 5px 0px; outline: 0px; padding: 0px; transition: all 0.3s ease;">Get Visited Domains</li>
<li style="line-height: 1.5; list-style: none; margin: 5px 0px; outline: 0px; padding: 0px; transition: all 0.3s ease;">Get Visited URLs</li>
<li style="line-height: 1.5; list-style: none; margin: 5px 0px; outline: 0px; padding: 0px; transition: all 0.3s ease;">Webcam</li>
<li style="line-height: 1.5; list-style: none; margin: 5px 0px; outline: 0px; padding: 0px; transition: all 0.3s ease;">Get All Cookies</li>
<li style="line-height: 1.5; list-style: none; margin: 5px 0px; outline: 0px; padding: 0px; transition: all 0.3s ease;">Grab Google Contacts</li>
<li style="line-height: 1.5; list-style: none; margin: 5px 0px; outline: 0px; padding: 0px; transition: all 0.3s ease;">Screenshot</li>
</span></ul>
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" />In the screenshot below, I selected the “Webcam” command that many of you may be interested in. As you can see, when I execute this command, an Adobe Flash dialog box will pop up on the screen of the user asking, “Allow Webcam?” If they click “Allow,” it will begin to return pictures from the victim’s machine to you.<br style="outline: 0px; transition: all 0.3s ease;" /><br style="outline: 0px; transition: all 0.3s ease;" />Of course, the text can be customized, so be imaginative. For instance, you could customize the button to say “You have just won the lottery! Click here to collect your winnings!” or “Your software is out of date. Click here to update and keep your computer secure.” Other such messages might entice the victim to click on the box.</span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div class="separator" style="clear: both; outline: 0px; text-align: center; transition: all 0.3s ease;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSg2c0WfthrLosrr4IC_n39Lixk9z81KdndLZFtyXi6yak8iwZsAc6MvO2p-2_dyaKSjwDwcApehBxVq8bGErfm-4cj_Dm3rtyInsihrqXAjPvwwm8RWygnVxv1EMNSbKsCq9jrAaqbR2c/s1600/kali-linux-hack-web-browser-using-BeFF-+picateshackz.com+6.jpg" imageanchor="1" style="clear: none; float: none; margin-left: 1em; margin-right: 1em; outline: 0px; text-decoration: none; transition: all 0.3s ease;"><span style="color: black;"><img alt="kali-linux-hack-web-browser-using-BeFF- picateshackz.com" border="0" height="304" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiSg2c0WfthrLosrr4IC_n39Lixk9z81KdndLZFtyXi6yak8iwZsAc6MvO2p-2_dyaKSjwDwcApehBxVq8bGErfm-4cj_Dm3rtyInsihrqXAjPvwwm8RWygnVxv1EMNSbKsCq9jrAaqbR2c/s640/kali-linux-hack-web-browser-using-BeFF-+picateshackz.com+6.jpg" style="border: 0px; box-sizing: border-box !important; height: auto !important; max-width: 100%; outline: 0px; position: relative; transition: all 0.3s ease;" title="" width="640" /></span></a></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span>
<h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; font-size: medium; outline: 0px; transition: all 0.3s ease;">Step 6: Getting Cookies</span></h3>
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" />Once we have the browser hooked, there is almost unlimited possibilities of what we can do. If we wanted the cookies of the victim, we can go to “Chrome Extensions” and select “Get All Cookies” as shown in the screenshot below.</span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div class="separator" style="clear: both; outline: 0px; text-align: center; transition: all 0.3s ease;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2c3i3hRlLAnyn3AYnyiXTjGpcuifrZ_bwlJ0RKnCue2iwb8r-VtDz7Ps6DAHIcu1Nj4Z63YOS43GELTQVRaC2d8A64XlRV0tf87uHwIi76CO0dVI7bVUer32dSaCqJGsqw5X4-raoLSI6/s1600/kali-linux-hack-web-browser-using-BeFF-+picateshackz.com+7.jpg" imageanchor="1" style="clear: none; float: none; margin-left: 1em; margin-right: 1em; outline: 0px; text-decoration: none; transition: all 0.3s ease;"><span style="color: black;"><img alt="kali-linux-hack-web-browser-using-BeFF- picateshackz.com" border="0" height="304" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj2c3i3hRlLAnyn3AYnyiXTjGpcuifrZ_bwlJ0RKnCue2iwb8r-VtDz7Ps6DAHIcu1Nj4Z63YOS43GELTQVRaC2d8A64XlRV0tf87uHwIi76CO0dVI7bVUer32dSaCqJGsqw5X4-raoLSI6/s640/kali-linux-hack-web-browser-using-BeFF-+picateshackz.com+7.jpg" style="border: 0px; box-sizing: border-box !important; height: auto !important; max-width: 100%; outline: 0px; position: relative; transition: all 0.3s ease;" title="" width="640" /></span></a></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" />When we click on the “Execute” button to the bottom right, it will begin collecting all the cookies from the browser. Obviously, once you have the user’s cookies, you are likely to have access to their websites as well.