seculabs ebook - isr stealer - cookie stealing

12

Upload: rifqi-multazam

Post on 30-Nov-2015

36 views

Category:

Documents


1 download

TRANSCRIPT

Page 1: Seculabs eBook - IsR Stealer - Cookie Stealing
Page 2: Seculabs eBook - IsR Stealer - Cookie Stealing

SECUGENIUS SECURITY SOLUTIONS

--------------------------------------------------------------------------------------

(A UNIT OF HARKSH TECHNOLOGIES PVT. LTD)

Company Profile:

Secugenius Security Solutions is a Student Entrepreneurial Company started by 2 Social Student

Entrepreneurs in 2010 with an aim to make our country Cyber Crime Free. We at SECUGENIUS

are headquartered at Ludhiana, the Manchester of Punjab. The main activities of Secugenius

Security Solutions are providing training in Information Security and various professional courses.

Secugenius Security Solutions is an organization which believes in inventing and implementing new

ideas to influence the technological minds of the youngsters

Looking at the number of Cyber Crimes since last many years, We at Secugenius Security

Solutions provides training on Ethical hacking & Cyber Security to students, IT Professionals, Bank

Employees, Police officials.

Secugenius conducts workshops in all parts of the country in various Colleges/institutions for the

benefit of the students & making them aware of the latest trends in technological era of the

Computer age. We believe in spreading knowledge to all the youngsters & growing minds of the

nation so that they could serve the nation with perfect skill-sets in the field of Cyber Crime

Investigation & Forensic Sciences

Secugenius provides various security solutions to its clients by securing their websites from cyber

attacks. We provide training to college students, graduates and professionals in various fields.

Education is delivered to students through two modes i.e. Regular mode and Distance mode which

are available as short term and long term courses.

In the workshops conducted by Secugenius, participants can claim to be trained by the highly

experienced & skilled corporate trainers from different parts of the nation. We believe in making

the base of students to be as strong as possible. All the modules have been designed in order to

provide students with specialized knowledge by specialized trainers.

This library was furnished, managed and funded by the Founders and Directors of Secugenius

Er. Harpreet Khattar & Er. Kshitij Adhlakha. The overall resource person for the content of

the series of this Digital Library is Er. Chetan Soni - Sr. Security Specialist, Secugenius Security

Solutions.

This Online Digital Library has been initiated as a free resource & permanent

resource on specialization basis for every student of Team Secugenius.

Page 3: Seculabs eBook - IsR Stealer - Cookie Stealing

ISR Stealer – Cookie Stealing

Product ID No: SG/ODL/13005

Founder & Director: Harpreet Khattar & Kshitij Adhlakha

Resource Person: Chetan Soni

Secugenius Security Solutions

SCO-13A, Model Town Extn, Near Krishna Mandir,

Ludhiana-141002, Punjab – India

[email protected], [email protected]

www.secugenius.com , www.seculabs.in

Page 4: Seculabs eBook - IsR Stealer - Cookie Stealing

What is Stealer? Stealers are basically used for stealing the saved cookies from the browser. It only steals the saved passwords from browsers e.g. IE, Chrome, Firefox, Opera and messengers. We see many other stealers like istealer or XYZ Stelaer but now a days ISR Stealer is very popular stealer which is an upgraded version of Istealer. Requirements:- 1. Domain (Free or Premium) 2. Hosting (Free or Premium) 3. Tools eg. ISR Stealer 4. ISR PHP Scripts

Page 5: Seculabs eBook - IsR Stealer - Cookie Stealing

Step 1 – Register a New domain and Hosting from any registrar or you can also use Free web hosting (000webhost.com , blackapplehost.com , 0fees.net)

Step 2 – To Create a New Subdomain , Click on “Sub domains”

Page 6: Seculabs eBook - IsR Stealer - Cookie Stealing

Step 3 – After clicking on subdomains, Create a new subdomain which looks like this, Top Level Domain - http://example.com Subdomain - http://abc.example.com

Step 4 – Now Next Step is to create a database and mysql username and password, For this click on “MySQL Database Wizard”.

Page 7: Seculabs eBook - IsR Stealer - Cookie Stealing

Step 5 – Now Create a database which looks like this, New Database = username_stealer

Step 6 – After Creating the database, Next step is to create a MySQL Username and MySQL Password as shown below, MySQL Username – username_stealer MySQL Password – chetansoni123

Page 8: Seculabs eBook - IsR Stealer - Cookie Stealing

Step 7 – Now Give full permissions to this user and add user into database by clicking on “All Privileges”.

Page 9: Seculabs eBook - IsR Stealer - Cookie Stealing

Step 8 – Next Step is to upload all php and css files

Config.php

Install.php

Index.php

Style_dark.css

Style_light.css

For Uploading files, you have to go for “File Manager” After Upload all files, Click on config.php and edit this file by clicking on “Code Editor”. $dbHost = "localhost"; // (1)MySQL host $dbUser = "username_stealer"; // (3)MySQL username $dbPass = "chetansoni123"; // (4)MySQL password $dbDatabase = "username_stealer"; // (2)MySQL database name

Step 9 – Set your Access Details too which is required when you want to show your logs. $adminuser = „admin‟; $adminpass = „admin‟; Then click on save and go back to main directory.

Page 10: Seculabs eBook - IsR Stealer - Cookie Stealing

Step 10 – Then go your Subdomain Link eg. http://www.abc.example.com/ and type this link to install cofiguration file. http://www.abc.example.com/install.php Then click on Install Button.

Step 11 – After installing , then go back to file manager and delete your install.php for security purposes(*).

Now Everything is done with hosting and domain.

Page 11: Seculabs eBook - IsR Stealer - Cookie Stealing

Step 12 – Now Login to your stealer account by clicking this link, http://www.abc.example.com/index.php

Step 13 – Go to your tool and click on ISR0.4.exe File. Open it and paste your subdomain link in URL Field E.g. http://www.abc.example.com/index.php

You can also select an icon by clicking on + button. After all settings, Click on Build Server, a new pop up comes and save that file (avast_setup.exe)

Page 12: Seculabs eBook - IsR Stealer - Cookie Stealing

Now Spread this file as according you like, You can give this server to your Facebook Friends, Through Emails, Through Youtube, Through IM Clients, Through Website/Blog, etc.

Note – This Server is Detectable by some

Antiviruses.

For Making undetectable, we use FUD

Crypters/protectors/binders etc.