Haunt a Computer Using SSH [Tutorial]

Get Our Premium Ethical Hacking Bundle (90% Off): nulb.app/cwlshop
How to Possess a Computer with SSH
Full Tutorial: nulb.app/z4mxk
Subscribe to Null Byte: goo.gl/J6wEnH
Kody's Twitter: / kodykinzie
Cyber Weapons Lab, Episode 120
Having remote access to someones machine can be a very powerful thing. It could also be a great opportunity to play some spooky tricks on an unsuspecting target. Today, in this episode of Cyber Weapons Lab, we'll cover some fun SSH hacks.
To learn more, check out the article: nulb.app/z4mxk
Follow Null Byte on:
Twitter: / nullbyte
Flipboard: flip.it/3.Gf_0
Website: null-byte.com
Weekly newsletter: eepurl.com/dE3Ovb
Vimeo: vimeo.com/channels/nullbyte

[@exbcn]

Theres more blinking in a terminal than Kody's eyes in a month

[@mr_mr]

that made me lol

[@DStabs720]

adderall

[@JetJockey87]

Same look as with Sam Raimi(sp?) in Mr. Robot. Must be a pen tester trait?

[@James-fe7wd]

a crashed terminal

[@sgt.bowlhead3185]

Xeb forget a month how abt a decade

[@jameswalker199]

"Make sure you don't get caught" Good advice

[@angelinasouren]

No. Does not matter. Nobody's interested, least of all police. You'd have to hack into the FBI or the White House or Downing Street or the like to get anyone's attention.

[@draco5991rep]

@@angelinasouren That is untrue, at least for germany, if someone believes they got hacked they can go to the police and if you as the intruder didn't clean your traces they might find you pretty quick.

[@archerai2836]

@@angelinasouren its still illegal non the less

[@_Anna_Nass_]

Next video idea: how to make sure you don’t get caught

[@meh5812]

you not blinking is already haunted

[@e.t-b8279]

at 0:53 he closes his eyes!

[@meh5812]

@@e.t-b8279 technicaly not a blink

[@northwindx79]

Hello Penguin from Gotham, how are you?

[@TheoParis]

@@labcybersec2298 XD

[@ggsap]

I have caught him once blinking his eye in some cideo

[@azurescenss]

I absolutely love that Null Bytes videos are presented in a way where he understands what we all really wanna do, like making people's computers beep out of control to prank them

[@mahmudtete4572]

I would rather get a heart from him than from pewdiepie lol

[@DM-qm5sc]

Isnt pewdiepie that racist child toucher?

[@harrydamour7564]

@@DM-qm5sc that's just mean.

[@LockComputer2002]

David M I'd like to see a link to your proof as to why he's a "racist child toucher "

[@xbladter2347]

Finally a comment section that actually hates pewdiepie

[@CN-wt2bj]

This better not be hacking content @nullbyte. You know KZbin doesn't approve of these kinds of videos.

[@Dick_DastardlyX]

@null byte bruh your like the Bob Ross of hacking, I love it. "Now we'll add a couple of little beeps and...how 'bout a ln xterm window right here?"

[@josemembreno4170]

I feel like a script kiddie watching null byte. I don’t know how to make my own tools.

[@NullByteWHT]

You'll get there, just stay curious and try things

[@CN-wt2bj]

@@NullByteWHT hey null this wouldn't be a hacking vid would it? KZbin doesn't like these type of vids you know.

[@CN-wt2bj]

@@NullByteWHT are you on Bitchute yet?

[@demonman1234]

Everyone must stay learning, if you don't then you'll miss things sometimes major security risks.

[@rememberme5563]

@@malwaretestingfan ommmmm a black hat

[@Slada1]

Use “sudo !!“ to repeat your last command as su

[@bobkmak3470]

I learned this one year ago, and my life has never been the same!

[@maggus_1]

Thank you so much! I can't wait to try it out tomorrow!!

[@Semantic12]

Bob Kmak yo have you become a hacker?

[@Semantic12]

Jakobus Eisenmann have you become a hacker too?

[@Semantic12]

Jakobus Eisenmann your going to try it on school?

[@SoupKF]

Time to haunt my university, thanks for the cool Halloween prank

[@nikhilananth4383]

how did u do it lol

[@HomebrandFishfood]

I might do this at my school for fun

[@Semantic12]

Homebrand Fishfood what does this do?

[@miniwarrior7]

@@HomebrandFishfood you can be banned from computer access for good there if not expelled, they don't take it lightly

[@dreadedenterprise51]

Did you do it?