<br style="outline: 0px; transition: all 0.3s ease;" /><br style="outline: 0px; transition: all 0.3s ease;" />BeEF is an extraordinary and powerful tool for exploiting web browsers. In addition to what I have shown you here, it can also be used to leverage operating system attacks. We will be using it and other tools in my new series on hacking web applications, mobile devices, and Facebook, so keep coming back, my greenhorn hackers.</span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="color: black; font-family: "verdana" , sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
</div>
<div style="background-color: white; font-family: montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<div style="margin: 0px; outline: 0px;">
<br /></div>
</div>
</div>

Kali Linux Tutorial: Hack A Web Browser Using BeEF

BeEF was developed by a group of developers led by Wade Alcorn . Built on the familiar Ruby on Rails platform, BeEF was developed to ...

Kali Linux Tutorial: Setting Up ProxyChains + Tor For Anonymity And Security

<div dir="ltr" style="text-align: left;" trbidi="on">
<img alt="Setting Up ProxyChains + Tor For Anonymity- picateshackz.com" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhAaquBzvDunP3OyS34nzQNK8hsRKGk6ZMN1hvREH5nxbVVdjPBuMsyyvFj2uORcQ_cqPZE_9fuEzrsPIZpMqrS9aOk_hkOj_LhOOgkFx08c3kjgj9201EYcMpa0X0Ker6kEQWVQUGieTiE/s640/proxy_chaining_picateshackz.jpg" /><br />
<br />
<span style="color: black;"><span style="background-color: white; font-family: Verdana, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">Hack anonymously is one of the important aspect of Information Security, if you want to conduct penetration testing on a remote computer then active connection is required which surely reveal your identity, sometimes you need to hide your identity while doing vulnerability assessment because of your anonymity and security. Proxy Chaining is a concept which is very helpful to hide an identity on the Internet.</span></span><br />
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" />The worst thing that can happen to any hacker is being detected by a security admin, the security technologies (IDS, firewall, etc.), or a forensic investigator.</span></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" />Every time we send a packet to our intended target, that packet contains our IP address in the IP header. When we make a TCP connection, the target system will log our IP address as it logs all connections. If we set off any security alarms or alerts, our IP address will be logged. All of these events increase the possibility of detection.</span></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" />In order to hack anonymously with the least chance of detection, we need to use an intermediary machine whose IP address will be left on the target system. This can be done by using proxies.</span></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" />These systems are designed to accept our traffic and then forward it on to the intended target. Of course, the proxy will likely log our traffic, but an investigator would have to get a subpoena or search warrant to obtain the logs.<br style="outline: 0px; transition: all 0.3s ease;" />If we string multiple proxies in a chain, we make it harder and harder to detect our original IP address. If one of those proxies is outside the jurisdiction of the victim, it makes it very unlikely that any traffic can be attributed to our IP address.</span></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" />In <a href="http://picateshackz.blogspot.com/2015/01/an-introduction-to-hackers-os-kali.html" style="outline: 0px; text-decoration: none; transition: all 0.3s ease;">Kali Linux</a> we have an excellent tool for proxying our traffic called proxychains. In this tutorial, I will show how to use this simple, but powerful tool.</span></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span><h2 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; font-size: large; outline: 0px; transition: all 0.3s ease;"><span style="color: black;">Normal Proxy Vs Proxy Chaining</span></span></h2>
