developing a crack

[cstrikehero]

Just how is it done. im good with minor file editing and system config.. but not this:confused:

[deathlord888]

no one will type out a 50 page fucking paper on this stuff because your lazy cunt can not google

http://www.woodmann.com/krobar/
http://www.aircrack-ng.org/doku.php?id=tutorial

[ishkur88]

How is a crack developed?

Think of it as a variant of the scientific method.

First of all, you have to look at what you're trying to exploit. Is it a website, desktop program, what? In what ways do you think it is vulnerable to attack?

If I were looking at a website wondering that, the first thing I would play around with the URL. There are some interesting things that you can do via the URL bar. Mainly looking for file inclusion exploits and SQL injection. Possibly XSS.

If you find anything interesting and possibly exploitable, do a few experiments to prove its attackability. That's what you'd call a PoC or Proof of Concept.

If this website that I'm using in my example looks like it might be running unfiltered SQL queries through the URL, I might try and do a simple SELECT statement to test and see if it really is not filtering anything at all.

If you get a the kind of result that you're looking for, such as the SELECT statement returning whatever it was that I was SELECTing, then that would be a positive result of my experiment and proves my hypothesis correct.

Now I can start working on a reproducible exploit. A simple scripting engine/framework that a lot of exploits are written in is Metasploit. Metasploit comes with a shitload of exploits and cracks already built into it, but those are worthless for what we're talking about.

I could take this simple SQL injection exploit and code up a payload in Metasploit that makes it really really simple and efficient to do anything I damn well please with it.

That's a very simple explanation of how to develop a crack or exploit, but it's really just a method of reasoning and building on your observations on an experiment.

[cstrikehero]

no one will type out a 50 page fucking paper on this stuff because your lazy cunt can not google

http://www.woodmann.com/krobar/
http://www.aircrack-ng.org/doku.php?id=tutorial

jeses.. u get pissed at everything don't you..

[deathlord888]

no i dont... i only get pissed at lazy posters and liars who try and act internet tough

[freetibet]

just do what ishkur said. You might need to learn SQL and other languages to do what he said, but your likely going to need to learn that anyway if you plan on cracking systems.

[Gr333d]

There's a good tut cd floating around called "Crackers Matrix"
Prob outdated by now, but got hold of a copy a few days ago....
Check it out...