How To: Cain & Abel

HackThisSite.org Staff or I can, in no way, be held responsible for the outcome of your actions caused by using this guide or program. This guide is for educational purposes only, and should not be used for illegal purposes.


Intro: Cain & Abel is a unique piece of software that is just top-notch when it comes to recovering (or stealing) passwords. It even has the ability to detect a wireless password key, if enough packets are captured while sniffing. If this is the case, you could be granted with free wireless internet, and even possibly a fine and jail time for theft of bandwidth.





Cain & Abel also has the ability to list nearly every stored password on the computer. If the auto-password is set on Internet Explorer, it will give a list of the usernames and passwords if selected. You can view passwords from the following locations, as long as they are stored in some way on your computer:




In this guide, I will mainly focus on how to steal passwords over a network, unless another section is requested. Note, that you are only able to use Cain if you are in the area of wireless range. If it is not wireless, you would have to directly be in the building, and plugged into their to use it.

Download To download Cain & Abel, hop on over to http://www.oxid.it/ and click on the \'Projects\' tab. A selection between the discontined 98/ME/Etc.. versions and the occasionally updated XP/Vista/Etc.. versions. Select the correct one to run on your machine. Install it, MAKING SURE TO INSTALL THE WINPCAP DRIVER WITH IT!

Sniffer & APR Poisoning Using the sniffer, you are able to find out any available networks in your location. First off, navigate your way over to the \'Sniffer\' tab.




Here, it will display any machines that are connected to the scanned network. Before you can scan for connected machines, the sniffer must be turned on. To do so, press the button to the right of the \'Open File\' folder icon.



To show the list of who is connected, press the blue \'+\' button near the top of the window.



This box should appear after you click the blue \'+\' button:



Normally, just clicking \'All Hosts in My Subnet\' should have you set. Should you be in a larger network, however (e.g., school, office, etc), you should find out the first 3 parts of your IP address. Fill those in the same in both the minimum and maximum boxes. However, on the minimum section\'s 4th box, put in a 0. On the maximum\'s 4th box, put in 255. Click scan... and... BAM! A list of all the machines connected to your network. If there is more than a single result, I suggest resolving the host name to find out the computer\'s name. Just right click on the machine and click \'Resolve Host\'. I highly recommend only doing one at a time, or it could crash your computer, as well as the network (only temporarily).

Head on over to the \'APR Poisoning\' tab, which can be selected inside the sniffer tab along the bottom of the window.







Again, click on the blue \'+\' button to add a connection to poison. This will open a window to select your target and router. Here, it is important to know the IP address of your router, otherwise this won\'t work. If you resolved all of your host names, just look for a brand that isn\'t likely an IPod/computer/printer/etc. I think the most common router would be the D-Link, as well as Sysco. After you have determined your router, select your target in the left box, and select the router in the right box, and click \'OK\'.



Congrats, you are now ready to steal a password, while being fairly unnoticed. To begin monitoring the information that is passed on from your target computer to the network, click on the \'APR Poisoning\' button, which looks like a biohazard symbol.




You will now begin to intercept any data that is transferred from your target to the network, although it will continue on its path after passing through your computer. To view any of the passwords that you have possibly logged, click on the \'Passwords\' tab, at the bottom of the \'Sniffer\' tab. The only downside to having APR Poisoning active is the speed. It slows down your connection speed by a huge amount, depending on the computer. On my laptop, I am able to intercept normal web browsing tasks with ease, at a barely noticeably decreased speed. What you really want to stay away from is APR Poisoning a machine that is participating in network gaming. This is because there is barely a point to have it running during this time, and it likely wouldn\'t have much of a connection left over because of all the data being processed at once. It\'s not that your computer\'s connection slows down, but your target\'s. If their connection is still active at a good level, but it is unable to go more than the speed of a snail, you may start raising suspicion. No worries if the person isn\'t very computer-oriented. They\'ll just call in to their internet provider and complain.


Well, I hope you liked my guide. Please post relevant comments and suggestions.





-Arrexelrnrn