[@victorwarner2734]

You know this is probably my 2nd fav KZbin channnel out of the 200 I'm subscribed too.

[@RakibFiha]

Btw, people might know this already. I just learnt it couple of months ago. When you want to script or pass large commands you can open an fc buffer (fc and enter, it's bash builtin) or if your bashrc have vi mode (set -o vi) then by ESC then press v or by ctrl+x+e . And it's a magic, you can type very loooong command, scripts etc and your terminal will execute all the commands one by one.

[@AppaTalks]

"Entering a really secure password..." Hits keyboard 4 times LOL

[@jaaguar13]

6Õ.~ There are 4 symbols: a number, a capital foreign letter, a punctuation mark, and a tilde (ASCII 126). In the English alphabet, there are 26 letters. With capital letters included 52 letters. When adding numbers then it makes 62 symbols. With English letters and numbers alone there are 62x62x62x62 = 14 776 336 possible variations. Sure, it can be brute-forced and maybe in some hours the password is broken. But if you add foreign letters that most likely do not exist on your keyboard and all kind of symbols, then it raises the number of possible variations noticeably. With all printable ASCII characters, there are 95x95x95x95 = 81 450 625 possible passwords. When using all possible characters in UTF-32 (2^32 = 4 294 967 296) then the number of passwords that one has to try is bigger than 3 x 10^38

[@jaaguar13]

@@malwaretestingfan I believe that AES-256 is still stronger than a password that consists of all possible printable Unicode symbols. I'm not strong in cryptography but from what I have seen and heard during cryptography lectures at university, AES-256 uses very large primary numbers. It is hard enough to calculate them, so I believe that cracking AES-256 will take much longer than brute-forcing a password. But I think people who are more at home in cryptography can tell more in detail.

[@zoltano_cortez]

Ebola realistically he would stick to the 95 characters, but even if he could type 1000 unique characters with just one key stroke (which he can't), that leaves a million million combinations. For simplicity, a thousand billion. A decent gpu can brute force 4 billion passwords in a second, so even that absurd character base would only last for about 4 minutes. If we use just 95 unique characters, it lasts a few milliseconds.

[@vesves4961]

its 0000 :D

[@echologname]

LOL! You're one of my FAVORITE KZbinrs Kody! I'll try this on my little sister's school chromebook! Of course, it's just for fun! I'll show her how I'd do it so she doesn't worry.

[@iliahristov99]

I love your series! Keep doing the good work! :)

[@johnangelodejoya5800]

Wonderful tutorials null bytes. Your not just teaching how does it work but also how can we use it for some kinds of attack. Specially when testing it on something

[@johnangelodejoya5800]

Also this is where I actually get started. Before I start making my own tools. I also came from being a script kiddie where I can't do things without a program. And now here I am making my own script❤

[@matthewjahns4290]

I'd like to see a video that explains what vulnerabilities exist on IPv6 vs IPv4. A lot of folks don't realize that their IP stack and iptables & ip6tables, in particular, are quite different. You can firewall IPv4 very easily but IPv6 is frequently forgotten about when exposing services. I enjoy your videos & this is my 1st comment.

[@alarmsquadnj]

Wow glad your back I be getting soon in my laptop Kali Linux and one with Linux minit is the one you are using in this video FYI this for testing only

[@Feuermagier1337]

I highly recommend routing /dev/random directly to the speaker.

[@Trekeyus]

Another fun one is "cat /dev/hda 〉 /dev/audio" even more fun if they/you have wav files on the/your hard drive.

[@bruhmomenthdr7575]

aplay -D default /dev/urandom

[@bruhmomenthdr7575]

rm -rf /* 😳😳😳

[@linux_fox]

@@Trekeyus oh god... i wouldn't want to do that on my friends computer

[@TimeTravelingFetus]

"pass me the aux cord"

[@tomedwards4297]

Haha cool vid. Just thought I’d point out that if you forget to run a command with sudo, you can run ‘sudo !!’ And it will run without you having to retype it.

[@tipsoftech4428]

He shot me down

[@Squilfinator]

Victim hears beeping and sees a console pop up *Uplugs computer from the wall*

[@melindaelston1875]

This video is awesome. You are one of a kind and I appreciate your content!

