Computer security & tutorials

WordPress WP-UserOnline plugin version 2.88.0 suffers from a persistent cross site scripting vulnerability

2022-09-24T07:42:00.000-07:00

# Exploit Title: Wordpress Plugin WP-UserOnline 2.88.0 - Stored Cross Site Scripting (XSS)

# Google Dork: inurl:/wp-content/plugins/wp-useronline/
# Date: 2022-08-24
# Exploit Author: UnD3sc0n0c1d0
# Vendor Homepage: https://github.com/lesterchan/wp-useronline
# Software Link: https://downloads.wordpress.org/plugin/wp-useronline.2.88.0.zip
# Category: Web Application
# Version: 2.88.0
# Tested on: Debian / WordPress 6.0.1
# CVE : CVE-2022-2941
# Reference: https://github.com/lesterchan/wp-useronline/commit/59c76b20e4e27489f93dee4ef1254d6204e08b3c

# 1. Technical Description:
The WP-UserOnline plugin for WordPress has multiple Stored Cross-Site Scripting vulnerabilities in versions 
up to, and including 2.88.0. This is due to the fact that all fields in the “Naming Conventions” section do 
not properly sanitize user input, nor escape it on output. This makes it possible for authenticated attackers, 
with administrative privileges, to inject JavaScript code into the setting that will execute whenever a user 
accesses the injected page.
  
# 2. Proof of Concept (PoC):
  a. Install and activate version 2.88.0 of the plugin.
  b. Go to the plugin options panel (http://[TARGET]/wp-admin/options-general.php?page=useronline-settings).
  c. Identify the "Naming Conventions" section and type your payload in any of the existing fields. You can use 
    the following payload:
    <script>alert(/XSS/)</script>
  d. Save the changes and now go to the Dashboard/WP-UserOnline option. As soon as you click here, your payload 
     will be executed.

Note: This change will be permanent until you modify the edited fields.

Overview of malicious code analysis process

2020-01-10T04:40:00.000-08:00

Code Analysis Process

Examine static properties of the Windows executable for initial assessment and triage.
Identify strings and API calls that highlight the program’s suspicious or malicious capabilities.
Perform automated and manual behavioral analysis to gather additional details.
If relevant, supplement our understanding by using memory forensics techniques.
Use a disassembler for static analysis to examine code that references risky strings and API calls.
Use a debugger for dynamic analysis to examine how risky strings and API calls are used.
If appropriate, unpack the code and its artifacts.
As your understanding of the code increases, add comments, labels; rename functions, variables.
Progress to examine the code that references or depends upon the code you’ve already analyzed.
Repeat steps 5-9 above as necessary (the order may vary) until analysis objectives are met.

Panama Papers – How Hackers Breached the Mossack Fonseca Firm

2016-04-22T05:03:00.001-07:00

Introduction

The Panama Papers are a huge trove of high confidential documents stolen from the computer systems of the Panamanian law firm Mossack Fonseca that was leaked online during recently.
It is considered the largest data leaks ever, the entire archive contains more than 11.5 Million files including 2.6 Terabytes of data related the activities of offshore shell companies used by the most powerful people around the world, including 72 current and former heads of state.

Figure 1 – Data Leaked (Source: Süddeutsche Zeitung)

To better scale the dimension of the data leaks, let’s compare the dimension of the stolen data to the size of archives disclosed after other
incidents occurred in the past.

Figure 2 – Panama Papers – Scale of the data leak (WEF)

Despite the great clamor on the case, most of the clients of the Mossack Fonseca weren’t breaking any law because the services offered by the firm are legal. The problem is that the service offered by the Panamanian firm could be abused by a part of its client to evade taxes and launder money.
Mossack Fonseca states it conforms to anti-money-laundering, it states it could not be condemned for failings by intermediate that consist of financial institutions, legislation companies and also accounting professionals.
Mossack Fonseca is the globe’s fourth greatest company of overseas solutions. Even more compared to fifty percent of the firms are signed up in British-administered tax obligation places, as well as in the UK itself.
The Panama Papers case is exposing the offshore activities of hundreds of politicians and public figures around the world, including Vladimir Putin and the Iceland’s Prime Minister David Gunnlaugsson.
At the time I was writing, despite the Vladimir Putin’s name does not appear in the leaked documents, $2 Billion route leads right to Vladimir Putin. The Russian head of state’s buddy, Sergei Roldugin, is the link between the Russian leader and the financial operations managed by the Panamanian firm.
The leaked documents also revealed the existence of an overseas mutual fund run by the dad of the British head of state David Cameron that allowed him to avoid paying tax obligation in Britain by employing a little military of Bahamas citizens to authorize its documents.
Amongst national leaders with overseas wide range are Nawaz Sharif, Pakistan’s head of state; Ayad Allawi, ex-interim head of state as well as previous vice-president of Iraq; Petro Poroshenko, head of state of Ukraine; Alaa Mubarak, child of Egypt’s previous head of state; as well as the head of state of Iceland, Sigmundur Davíð Gunnlaugsson.