<h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><i style="outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></i></span></h3>
<h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><i style="outline: 0px; transition: all 0.3s ease;"><span style="color: black;">Normal Proxy Concept: Your Computer →Proxy Server → Target Computer</span></i></span></h3>
</div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<div class="separator" style="clear: both; outline: 0px; text-align: center; transition: all 0.3s ease;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0LZsivXk52XlakvqZNIHC7GjXJqGZq1AzyOHlftxDzNZ6uyjWizEyHGRzEP27yB9GitcspDaH6RQvHbvQscMpAxbZCr0fNDfqomYMieikFfoDNQcgEL0egtvgcNeQZdLy_byOgzWDFvl8/s1600/proxy_chaining_picateshackz2.jpg" imageanchor="1" style="clear: none !important; float: none !important; margin-left: 1em; margin-right: 1em; outline: 0px; text-decoration: none; transition: all 0.3s ease;"><span style="color: black;"><img border="0" height="268" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg0LZsivXk52XlakvqZNIHC7GjXJqGZq1AzyOHlftxDzNZ6uyjWizEyHGRzEP27yB9GitcspDaH6RQvHbvQscMpAxbZCr0fNDfqomYMieikFfoDNQcgEL0egtvgcNeQZdLy_byOgzWDFvl8/s640/proxy_chaining_picateshackz2.jpg" style="border: 0px; box-sizing: border-box !important; height: auto !important; max-width: 100%; outline: 0px; position: relative; transition: all 0.3s ease;" width="640" /></span></a></div>
<span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;">This is the concept of simple proxy, when a user uses one proxy server to hide his/her identity.</span></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;">Read my previous post to know more about Proxies: </span><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><a href="http://picateshackz.com/2015/05/top-ten-free-proxy-websites-for.html" style="outline: 0px; text-decoration: none; transition: all 0.3s ease;">Top Ten Free Proxy Websites For Anonymous Surfing</a></span><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span><h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><i style="outline: 0px; transition: all 0.3s ease;"><span style="color: black;">Proxy Chaining Concept: Your Computer → Proxy Server 1 +.......+ Proxy Server N → Target Computer</span></i></span></h3>
</div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<div class="separator" style="clear: both; outline: 0px; text-align: center; transition: all 0.3s ease;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-8uoI0f-I6dfJWXm4rurv37I2wEd7tTMQRDgODVbXQfyMsj7vqTac6TWnHj70puGHiT8gF-MmhWJPwqtx6sNy2xBQLfwyK5xQTZRUDgxGRKuD29a6CLYlF_X6Ub8ZKtdsVFoBeL-6-kG8/s1600/proxy_chaining_picateshackz1.jpg" imageanchor="1" style="clear: none !important; float: none !important; margin-left: 1em; margin-right: 1em; outline: 0px; text-decoration: none; transition: all 0.3s ease;"><span style="color: black;"><img border="0" height="170" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg-8uoI0f-I6dfJWXm4rurv37I2wEd7tTMQRDgODVbXQfyMsj7vqTac6TWnHj70puGHiT8gF-MmhWJPwqtx6sNy2xBQLfwyK5xQTZRUDgxGRKuD29a6CLYlF_X6Ub8ZKtdsVFoBeL-6-kG8/s640/proxy_chaining_picateshackz1.jpg" style="border: 0px; box-sizing: border-box !important; height: auto !important; max-width: 100%; outline: 0px; position: relative; transition: all 0.3s ease;" width="640" /></span></a></div>
<span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;">Now the usage of multiple proxies at a time is called Proxy Chaining, it is reliable in-terms to hide the identity. In simple words Proxy Chaning is the process to use multiple proxies in chain.</span><br style="outline: 0px; transition: all 0.3s ease;" /><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span><h2 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; font-size: large; outline: 0px; transition: all 0.3s ease;"><span style="color: black;">What is Proxy Chains?</span></span></h2>
</div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;">The basic concept of proxy chaining is discussed now in this section we will discuss the practical aspect of Proxy Chaining, Proxy Chains (ProxyChains) is an open source program which allows you to make TCP and DNS connection by using proxy for example TOR.</span></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" />TOR is not necessary for proxychains, you may use any SOCKS 4, SOCKS 5 and HTTPS proxy. There are so many advantages of Proxy Chains for example:</span></span><ul style="line-height: 1.5; list-style: none; margin: 0.5em 0px; outline: 0px; padding: 0px 2.5em; transition: all 0.3s ease;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;">