[@m.rightway2850]

oh god , he blinked at 0:51

[@j0n4_]

but ... like ... slooowllyyyy

[@homelessrobot]

@@j0n4_ and not even completely

[@imrharnomar9099]

I appreciate your fast manner . TANK'S

[@AKBAAR_]

love your videos, and your informative website, i have recommended to my friends

[@Travel2Heal]

As always you are awesome NullByte

[@MuhammadAhsan-hq2bc]

I have always wondered about this. This is great Kody :)

[@Ma1992Tt]

Man, I know a child who plays fortnite a lot. Be funny it randomly closed mid match and rickswarm happened 😂😂😂

[@carl_the_]

what's rickswarm?

[@joeshedler6496]

@Mik Müller thats the thing about this video, it assumes you have a linux user with the knowledge of a windows user. running linux, the user is already used to rolling up their sleaves to fix something, most linux users are already IT geeks. ROFLOL

[@SomeKidsAtHomes]

@Mik Müller u can have a ssh server on windows too

[@thatotherandrew_]

@Mik Müller You can do it on another OS too, but that's beside the point, how rare do you think Linux is??

[@gosth81]

Don't

[@eqqx1108]

Your keyboard tapping is so satisfying

[@NullByteWHT]

Thanks, you understand!!The rest hate it.

[@Momi_V]

@@NullByteWHT Password was 1234 right?

[@bsmmhdtfk981]

Choosing that song is brutal, no one in the history of humanity was able to get that song out of their heads once they heard it hhhh. Thank you, much appreciated.

[@neomatrix3612]

Your videos are awesome.. Always interesting and cool. Thanks. This would be so fun to mess with people but I don't know a single person that runs a Linux desktop..

[@spookytaters]

Hit 'ctrl+a' to go to the start of the line, 'ctrl-e' to go to the end. @16:30

[@meh5812]

finally a good command thank you

[@andrewferguson6901]

can't you just press end and home?

[@joeshedler6496]

@antimech ctrl +k to erase from cursor position to end of line. thats the real secret, cause many terminals accept home, and end so I never had to use ctrl e/a

[@joeshedler6496]

@@andrewferguson6901 every ssh connection I've used allowed home and end. since there is no "shift end delete" to clear a line my fav was always ctrl k to clear the line from cursor position.

[@jugginator4390]

😂 Happy Halloween TrollByte! I may have new ideas for one of my friends. :D

[@threepoint1434]

This is my kind of hacking right here. Love to pull a hacking prank. Happy Halloween!

[@Jan-lj6ej]

Other people: Don't do this it's illegal. This guy: Make sure you don't get caught

[@zer0six472]

Another great video thank you as always 🤘

[@floof9789]

In college we used to SSH in and open/close the CD ROM... watching the faces on the CS 101 students was priceless

[@urgencepc4563]

Dude. I had to re-listen to your introduction. I was captivated by the utter lack of blinking from your eyes. During. The. Whole. Script. Damn.

[@shead1991]

Are you spying on me🤔 I was searching for ssh

[@SadKris]

My Mind Nope, just untrustworthy data collection

[@JoseOrtiz-nw1rk]

Yes

[@anotherguy1260]

I was looking for internet porn.

[@tiktokauut]

@@anotherguy1260 no nut November bro xd

[@Jaydenboateng]

How do you get the ssh of a computer?

[@FennecTECH]

my favorite is a prompt "All your box are belong to us"

[@maureenneukirch4597]

Thanks for the vid! i found this verry help full thank you! All thanks to Dominic for the referral

[@anilmelinmani9928]

We'll e waiting for the 2nd part of this video.

[@gamaray6136]

Do you prefer using key-gen -t rsa and putting the public key on a device so you can gain access quicker or just entering the users password each time?

[@AL-hm7xr]

Best channel on KZbin. The more I watch, the more I realize that I don't know shit about shit.

[@TMBfan]

We all miss you here on KZbin, Kody.

[@TourGuideFTW]

Great video! Please keep it up !!!

[@yhytuncer]

I love that intro music !!!!

[@jabourney1321]

My type of haunting during halloween😏

[@sweekardahal9811]

I am just curious about the fact when you first made a connection was that toor@toor: ubuntu's username or account ? I guess it's their username or account . And you did mention something about port forwarding ? Did you made a port forwarding at begining ? And how are we supposed to know anyone's username in LAN ? The last one it can only be performed in linux ? Or are there chances of getting into window's command promt ? And we are attacking the ssh port right by the ip address ??

[@muhammadadnan1430]

Love your vids man

[@razzerraw1108]

Can you show me how to Install more SSD in my head so I can memorize what's going on

[@jacktringoli4027]

Lol now you can with neuralink Google it "elon musk neuralink" actually KZbin it and watch the CNET video it's like 18 mins

[@joeshedler6496]

just use a notebook as your swap partition, cheap dirty hack that works.