Figure 3 – Panama Papers

Bloomberg first confirmed the authenticity of the leaked archive, citing the declaration of Ramon Fonseca, the co-founder of the Mossack Fonseca firm.
The Panama Papers documents were shared with the German newspaper Suddeutsche Zeitung by an anonymous source and the International Consortium of Investigative Journalists (ICIJ) that includes the Guardian as well as the BBC.
The journalists of the ICIJ have analyzed the documents in the huge archive for an entire year and now are sharing their findings.
The Panama Papers archive includes emails, bank records, and invoices belonging to the clients of the Mossack Fonseca firm.
Who is the anonymous source and how did it exfiltrate the data from the computers of the company?

According to Ramon Fonseca, the confidential documents had been obtained illegally by hackers; likely the data breach affected an e-mail server of the company last year.
The media agency El Espanol confirmed this hypothesis; Mossack Fonseca firm sent an email to its clients announcing that it was investigating the causes of the data breach and that it’s taking “all necessary steps to prevent it happening again.”
“This firm, considered the largest platform figureheads of Latin America and has a large portfolio of Spanish customers, said in a statement that it has opened an investigation after confirming that “unfortunately” has suffered an “attack on your server email.”” reported the El Espanol.
“Mossack Fonseca says it is taking “all necessary steps to prevent it happening again”; which has “reinforced” its security systems; and is working with “expert consultants” to determine the exact information they have accessed “unauthorized persons”. The firm, through its Director of Marketing and Sales, apologizes to its customers and offers an email to clarify any further questions.”
The ICIJ has identified more than 214,000 organizations for a total turnover of several billion dollars.

Who and how Hacked the Mossack Fonseca firm?

Let’s start trying to understand how hackers breached the firm. After the attack, security experts started testing the systems of the company trying to discover the presence of alleged flaws exploitable by attackers.
How is it possible that a company that keeps secrets of thousands of the world’s leading organizations and men have been hacked in the so simple way?
The tests conducted by security researchers revealed the existence of flaws in the systems the company exposed on the Internet.
One of the first assumptions made about the alleged hack is that the hackers exploited a flaw in a plugin called Revolution Slider used by the WordPress-based website used by the company.
Sources on the Internet state that Mossack Fonseca has been compromised by hackers that run a SQL Injection attack on one of its sub-domains used for payments.

Figure 4 – Mossack Fonseca’s Domain alleged breached by hackers

An unknown researcher that used the Twitter account @1×0123 claimed to have found a SQL injection flaw on one of the corporate systems belonging to the Panamanian lawyers Mossack Fonseca firm.
“They updated the new payment CMS, but forgot to lock the directory /onion/,” he said via the “1×0123” Twitter profile.

In the past, the same hacker has discovered many other security issues in the systems of major media outlets, including the LA Times and New York Times. He also offered for sale the access to insecure systems at NASA.
@1×0123 also contacted Edward Snowden, notifying him of some bugs on one of his projects. Snowden acknowledged the bug report on the Freedom of the Press Foundation website.

Figure 5 – @1×0123 claims to have discovered a SQL Injection in the MossackFonseca Systems

Giving a close look at the image shared by the hacker, it seems that system is based on an Oracle database. Of course, it is not possible to be sure if this is the flaw exploited by hackers. Anyway, the presence of similar bugs is worrying if we consider the secret information contained in the database of the Panamanian firm.
Experts at WordFence security firm also provided an interesting analysis of the incident, describing how the hackers may have violated the email servers of the company via the WordPress Revolution Slider plug-in.
They also explained how attackers likely accessed the documents of the Mossack Fonseca firm exploiting the vulnerabilities affecting an outdated version of the Drupal CMS.
The hack of the email server, confirmed by the firm in an email sent to its customers, occurred by exploiting a vulnerability in the version of Revolution Slider that the company was running.
Once the attacker gained access to the WordPress website, he was able to view the contents of wp-config.php which contains the database credentials for the WordPress instance, and these credentials are in clear text.
The attacker would have used the credentials to access the database.
Experts at WordFence discovered that the www.mossfon.com is running two plugins in addition to Revolution slider, the WP SMTP plugin and the ALO EasyMail Newsletter plugin.
The WP SMTP plugin stores email server address and login information in plain text in the WordPress database.
Once the attacker had access to WordPress database credentials in the wp-config.php file, he was able to access the mail server.
The ALO EasyMail Newsletter plugin offers list management functionalities and needs access to read emails from the email server. Also, in this case, the plugin stores email server login information in the WordPress database in plain text.
“Once the attacker also had access to this data, after gaining access to the WordPress database via Revolution Slider, they would have been able to sign-into the email server and would be able to read emails via POP or IMAP.” Reported Wordfence.
Summarizing, it is likely that an attacker gained access to the WordPress website by exploiting a known vulnerability in the Revolution Slider; then he accessed the database where were stored information on the email systems.
Ethical Hacking Training – Resources (InfoSec)
The experts highlighted that the firm did not enforce the principle of least privilege for the hacked systems, allowing the WordPress plugin email accounts to have the access to resources that they don’t need.
The experts at WordFence also explained how hackers probably gained access to corporate client documents by accessing the web portal a thttps://portal.mossfon.com/,