<li style="line-height: 1.5; list-style: none; margin: 5px 0px; outline: 0px; padding: 0px; transition: all 0.3s ease;">Hide identity</li>
<li style="line-height: 1.5; list-style: none; margin: 5px 0px; outline: 0px; padding: 0px; transition: all 0.3s ease;">It can bypass Firewall (If you are behind a firewall or local proxy server)</li>
<li style="line-height: 1.5; list-style: none; margin: 5px 0px; outline: 0px; padding: 0px; transition: all 0.3s ease;">And many more</li>
</span></span></ul>
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;">In <a href="http://picateshackz.com/2015/01/an-introduction-to-hackers-os-kali.html" style="outline: 0px; text-decoration: none; transition: all 0.3s ease;">Kali Linux</a> proxychains is already configured but if you are using any other version of Linux you may download it from official website. Follow the command mentioned below to get proxychains via terminal.</span></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span><blockquote class="tr_bq" style="border-left-color: rgb(30, 135, 240); border-left-style: solid; border-left-width: 5px; font-style: italic; margin-left: 0px; outline: 0px; padding: 10px 15px; transition: all 0.3s ease;">
<span style="color: black;"> <span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><b style="outline: 0px; transition: all 0.3s ease;">root@Kali:~# apt-get install proxychains</b></span></span></blockquote>
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span><h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><i style="outline: 0px; transition: all 0.3s ease;"><span style="color: black;">Let's start,</span></i></span></h3>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><i style="outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></i></span></div>
<h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;">Step 1: Finding proxychains in Kali Linux</span></span></h3>
<div style="outline: 0px; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span></div>
</div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;">Type the following command in Kali:</span></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span><blockquote class="tr_bq" style="border-left-color: rgb(30, 135, 240); border-left-style: solid; border-left-width: 5px; font-style: italic; margin-left: 0px; outline: 0px; padding: 10px 15px; transition: all 0.3s ease;">
<span style="color: black;"> <span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><b style="outline: 0px; transition: all 0.3s ease;">root@Kali:~# locate proxychains</b></span></span></blockquote>
</div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" />As we can see in the screenshot below, proxychains is in the /usr/bindirectory. Since /usr/bin is in our PATH variable, we can use it from any directory. This is just as we would want since we use proxychains with other commands, which may NOT likely be in the PATH variable.</span><br style="outline: 0px; transition: all 0.3s ease;" /><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<div class="separator" style="clear: both; outline: 0px; text-align: center; transition: all 0.3s ease;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYtxFMo7t1AiTFBQbM0pn5mDyY3p4GKQb3JEUAjOQ9x_PqL8gmX5No3bp9IFOl-kbj4Pnyoiwci4gkEtbobkpjEOpujIRD46dUfOchjkNI-FIR4OCasiNI9rGXxpVIRs79G8eN8SRANlea/s1600/proxy_chaining_picateshackz4.jpg" imageanchor="1" style="clear: none !important; float: none !important; margin-left: 1em; margin-right: 1em; outline: 0px; text-decoration: none; transition: all 0.3s ease;"><span style="color: black;"><img border="0" height="416" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjYtxFMo7t1AiTFBQbM0pn5mDyY3p4GKQb3JEUAjOQ9x_PqL8gmX5No3bp9IFOl-kbj4Pnyoiwci4gkEtbobkpjEOpujIRD46dUfOchjkNI-FIR4OCasiNI9rGXxpVIRs79G8eN8SRANlea/s640/proxy_chaining_picateshackz4.jpg" style="border: 0px; box-sizing: border-box !important; height: auto !important; max-width: 100%; outline: 0px; position: relative; transition: all 0.3s ease;" width="640" /></span></a></div>