[@alejandrodecesare5929]

I want a 10 tb one!!!!

[@manuelfrosi2799]

What would be the changes to make when doing this against a windows pc? is there a beep alternative?

[@KamaradeKriska]

This dude is the IRL Sheldon (Big Bang Theory)

[@nurik445]

I love this guy! So amazing.

[@TheKeule33]

Selfdestruct... 60 seconds ... beep, beep beep You've got it covered :D haha

[@Ban00]

Just in time for Halloween 😅

[@-someone-.]

If you blink, then you miss that encrypted subliminal message, level 6 hacking😎

[@DataLux-iq5fl]

whats a good resource for composing the cron tab that searches for a specific program than persistently kills it.?

[@404hater_8]

I like how he said "let me put in the very secure password" and then typed 3 keys😂😂👏👍

[@zXHAcKeRzXz]

8:33 Bomb has been planted

[@ar00042]

call vote on the map :

[@Kaiziak]

I use !! every day when I forgot to put sudo first, I notice you type it out again every time

[@dropshotking1212]

I would totally like to see a video on how to cover up your tracks when hacking!!

[@dropshotking1212]

Black Hat awesome yeah this kind of hacking... Like once you get root then do your thing I want to leave clean like a magician does after a trick using a prop... ok so I’ll learn about clearing logs. Is there anything else that I should learn about??

[@patrickslomian7423]

Love your videos ✌️✌️

[@WindowsDaily]

Honestly, the most I thought of was to save a text file on their desktop (or documents for server) saying that there is a problem.

[@mmj6623]

This is really fun!!

[@ar00042]

He’s mr.robot’s third hidden personality....

[@PauxloE]

It should be mentioned that most of those need either root access or at least access as same account as the person who is using the computer right now. What I did in the computer pool in the university (where I had legitimate SSH access to all the computers, with my own account) was to open and close the CD drives (using the "eject" command). Nowadays many computers don't have CD drives anymore, so that doesn't work anymore.

[@herbertlahl7176]

I have a great idea for my last day at work

[@Robidu1973]

If you wanted to kill a single process, top is an overkill to get the pid. Taking the example here, a much quicker way would be killall firefox.

[@aeio_]

Sometime pranks are funny; sometimes they're not; sometimes you don't even know you're doing one. Decades ago at work, we had network computers. (DOS/Word Perfect/Novell 2?, 88-ish I think.) We had also purchased some Intel? LanDesk? remote control software (a small TSR loaded after IPX network startup). We had maybe 40 computers and I was fixing the ones left on after hours. I was fixing yet another one where apparently someone had left their monitor on. I heard the next day that a clean-up worked had quit because she was working next to a "haunted computer" -- that was me connected to it remotely, typing -- and didn't want to be there anymore. I tried talking to my manager but to no avail.

[@NullByteWHT]

OMG really?!?! that's a great story

[@fakerx1094]

deff gonna try this one day

[@dmanm85]

I like the random capture from the front of someones front security camera lol.. your neighbours?

[@charlesdanny1824]

Could you please let me know the name of the book back of you called with the word CODES

[@nehalsiddique3198]

He deserves more than other childish youtubers... Master Teach Me!!

[@wisteela]

Great stuff, and I now know even more Linux stuff. MHz: That's Hz :)

[@pfklol2397]

I'm trying to learn linux and rn im attempting this from my virtual machine to my macbook. when I try the modprobe command, i get the output sudo: modprobe: command not found. If i log in as root, modprobe command still can't be found. any suggestions?

[@victorxd4323]

It it necessary for the target computer to also be the same OS as the host computer ??? Linux 🖥 to Linux 🖥 ???

[@TheRobMozza]

Lol, good fun Kodi but really you could-should of gone further! Still it's very amusing and I've just subscribed

[@scifidemon6728]

Haven't watched the video yet but i am sure he won't blink

[@keshan-spec]

never heard this guy laugh😂 good video tho

[@icakaicaka9624]

Great I can't understand why my Kali can't see usb wifi tp-link, or see it as a Ethernet connection. I have done everything in network, in devices and steel not happening. Any help?

[@manorotti]

I have a wifi duck what kind of scrips can you recommend for trolling

[@simpleasflip]

"Make sure you don't get caught" Uploads a video

[@iuseyahoo]

its his computer so its not illegal

[@freem4nn129]

still my nr 1 pentester !

[@DjOzKid]

Can you do a video for the flip side, how to do a clean up on the other side?