Figure 6 – Mossack and Fonseca web portal

Unfortunately, the portal was running an unpatched Drupal version, the 7.23, that was affected by dozen vulnerabilities.
The experts at WordFence were also able to access the changelog.txt file on the web portal that confirms the firm’s website was running a flawed version of Drupal.

Figure 7 – Drupal 7.23 Changelog.txt

Once the attacker is compromised “the client login permissions system,” he could access any information stored on the portal.
Embed this video

Now we have a clear idea of possible hacking techniques adopted by hackers in the Mossack Fonseca breach, anyway, it is quite impossible to understand who is behind the attack.
The attackers appear politically motivated; they operated with the specific intent to disclose secret information, likely to destabilize political context in various countries.
Unfortunately, the cyber security posture of the company failed in protecting the precious information highlighting the importance of security when dealing with confidential information.

Android Forensic Logical Acquisition

2016-03-23T04:42:00.000-07:00

Introduction

The following is a demonstration of how we will create an Android Emulator; then we will go through needed steps to acquire a logical image of the system and how we can start forensically analyzing it.
In mobile forensic world (depending on the OS, the OS version, and the device) there are in general three main acquisition techniques:

Direct acquisition
Logical acquisition
Physical acquisition

The direct acquisition technique can be performed if the seized device is either not locked or the PIN/Password/Pattern lock is known by the investigator, this way every data available to the user is available to the examiner via the usual user interface(UI). The only “disturbing” point is that if relying on only this method, system files, systems logs or system partition is not accessible.
The logical acquisition is a bit-by-bit copy of a given logical storage, (the storage may refer to user data partition as well as system data partition), and this acquisition method produces
, in general, a relatively manageable file which can be analyzed and parsed by forensic tools. A full device backup, for instance, can be considered as a logically acquired image.
Physical acquisition acquires data directly from hardware by direct access to a given disk or flash memory. Physically acquiring a device is usually a headache but if successfully done, the produced copy can be used to recover deleted fragments and allows the examiner to put his hands on data remnants. Physical acquisition always starts by a dumping phase then a decoding phase.
This lab will be covering logical acquisition of Android emulator using Santoku Linux

Requirements

In this exercise we will use Santoku (https://santoku-linux.com) a dedicated to mobile forensics, analysis, and security, Linux distribution packaged in an easy to use, Open Source platform.

Get started with Android emulator in Santoku

After login in into your Santoku machine, Navigate to your Android SDK Manager: Santoku –> Development Tools –> Android SDK Manager

Select Tools –> Manage AVDs. Click “Create…” Enter a name for your Android Virtual Device (AVD_Forensics). Choose a device (Nexus One) then the OS (API Level 8) of your new AVD from the “Target” drop-down list. Allocate RAM (512 Mib), Internal Storage (300 Mib) and SD card size (300 Mib) then click OK:

From AVD manager select your created emulator and click on “Start”, Select applicable options on the next screen and click on “Launch”.

Once the virtual device is launched we can proceed by creating some evidence:

Simulate SMS/GSM Calls

The Android emulator mimics all of the hardware and software features of a typical mobile device, except that it cannot place actual phone calls/SMS, but we can simulate them using Telnet

In a terminal window (CTRl+ALT+T) type in the command telnet localhost 5554 (5554 is the port opened by the emulator)

Once connection is established, send SMS using the command: sms send as follows (you can replace with any fake number) :

And now reply the incoming SMS to make more evidence:

Always on the opened telnet terminal we can simulate GSM call using the command gsm call

The emulator will show incoming call user interface (UI) as follow:

Figure 1 – Simulated Incoming Call

The gsm command supports the many parameters but the most interesting in our study are:

Call : Simulate an inbound phone call from .
Accept : Accept an inbound call from and change the call’s state “active”.
Busy : Close an outbound call to and change the call’s state to “busy”.
Cancel : Terminate an inbound or outbound phone call to/from .