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span><h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;">Step 2: Proxychains Syntax</span></span></h3>
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><span style="outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span>The syntax for the proxycahins command is simple and straightforward.</span></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span><blockquote class="tr_bq" style="border-left-color: rgb(30, 135, 240); border-left-style: solid; border-left-width: 5px; font-style: italic; margin-left: 0px; outline: 0px; padding: 10px 15px; transition: all 0.3s ease;">
<span style="color: black;"> <span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><b style="outline: 0px; transition: all 0.3s ease;">root@Kali:~# proxychains <the command you want proxied> <any arguments></b></span></span></blockquote>
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" />So, if I wanted to use proxychains to scan a site with nmap anonymously, I could type:</span></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span><blockquote class="tr_bq" style="border-left-color: rgb(30, 135, 240); border-left-style: solid; border-left-width: 5px; font-style: italic; margin-left: 0px; outline: 0px; padding: 10px 15px; transition: all 0.3s ease;">
<span style="color: black;"> <span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><b style="outline: 0px; transition: all 0.3s ease;">root@Kali:~# proxychains nmap -sS <IP address></b></span></span></blockquote>
</div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;">Step 3: Set Up the Config File</span></span></h3>
</div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" />Now it is time to configure proxychains, there are two options that can be used whether use nano to edit config file on terminal and the other option is to use your favorite editor, both commands are mentioned below.</span></span></div>
<span style="color: black;"><br style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;" /></span>
<blockquote class="tr_bq" style="background-color: white; border-left-color: rgb(30, 135, 240); border-left-style: solid; border-left-width: 5px; font-family: Montserrat, sans-serif; font-size: 15px; font-style: italic; line-height: 22.5px; margin-left: 0px; outline: 0px; padding: 10px 15px; transition: all 0.3s ease;">
<span style="color: black;"> <span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><b style="outline: 0px; transition: all 0.3s ease;">root@kali:~# nano /etc/proxychains.conf </b></span></span></blockquote>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><b style="outline: 0px; transition: all 0.3s ease;">--OR-- </b></span></span><blockquote class="tr_bq" style="border-left-color: rgb(30, 135, 240); border-left-style: solid; border-left-width: 5px; font-style: italic; margin-left: 0px; outline: 0px; padding: 10px 15px; transition: all 0.3s ease;">
<span style="color: black;"> <span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><b style="outline: 0px; transition: all 0.3s ease;">root@kali:~# sudo gedit /etc/proxychains.conf</b></span></span></blockquote>
</div>
<div style="background-color: white; font-family: Montserrat, sans-serif; font-size: 15px; line-height: 22.5px; outline: 0px; transition: all 0.3s ease;">
<span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span><div style="outline: 0px;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;">When we do so, we will see a file like that displayed below. If we scroll down this file a bit, we will see a section that I have highlighted labeled "add proxy list here...".</span><br style="outline: 0px; transition: all 0.3s ease;" /><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span></div>
<div style="outline: 0px;">
<div class="separator" style="clear: both; outline: 0px; text-align: center; transition: all 0.3s ease;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJXyPKbNqXMHY_PR1qv0RPLBMug_-7WhEb3mhxrxdR9Xl9AVzCUdAKkXKmvBlEYPPH04IFTV2yrVYj66LwybxsAq49IOAh4HxUB3XQDMfS4jOFNihzGPQEZS6cIbvLgVaqDN1kF3vDkG4c/s1600/proxy_chaining_picateshackz5.jpg" imageanchor="1" style="clear: none !important; float: none !important; margin-left: 1em; margin-right: 1em; outline: 0px; text-decoration: none; transition: all 0.3s ease;"><span style="color: black;"><img border="0" height="428" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJXyPKbNqXMHY_PR1qv0RPLBMug_-7WhEb3mhxrxdR9Xl9AVzCUdAKkXKmvBlEYPPH04IFTV2yrVYj66LwybxsAq49IOAh4HxUB3XQDMfS4jOFNihzGPQEZS6cIbvLgVaqDN1kF3vDkG4c/s640/proxy_chaining_picateshackz5.jpg" style="border: 0px; box-sizing: border-box !important; height: auto !important; max-width: 100%; outline: 0px; position: relative; transition: all 0.3s ease;" width="640" /></span></a></div>