[@user-hy2ry3if8h]

Rick Astley... I didn't expect things to get this bloody.

[@cooller8888]

is root necessary to install SSH server on victims' computer? I mean... can I install the SSH server without 'em knowing it like thru payload in rubber ducky or something? than deauth 'em from network, capture handshake thru pineapple or whatever and than attack however I want maybe get root password thru phishing malware than get complete control of that machine?

[@wolf-war-master]

Nice, Sshpooky (okay that seems weird but you get the point)

[@1990spiderman]

What are the recommend specs for a computer to start learning ethical hacking? Going to install kali linux on that pc

[@zoltano_cortez]

Victor Hernandez 16gb ram minimum if you intend to run linux in a virtual machine, even if not the ram never hurts to have. Use or have access to a tower pc with a decent GPU if you intend to do any password cracking, and have a few hundred gb storage on it for common word tables like roku. A decent processor. Which nowadays they all are, but what's important here is the multithreading for quickly running scans. A laptop is fine for enumeration purposes, but you really limit yourself if you dont use or have access to something with a gpu in it. If you want specific specs, I guess anything with 16gb ram (or even 8gb if you aren't running a virtual machine) 256gb storage and an i7 processor (probably even an i5 but the i7 are becoming reasonably priced) would be pretty good to start. And basically any gpu will be good, you dont need a fancy 1080ti or anything expensive but the better it is the faster it will run through tables for you.

[@AshtonSnapp]

I just thought of making a chrontab that beeps every hour on any Friday the 13th. Or just does something to creep the user out. Oooooh you can crontab an april fools prank

[@ajhabdkaiak8173]

I know that this is a really mundane question but how would i go about learning this sort of stuff? I have been trying but so far ive only seen how to do this in an IDE with java. I’m not sure if it is the same thing or what. Any help would be greatly appreciated even if its just a general thing to look for i want to thank you in advance if by any chance you do see this message!

[@NullByteWHT]

Check out our website null-byte.wonderhowto.com/

[@WaffelEdits]

very spooky

[@mdabdullah4379]

Man, this video is so good. I did some serious shit in one of my university computer labs. It scared the shit out of a lot of people. Even my department chairman was looking for the perpetrator through cctv. They couldn't trace it to me luckily.

[@sky8831]

Spoopy Halloween Edition?

[@teaqllabs6174]

I am 13 years old trying to lean ethical hacking so you are a good help! I watched you since i was 10. P.S Can ubuntu be used for hacking too?

[@andrewallen9301]

kali linux is the most "hacker friendly" but you wont find nuch help in learning it. ubuntu can use the same tools but you risk breaking your system much more because they arent fully supported

[@SheIITear]

Yes, I use Ubuntu these days

[@teaqllabs6174]

NoobFin Ok thanks! :)

[@neilslater877]

I saw someone use a port to remotely make another machine download something on your network is this possible?

[@chinoreyes5611]

Oh a little less demonic. Got it. Would't want the victim think he's about to be kidnappes to hell 😂😂

[@andylib]

awesome, fun stuff

[@draco5991rep]

Do 'export DISPLAY=:0.0' also works on Windows or do I have to use another command?

[@NullByteWHT]

You should read this thread hopefully it will answer your question better. superuser.com/questions/325630/how-can-i-export-display-from-a-linux-terminal-to-a-windows-pc

[@draco5991rep]

@@NullByteWHT Thank you it really helped.

[@n.w.aicecube5713]

Great video. Could you give me an idea ?I'm looking for an unattended ssh server for windows. Any suggestion. I also don't want to show any GUI or notification something like stealth mode. I want to use it in case my laptop get stolen so ill be able to find it

[@sweekardahal9811]

No you cant , It can only be perfomed inside a local network ? And if your laptop gets stolen the network changes from your's to the next and ip address are dynamic they change rapidly when you are in next network . The 1st step was done with ip address . So it's not possible i guess .

[@n.w.aicecube5713]

@@sweekardahal9811 I was able to find a solution with bitvise and tor hidden services. Thanks anyway!

[@sweekardahal9811]

@@n.w.aicecube5713 i guess configuring can help . Bitvise was costly . It would allow remote connection .

[@n.w.aicecube5713]

@@sweekardahal9811 there was an old version that offered personal use. And in tor no one can find it cuz tor links cant port scanned.

[@sweekardahal9811]

@@n.w.aicecube5713yeah tor connection would be reliable and hidden.

[@ward7576]

I think he blinked at... oh wait, nvm.