The full list can be found at https://developer.android.com/tools/devices/emulator.html
So to accept the previously simulated phone call we can execute the command gsm accept :

Once command executed the Incoming call user interface will switch to hang up UI:

Figure 2- Simulated accepted call

To simulate a missed call we can make a gsm call then cancel it:

Create phone book entries

Creating a contact on an emulator is the same as creating one on an actual device. From the menu, click on “contacts.” If your phone book is empty (which must be the case if your emulator is freshly created) click on “Menu” from the simulated keyboard then “New contact” fill-in contact info then press “Done”:

Logical acquisition

Open a terminal window and type in adb shell this will let us issue commands without entering the adb remote shell on the emulated device (or the device if using a real one). Once shell gained type in “mount” command, this command will attach the filesystem found on the device to one file tree:

As highlighted in the screenshot above, the /data partition is at /dev/block/mtdblock1, you can execute “df” command to displays the amount of disk space available on this partition:

Type exit to exit out from the adb shell:

ADB provides a pull command that can be used to extract any filesystem (file or folder) to the examiner’s computer. The logical acquisition is opening files in the file browser.

To pull a file or a directory the command is adb pull file /dest/file assuming that all user’s data is stored in /data/ partition we can simply extract all user /data partition by typing adb pull /data /path/to/store/files on a new terminal window (you can see what will be extracted by typing ls /data on your shell window):

Now you can start to explore all folders pulled directly using the OS Explorer:

Note that all installed applications are under /data/data folder.

If you want to extract a single application folder you can execute the command as adb pull /data/data/ /path/packagename. To see the full list of installed packages you can type ls /data/data in shell window:

1-Type adb shell to get back to shell environment
2-Type ls /data/data to get list of installed packages

After exiting shell environment by typing exit command, you can extract SMS for example by pulling the package name com.android.providers.telephony. The command will be adb pull /data/data/ com.android.providers.telephony /path/Telephony/
You can change /path/Telephony/ to the path where you want to store extracted data (in the following example the path /home/infosec/Telephony was used)

And then using different utilities we can start to explore files within extracted directory (ex. Sqliteman included with Santoku)
To browse to this directory click on the icon of File Manager PCManFM then double click on Telephony folder:

Moreover, by exploring databases folder, we can see mmssms.db which contains everything related to the SMS/MMS as suggested by their tables name You can open it by right-clicking on the database and selecting “Sqliteman”:

By querying, for example, the SMS table (double click on the table to view it), we can find all SMS (and using other tables and columns we can correlate IDs to make solid evidence). The following is the SMS we’ve sent previously:

In addition to ADB, Santoku comes with AFLogical which provides a basic framework for extracting data from Android devices using Content Providers and then saves the data to the SD Card of the device including:

Contacts
Call Logs
SMS
MMS
MMS Parts
Device info

In order to use this tool, open a terminal window and type in: aflogical-ose (ose stands for Open Source Edition) once asked to enter root password [sudo] password for infosec: type in the password you used to log into Santoku (root password is infosec458$%*) then wait until you get Press enter to pull /sdcard/forensics into ~/aflogical-data/

Before continuing, on your emulator, select the data you want to extract and click “Capture” then “OK” after data is extracted correctly:

On the terminal windows press enter to continue:

This will pull the data from SDCard to the location “~/aflogical-data”. Santoku will automatically pull all the data recovered from the emulator to that location:
To view the data, open a terminal window and type: cd ~/aflogical-data/ then ls to see created folder:

Now you can browse any images as well as the extracted data (such as contacts, call logs, MMS/SMS, and device info) in CSV format:

If you open SMS, for example, you will be able to see our previously simulated sms send

Most valuable information is usually stored in SQLite databases:

Evidence	Name of file
Phone book	\data\data\com.android.providers.contacts\ databases\contacts2.db
SMS, MMS messages	\data\data\com.android.providers.telephony\ databases\mmssms.db
Calendar	\data\com.android.providers.calendar\databases\ calendar.db
Log	\data\com.sec.android.provider.logsprovider\ databases\logs.db
User’s data	\data\system\users\accounts.db
Web-browser history	\data\data\com.android.browser\databases\ browser2.db
Dictionary	\data\user\comc.android.providers.userdictionary\ databases\user_dict.db

Ethical Hacking Training – Resources (InfoSec)

The following is the extraction of the database holding phonebook using adb pull:

You can also browse SQLite dbs by invoking Sqliteman utility from command line using: sqliteman database.db as follow:

As you can see this database contains 20 tables:

Moreover, by querying each table you can get very useful information such as calls history: (select * from calls)

How Malware Detects Virtualized Environment (and its Countermeasures)

2016-02-13T07:24:00.000-08:00

Virtual Machines are usually considered a good way to analyze malware as they can provide an isolated environment for the malware to trigger but their actions can be controlled and intercepted. However, modern age malware detects their environment in which they
are running, and if they detect they are running in VM, they sustain their actions. Some of the common side-effects on VM detection by malware are:

Refrains to inject code inside applications.
Keep malicious code encrypted.
Do not connect with C&C servers OR connect with Decoy C&C servers.

This article will focus on how malware detects their environment and how these malware actions can be traced.
Note: This is specific to detection of VMware environment.
Below are the some of the techniques used by malware to detect the virtualized environment?