</div>
<div style="outline: 0px;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" />To get proxychains to use intermediary proxies, we simply need to add the IP addresses of the proxies we want to use here. It's important to note that proxychains defaults to use Tor.<br style="outline: 0px; transition: all 0.3s ease;" /><br style="outline: 0px; transition: all 0.3s ease;" />Notice the last line in the screenshot above. It directs proxychains to send the traffic first through our host at 127.0.0.1 on port 9050 (the default Tor configuration). If you are using Tor, leaves this as it is. If you are not using Tor, you will need to comment out this line.</span></span></div>
<div style="outline: 0px;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span><h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;">Step 4: Let's Test It</span></span></h3>
</div>
<div style="outline: 0px;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span></div>
<div style="outline: 0px;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;">Now that we have put a proxy between us and any traffic we send, let's test it out. In this case, I am simply going to do an nmap scan mytestsite.com anonymously by sending the scan through a proxy. The command would be as follows:</span></span></div>
<div style="outline: 0px;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span><blockquote class="tr_bq" style="border-left-color: rgb(30, 135, 240); border-left-style: solid; border-left-width: 5px; font-style: italic; margin-left: 0px; outline: 0px; padding: 10px 15px; transition: all 0.3s ease;">
<span style="color: black;"> <span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><b style="outline: 0px; transition: all 0.3s ease;">root@kali:~# proxychains nmap -sS 8.26.65.101</b></span></span></blockquote>
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span><div class="separator" style="clear: both; outline: 0px; text-align: center; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEAUJvSKF5c-JM_fJGvxkfYtD72X6DPZQDtf6jtEMfYla2dMLqkZJE9qXsGAvZxuk6kWsip0tULKH4BN2gWlRkcrAzx4BVC15SSgH2xdZQfUk4tp9ngoppUi65y07FjY4aKPUo_n0fbFqN/s1600/proxy_chaining_picateshackz3.jpg" imageanchor="1" style="clear: none !important; float: none !important; margin-left: 1em; margin-right: 1em; outline: 0px; text-decoration: none; transition: all 0.3s ease;"><span style="color: black;"><img border="0" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEAUJvSKF5c-JM_fJGvxkfYtD72X6DPZQDtf6jtEMfYla2dMLqkZJE9qXsGAvZxuk6kWsip0tULKH4BN2gWlRkcrAzx4BVC15SSgH2xdZQfUk4tp9ngoppUi65y07FjY4aKPUo_n0fbFqN/s640/proxy_chaining_picateshackz3.jpg" style="border: 0px; box-sizing: border-box !important; height: auto !important; max-width: 100%; outline: 0px; position: relative; transition: all 0.3s ease;" width="640" /></span></a></span></div>
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" />As you can see in the screenshot above, I have successfully scanned <br style="outline: 0px; transition: all 0.3s ease;" />mytestsite.com through my chosen proxy and returned the results back to me. In this way, it appears that my proxy scanned mytestsite.com and not my IP address.</span></span><h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;">Step 5: Add More Proxies</span></span></h3>
</div>
<div style="outline: 0px;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span></div>
<div style="outline: 0px;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;">First, let's add some more proxies to our list.  </span><br style="outline: 0px; transition: all 0.3s ease;" /><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;">Type the following command:</span></span></div>
<div style="outline: 0px;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span></div>
<div style="outline: 0px;">
<blockquote class="tr_bq" style="border-left-color: rgb(30, 135, 240); border-left-style: solid; border-left-width: 5px; font-style: italic; margin-left: 0px; outline: 0px; padding: 10px 15px; transition: all 0.3s ease;">
