First we need to know the target's IP. There are lots of ways of doing this, which I'm not going to go into here. After all, I usually do this on ppl who I know and who give me their IPs (I'm a white hat hacker not some pathetic little script kiddie cracker). Once you know their' IP, open a DOS prompt. In Windows XP that's
start->programs->accesories->command prompt
Now type the following into the command prompt:
netstat [target's IP] -a and press
What this does is look at all open ports on the target system. This means that you'll be shown a list of all the open ports. We aren't interested in the local ports, so look straight at the second column and for a port number that looks promising. If the target has a trojan on their system, a port number of 49000-63000 roughly should be about right. If not, look for Kazaa or WinMX or whatever's open port.
Now open another command prompt and type:
ftp
open [target's IP] [Port number]
You've now got a connection to their machine! From here you can browse around and modify their file system using DOS. These commands are especially useful when doing this:
CD REMOTE-DIRECTORY Change Directory on a remote system. Type this and the directory you want to change to. you probably need to understand how the Windows filesystem is organised for this to work.
DIR Display directory. Shows all the files and folders in this directory.
PWD Prints the name of the current remote directory.
CD .. Go up one level in directory.