Registry Check: Whenever we spawn a new VM using VMware product, In the guest OS there are many entries related to VMware. Malware queries entries like these to confirm the presence of VMware environment. Some examples like below:
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\DriverDesc
  - VMware SCSI Controller
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\ProviderName
  - VMware, Inc.
Memory Check: Location of various memory structures especially IDT varies in VM as compared to a physical machine. Malware checks the usage of various memory structures like:
- Store Interrupt Descriptor Table (SIDT): In a VM this is typically located at 0xffXXXXXX whereas, in a physical machine, this is located somewhat lower than that typically around 0x80ffffff.
- Other structures which are often checked by malware are:
  - Store Local Descriptor Table (SLDT)
  - Store Global Descriptor Table (SGDT)
  - Store Task Register (STR)
Communication Channel Check: Malware often checks any communication with the host. For this Malware executes the IN instruction. IN instruction is a privileged instruction and can only be run from Ring 0. However if it runs from Ring 3, then it will raise an exception. However when this instruction is triggered from malware within VM, no such exception if raised. Instead, the VM raises a connection with the host and if the magic number ‘VMxh’ is returned to the register EBX, malware is certain that it is currently running under a VM.
Processes and Files Check: On all the spawned VM there are various VMware processes which keep running in the background like VMwareService.exe, VMwareTray.exe, etc. Also, sometimes VMware also install some tools in the spawned VM. Malware keeps an eye on all such as processes and files to detect VM environment.
MAC check: Malware also checks for underlying machine MAC address. MAC address starting with 00-05-69, 00-0c-29, 00-1c-14 or 00-50-56 belongs to VMware. The malware also for BIOS serial number. Usually spawned VM’s have ‘VMware’ string appended to their BIOS serial number.
Other Hardware Check: There are various hardware parameters which are specific to VMware as compared to the physical system. Malware queries various attributes like SerialNo, SocketDesignation, Caption to check the values of Motherboard, Processor, SCSI controller respectively.

Ways to Counter

Malware usually made API calls to get information from the system and made a decision on that. So monitoring these API calls would be informative to counter malware decision system
Countering Registry Check: Monitor malware action by intercepting API calls and add the custom output to deny malware to know about the underlying host. For registry monitor following registry calls:

RegEnumKey()
RegEnumValue()
RegOpenKey()
RegQueryInfoKeyValue()
RegQueryMultipleValues()
RegQueryValue()

Countering Hardware Check: For hardware monitor following APIs:

SetupDiEnumDeviceInfo()
SetupDiGetDeviceInstanceId()
SetupDiGetDeviceRegistryProperty()
WMI APIs

An important point to note in Hardware check regards information retrieval using MAC address. Analysts must change the MAC address in the VM to other than the VMware range specified above.

Countering Memory Check: To counter Memory Check, monitor instruction like SIDT, SLDT, SGDT, and STR. Also, since malware reads the instructions values from registers, it would be a good idea to change the affected register values.
Countering VM communication Channel: As stated above this is usually carried out with IN instruction. TO counter VM communication Channel, monitor the IN instruction and change the value of magic value(VMXh).
Countering File and Process Check: As you would have guessed by now, file and process check can be countered by monitoring the APIs for Folders, files, processes, etc. In this case, if the malware makes a request to query about VMware files and folders, then that API call should be intercepted, and a custom message should be thrown out as output to Malware so as to deny malware from recognizing any VMware files.
So these are techniques from a very high level which can be employed to detect the presence of malware discovering information about the environment.

Cellphone Surveillance: The Secret Arsenal

2016-01-28T04:37:00.001-08:00

StingRay and the cellphone surveillance

In a previous post, I detailed the technologies used to track mobile devices, with a specific reference to the StingRay IMSI-catcher (International Mobile Subscriber Identity).
An IMSI-catcher is a surveillance solution used by law enforcement, military and intelligence agencies for telephony eavesdropping, it is the technology used for intercepting mobile phone traffic and tracking movements of mobile phone users.
An IMSI catcher runs a Man in the Middle (MITM) attack acting as a bogus mobile cell tower that sits between the target mobile phone and the service provider’s real towers.
The only way to prevent being tracked by an IMSI catcher is using specific
products that secure communication on mobile devices. Modern Sting Ray implements a large number of functionalities, they allow attackers to intercept calls and Internet traffic, send fake texts, locate the devices and also inject malware, typically spyware and mobile RAT, that allows to gain full control over the victim’s device an exfiltrate the data.
The use of the IMSI-catcher is condemned by privacy advocates, the StingRay and other IMSI surveillance systems are invasive and the principal problem related to their usage is that they operate a dragnet surveillance spying not only the targeted mobile, but concurrently also all nearby cellular devices.

Figure 1 – StingRay

How does StingRay work?