<span style="color: black;"> <span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><b style="outline: 0px; transition: all 0.3s ease;">root@kali:~# sudo gedit /etc/proxychains.conf</b></span></span></blockquote>
</div>
<div style="outline: 0px;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span></div>
<div style="outline: 0px;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;">Then add more proxy IPs like I've done below.</span><br style="outline: 0px; transition: all 0.3s ease;" /><br style="outline: 0px; transition: all 0.3s ease;" /><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"></span></span><div class="separator" style="clear: both; outline: 0px; text-align: center; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiV75gkpa79MyhsqNc4UzGlIHRhYkG9mtR7tmKxXQM3acC_YiTRw62ciTGeGJ61yQeToW0SwgfniCjTVtPlHgGPthOoCy2KXPDqoWYpxMcKjCgYNw6Iuvd8jX4ItynKo0yEMaDA3VLc4buw/s1600/proxy_chaining_picateshackz6.jpg" imageanchor="1" style="clear: none !important; float: none !important; margin-left: 1em; margin-right: 1em; outline: 0px; text-decoration: none; transition: all 0.3s ease;"><span style="color: black;"><img border="0" height="418" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiV75gkpa79MyhsqNc4UzGlIHRhYkG9mtR7tmKxXQM3acC_YiTRw62ciTGeGJ61yQeToW0SwgfniCjTVtPlHgGPthOoCy2KXPDqoWYpxMcKjCgYNw6Iuvd8jX4ItynKo0yEMaDA3VLc4buw/s640/proxy_chaining_picateshackz6.jpg" style="border: 0px; box-sizing: border-box !important; height: auto !important; max-width: 100%; outline: 0px; position: relative; transition: all 0.3s ease;" width="640" /></span></a></span></div>
</div>
<div style="outline: 0px;">
<span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></div>
<div style="outline: 0px;">
<h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;">Step 6: Proxychaining</span></span></h3>
</div>
<div style="outline: 0px;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span></div>
<div style="outline: 0px;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;">Now that we have multiple IPs in our proxychain.conf we can set up dynamic chaining. Dynamic chaining will enable us to run our traffic through every proxy on our list, and if one of the proxies is down or not responding, it will automatically go to the next proxy in the list without throwing an error.</span><br style="outline: 0px; transition: all 0.3s ease;" /><br style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;" /><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;">To do so, let's first open the proxychains configuration file again.</span></span></div>
<div style="outline: 0px;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span><blockquote class="tr_bq" style="border-left-color: rgb(30, 135, 240); border-left-style: solid; border-left-width: 5px; font-style: italic; margin-left: 0px; outline: 0px; padding: 10px 15px; transition: all 0.3s ease;">
<span style="color: black;"> <span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><b style="outline: 0px; transition: all 0.3s ease;">root@kali:~# sudo gedit /etc/proxychains.conf</b></span></span></blockquote>
</div>
<div style="outline: 0px;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;"><br style="outline: 0px; transition: all 0.3s ease;" />With this file open, uncomment out the "dynamic_chains" line. This will enable dynamic chaining of our proxies allowing for greater anonymity and trouble-free hacking.</span></span></div>
<div style="outline: 0px;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span><div class="separator" style="clear: both; outline: 0px; text-align: center; transition: all 0.3s ease;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmicwdb8__ox0lU4_0A_rYEsnnJZp_tgVIrmspFEBw1sGol2MVR45U8JDD-V6LRGhZGiobpP_8Md4pxdEW9C6EnhB8m6DoIH1xE45N2ILNYV00PPMZ0CRMhxRUrz9WwiJ8SU_i4i-RTIK1/s1600/proxy_chaining_picateshackz7.jpg" imageanchor="1" style="clear: none !important; float: none !important; margin-left: 1em; margin-right: 1em; outline: 0px; text-decoration: none; transition: all 0.3s ease;"><span style="color: black;"><img border="0" height="426" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgmicwdb8__ox0lU4_0A_rYEsnnJZp_tgVIrmspFEBw1sGol2MVR45U8JDD-V6LRGhZGiobpP_8Md4pxdEW9C6EnhB8m6DoIH1xE45N2ILNYV00PPMZ0CRMhxRUrz9WwiJ8SU_i4i-RTIK1/s640/proxy_chaining_picateshackz7.jpg" style="border: 0px; box-sizing: border-box !important; height: auto !important; max-width: 100%; outline: 0px; position: relative; transition: all 0.3s ease;" width="640" /></span></a></span></div>