Stingray equipment could operate in both active and passive modes, in the first case the device simulates the behavior of a wireless carrier cell tower, in the second case it actively interferes with cellular devices performing operations like data exfiltration.
The Stingray system is typically installed in a vehicle in a way that agents can move it into any neighborhood, it tricks all nearby cellular devices into connecting to it and allowing data access by law enforcement. Recently law enforcement and intelligence agencies installed Geo-Locating systems also on aircraft and drones.
Let us see in detail the two operative modes implemented by the StingRay technology.

The Passive mode

A StingRay that is operating in passive mode is able to receive and analyze signals being transmitted by mobile devices and wireless carrier cell stations.
The term “passive” indicates that the equipment doesn’t communicate directly with cellular devices and does not simulate a wireless carrier cell site.
By adopting a passive mode technique, the attacker can extract information related to the cell phone, including identification numbers, signal strength, and signal coverage areas. The Stingray operates as a mobile phone and collect signals sent by cell stations near the equipment.

The Active mode

A StingRay equipment operating in “active mode” will force each cellular device in a predetermined area to disconnect from its legitimate service provider cell site and establish a new connection with the attacker’s StingRay system. StingRay broadcasts a pilot signal that is stronger than the signals sent by legitimate cell sites operating in the same area, forcing connections from the cellular device in the area covered by the equipment. The principal operations made by the StingRay are:

Data Extraction from cellular devices – The StingRay collects information that identifies a cellular device (i.e. IMSI, ESN) directly from it using radio waves.
Run Man in The Middle attacks to eavesdrop Communications Content
Writing Metadata to the cellular device
Denial of Service, preventing the cellular device user to place a call or access data services.
Forcing an Increase in Signal Transmission Power
Forcing an Abundance of Signal Transmissions
Tracking and Locating

Figure 2 – StingRay case study

Tracking cellular devices, a prolific market

A growing number of actors are interested in the StingRay technology, not only law enforcement, but also foreign intelligence agencies use these devices to spy on their targets.
In this paragraph we will analyze in detail the solutions available on the market, at least the most popular ones.
Recently the news agency The Intercept has leaked online a secret catalog of cellphone spying devices used by the US intelligence, and not only. The document is a precious source of information that has been given to the online publication by someone inside the intelligence community.
The person who passed the document to The Intercept declared to be concerned about the growing militarization of domestic law enforcement.
“The Intercept obtained the catalogue from a source within the intelligence community concerned about the militarization of domestic law enforcement. (The original is here.)” states the post published on the Intercept.
“A few of the devices can house a “target list” of as many as 10,000 unique phone identifiers. Most can be used to geolocate people, but the documents indicate that some have more advanced capabilities, like eavesdropping on calls and spying on SMS messages. Two systems, apparently designed for use on captured phones, are touted as having the ability to extract media files, address books, and notes, and one can retrieve deleted text messages.”

The catalog includes 53 cellphone spying devices, including Stingray I/II surveillance boxes and Boeing “dirt boxes.”
There are some devices small enough to fit in a backpack such as the Blackfin that allows agents to eavesdrop nearby communications.
The document also includes many other cellphone spying devices that are less popular of the Stingray that could be used by law enforcement and intelligence agencies in various scenarios, including the deployment on drones and aircraft.
One of the spying devices is sold by the NSA, while another was designed for use by the CIA.
These systems are a long debated because they allow authorities to conduct dragnet surveillance, the cellphone spying devices have been used by local law enforcement agencies across the United States for a long time.
“The archetypical cell-site simulator, the Stingray, was trademarked by Harris Corp. in 2003 and initially used by the military, intelligence agencies, and federal law enforcement.” continues the post. “Another company, Digital Receiver Technology, now owned by Boeing, developed dirt boxes — more powerful cell-site simulators — which gained favor among the NSA, CIA, and U.S. military as good tools for hunting down suspected terrorists. The devices can reportedly track more than 200 phones over a wider range than the Stingray.”
The Intercept also reported the case of Marc Raimondi who was employed by the Harris company and that now is a Department of Justice spokesman who claims the agency’s use of Stingray cellphone spying devices is legal.
Jennifer Lynch, a senior staff attorney at the Electronic Frontier Foundation has repeatedly expressed its disappointment in the use of these devices in a domestic context.
“We’ve seen a trend in the years since 9/11 to bring sophisticated surveillance technologies that were originally designed for military use—like Stingrays or drones or biometrics—back home to the United States,” said Jennifer Lynch “But using these technologies for domestic law enforcement purposes raises a host of issues that are different from a military context.”

The Blackfin-I/II

The Blackfin is a device produced by the Harris Corporation, the same that designed the StingRay. It has limited dimension that allow agents to worn it on the body, its main features are the eavesdropping capability (both voice and text) and possibility to use it to shut down nearby devices in a selective mode.
It costs $75,000, and implements a mobile controller via Bluetooth.

Figure 3 -Blackfin Device

DRT 1101B, aka dirt boxes

This surveillance device allows agents to monitor up to 10,000 mobile devices, making it ideal for monitoring during public events and political protests. It is able to target both analog and digital wireless devices, intercepting voice data.

Figure 4 – Dirty Box

These devices could be also mounted in an aircraft or a drone flying over the targeted people.
It is sold by Digital Receiver Technologies, a subsidiary of Boeing Integrated Defense Systems and costs $78,850.00.
The equipment belongs to a complete family of devices known as dirt boxes which includes DRT 1183, DRT 1201C, DRT 1301C, DRT1101B
The DRT 1301C and the DRT 4411B provide features similar to other tools of the family but they are characterized by a limited overall dimensions. They cost respectively $100,000 and $40,000.

Figure 5 – DRT 4411B DIRT Box

Typhon

Typhon is a surveillance product designed by the experts of the TAO unit at the National Security Agency, it is able to capture data only from GSM mobile devices. It works only in the US, but won’t work on Sprint, Verizon, and U.S. Cellular phones in the United States. The device has an operative range of 30 kilometers in rural areas and 5 kilometers in urban ones. It cost $175,800.

Figure 6 – NSA Typhon

Triggerfish

The Triggerfish is an eavesdropping equipment that allows law enforcement to intercept cellular conversations in real time. Its use extends the basic capabilities of StingRay, which are more oriented to device location monitoring and gathering metadata. The Triggerfish allows authorities to monitor up to 60,000 different phones at one time over the targeted area.

Figure 7 – Triggerfish

According a post published by the journalist Ryan Gallagher on Ars, its cost ranges between $90,000 and $102,000.

Cyberhawk

Cyberhawk is able to exfiltrate data off over 79 mobile devices, including SMS messages, phonebook, dialed numbers, and any other file stored in the phone. It is a privileged instrument for espionage and investigation, it can be used to track network of individuals analyzing the information on their mobile devices.

Figure 8 – Cyber Hawk

Kingfish

The Kingfish is a surveillance transceiver produced by the Harris Corporation that is used by law enforcement and intelligence agencies to track cellular devices and exfiltrate information from mobile devices over a targeted area. It could be concealed in a briefcase and allow to gather unique identity codes and show connections between phones and numbers being dialed. Its cost is slightly higher than $42433.

The device is able to locate a phone only when the phone is turned on and the owner isn’t involved in a conversation, it works with both GSM and CDMA phones.

Figure 9 – Kingfish

Stargrazer III

Stargrazer is a military device used to degrade or disrupt a targeted adversary’s command and control (C2) system on the satellite Thuraya Handsets (HS). The equipment is able to extract IMSI, IMEI and other metadata from the handset locating it, and jam the device when operates in “attack mode.”

Figure 10 – Stargrazer III

Radiance

The Radiance is a fixed Wing Geo-Location system is able to capture, query and locate CDMA-2000 and IS-95 mobile devices.

Figure 11 -Radiance

Windjammer

Windjammer is a hand-held satellite simulator that can be used to geo-locate a handset or launch a denial of service attack on a given target. It tricks satellite terminals into thinking they are communicating with the legitimate network. It is manufactured by the SR Technologies Inc which offer it for sale at $192,000.00.

Figure 12 – Windjammer

Amberjack

The Amberjack is an important accessory for the surveillance systems like Stingray, Gossamer, and Kingfish. It is a direction-finding system antenna that is used for cellular device tracking. It costs nearly $35,015

Harpoon

The Harpoon is an “amplifier” (PDF) that can work in conjunction with both Stingray and Kingfish devices to track targets from a greater distance. Its cost ranges between $16,000 and $19,000.

Figure 13 – Harpoon

Hailstorm

Hailstorm is a surveillance device that could be purchased as a standalone unit or as an upgrade to the Stingray or Kingfish. The system allows the tracking of cellular devices even if they are based on modern technology.
“Procurement documents (PDF) show that Harris Corp. Has, in at least one case, recommended that authorities use the Hailstorm in conjunction with software made by the Nebraska-based surveillance company Pen-Link. The Pen-Link software appears to enable authorities deploying the Hailstorm to directly communicate with cell phone carriers over an Internet connection, possibly to help coordinate the surveillance of targeted individuals.” states Ars in a blog post.
The cost of Hailstorm is $169,602 if it is sold as a standalone unit, and it could be cheaper if acquired as an upgrade of other surveillance devices.

Raven

Raven is one of the most powerful tools for surveillance of WCDMA, it is able to interrogate and geolocate target devices. It can operate from the air or from the ground. Among its limitations, it requires a separate network survey device and can cause Denial of Service (DOS) during operation of the UMTS network. It costs $800K.

Figure 14 – Raven

Gossamer

The Gossamer is a portable unit that is used to access data on cellular devices operating in a target area. Gossamer provides similar functionality of Stingray with the advantage of being a hand-held model. The Gossamer lets also law enforcement to run a DoS attack on a target blocking it from making or receiving calls, as explained in the marketing materials (PDF) published by a Brazilian reseller of the Harris equipment.
The Gossamer is sold for $19,696.