</div>
<div style="outline: 0px;">
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span><h3 style="margin: 0px 0px 15px; outline: 0px; padding: 0px; position: relative;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><span style="color: black;">Step 7: Random Chaining</span></span></h3>
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px;"><br style="outline: 0px; transition: all 0.3s ease;" />Finally, we can also use "random chaining". With this option, proxychains will randomly choose IP addresses from our list and use them for creating our proxychain. This means that each time we use proxychains, the chain of proxy will look different to the target, making it harder to track our traffic from its source.<br style="outline: 0px; transition: all 0.3s ease;" /><br style="outline: 0px; transition: all 0.3s ease;" />To do so, open the /etc/proxychains.conf file and comment out "dynamic chains" and uncomment "random chain". Since we can only use one of these options at a time, make certain that you comment out the other options in this section before using proxychains.<br style="outline: 0px; transition: all 0.3s ease;" /><br style="outline: 0px; transition: all 0.3s ease;" />In addition; you may want to uncomment the line with "chain_len". This will determine how many of the IP addresses in your chain will be used in creating your random proxy chain.</span><br style="outline: 0px; transition: all 0.3s ease;" /><span style="font-family: Verdana, sans-serif; outline: 0px;"><br style="outline: 0px; transition: all 0.3s ease;" /></span></span><div class="separator" style="clear: both; outline: 0px; text-align: center;">
<span style="font-family: Verdana, sans-serif; outline: 0px; transition: all 0.3s ease;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioiNUEKSrSKlOs6T1mLMvmhjLTlZzjARx5CmBNwW2rEE7IdEUByP7pelYdxTI8v9fX_6NclAcCcZam3og5A2fPn5HFyyo5_PAlfNiJ0xs7mhQS65Wbxlzw36SZhqPTOWW1avnnQpTtkC9E/s1600/proxy_chaining_picateshackz8.jpg" imageanchor="1" style="clear: none !important; float: none !important; margin-left: 1em; margin-right: 1em; outline: 0px; text-decoration: none; transition: all 0.3s ease;"><span style="color: black;"><img border="0" height="414" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEioiNUEKSrSKlOs6T1mLMvmhjLTlZzjARx5CmBNwW2rEE7IdEUByP7pelYdxTI8v9fX_6NclAcCcZam3og5A2fPn5HFyyo5_PAlfNiJ0xs7mhQS65Wbxlzw36SZhqPTOWW1avnnQpTtkC9E/s640/proxy_chaining_picateshackz8.jpg" style="border: 0px; box-sizing: border-box !important; height: auto !important; max-width: 100%; outline: 0px; position: relative; transition: all 0.3s ease;" width="640" /></span></a></span></div>
<span style="color: black;"><span style="font-family: Verdana, sans-serif; outline: 0px;"><br style="outline: 0px; transition: all 0.3s ease;" />Now that you know how to use proxychains, you can do your hacking with relative anonymity. I say relative, because there is no surefire way to remain anonymous with the NSA spying on all our activity. All we can do is make detection MUCH harder, and proxychains can help do this for us.</span><br style="outline: 0px; transition: all 0.3s ease;" /><span style="font-family: Verdana, sans-serif; outline: 0px;"><br style="outline: 0px; transition: all 0.3s ease;" /></span><span style="font-family: Verdana, sans-serif; outline: 0px;"><br style="outline: 0px; transition: all 0.3s ease;" /></span><span style="font-family: Verdana, sans-serif; outline: 0px;"><br style="outline: 0px; transition: all 0.3s ease;" /></span><span style="font-family: Verdana, sans-serif; outline: 0px;">Recommended article: </span><span style="font-family: Verdana, sans-serif; outline: 0px;"><a href="http://picateshackz.com/2015/05/how-to-setup-free-vpn-service-on-kali.html" style="outline: 0px; text-decoration: none;">How To Setup Free VPN Service On Kali Linux For Anonymity</a></span></span></div>
</div>
</div>

Kali Linux Tutorial: Setting Up ProxyChains + Tor For Anonymity And Security

Hack anonymously is one of the important aspect of Information Security, if you want to conduct penetration testing on a remote computer ...