Figure 15 – The Gossamer

Garuda (g-box) and the Carman II

The G-Box a GSM airborne geo-location system that emulates a GSM network Base Station to trick victims’ devices to connect it. The device is able to spy only on those handsets whom IMSI (International Mobile Subscriber Identity) or IMEI (International Mobile Station Equipment Identity) is included in a target watch list.
When the targeted handset is registered to the box, a geo-location solution is calculated. Its cost is $185,000.00.

Figure 16 – Key-W G-Box

The same Key W company also produces the Carman II, aka C-Box II, which is a GSM BTS that operates in like the Garuda. It works in the 850/900/1800/1900 MHz GSM bands and cost $130,000.

Figure 17 – Carman II

Artemis and Artemis II

Artemis is a family of GSM Geo-location systems produced by the Martone Radio Technology (MRT) company that operate like the Carman and G-box devices. The principal limitation related to these equipment is that they cannot be mounted on an airplane and can be used exclusively as a ground system in coordination with Nemesis/Maximus.
Ethical Hacking Training – Resources (InfoSec)
The version Artemis “T” to be used for Thuraya in development. The cost for both Artemis and Artemis II devices is $83,333.00.

Figure 18 – Artemis

Maximus

Maximus is a Ground GSM stimulation & geo-location device that simulates a BTS to STIM handset into RF TCH allowing for DF. The system incorporates the Artemis equipment to implement geo-location functionality.
It can operate from a ground distance ~1-4 Km, also in this case in order to capture the target the handset must be on and not engaged in a call. It is sold by the Martone Radio Technology, Inc. for $365,000.00

Figure 19 – Maximus

DeepPark

The DeepPark is a fixed Wing Geo Location manufactured by the Rincon IAW NRO and offered for sale at $250,000.
The surveillance equipment could target 450 sub-band A/C, 800, and 1900MHz CDMA-2000 & IS-95 mobile devices. It could be used to conduct both passive and active stimulation and geolocation of the. Differently from other similar devices, it cannot be used to launch a DOS attack on the system.

Figure 20 – DeepPark

Nebula

The Nebula is another surveillance device developed by the experts at the NSA. Nebula is a geo-location system designed to monitor GSM (Multi-Band), CDMA, UMTS, and HSDPA. Currently can target HPCP, GSM, Inmarsat, Thuraya, CDMA-2000, HSDPA devices.
Nebula is able to lock and hold traffic from a distance of 12 miles and is able to GeoLocate a device within 200m. The catalogue disclosed by the Intercept revealed Nebula has high DC power requirements.

Figure 21 – Nebula

Spying from the Sky

In November 2014, the Wall Street Journal revealed a secret U.S. surveillance program leveraging on bogus cell phone towers installed in airplanes to scan Americans’ cell phones and syphon their data.

Figure 22 – WSJ about Dirtboxes on a Plane

The tower signals are used to trick phones to automatically switch over to its signal, the technique is the same used to spy on cellphone and dubbed StingRay
“The boxes used by the program allow planes to pose as the nearest cell phone tower, which prompts cell phones under surveillance to disclose their location and identity information, even if a legitimate tower is closer than the plane overhead. The dirtboxes also have the ability to interrupt calls, though officials have reportedly tried to mitigate the harmful consequences of that function.” reported the Business Insider.
The technique was adopted by US law enforcement, the Justice Department used this method to collect huge amount of data to use in its investigations.
Security and privacy experts are contrary to this “insanely broad airplane data dragnet” because it affects people all over the country.
The program started in 2007 and U.S. Marshals used different aircrafts equipped with the spying technology, also referred as dirtboxes, to spy data from individuals on the entire US soil.
“The U.S. Marshals Service program, which became fully functional around 2007, operates Cessna aircraft from at least five metropolitan-area airports, with a flying range covering most of the U.S. population, according to people familiar with the program.

Planes are equipped with devices—some known as “dirtboxes” to law-enforcement officials because of the initials of the Boeing Co. unit that produces them—which mimic cell towers of large telecommunications firms and trick cellphones into reporting their unique registration information.”
The technique allows law enforcement to spy on tens of thousands of cellphones in a single flight, collecting their identifying information, metadata and many other information.
The catalogue disclosed by the Intercept provided more information on the equipment that could be mounted on Aircraft and drones to spy on mobile.
Below the list of the surveillance equipment:

Name	Vendor	Price	Description
Icarus – NVDF	AST (Raytheon)	$1,5 Mil	Geolocation System
Twister Firescout APG	Northrop Grumman	N/A	Base Station Router
Traveler (EW-FOS)	BAE Systems	$750K	Active/passive GSM geo-location System
Guava G-POD/STE LOS	Northrop Grumman IS ICW General Atomics	N/A	GSM airborne (UAV) geo-location system
Garwind – Blos POD	N/A	N/A	GSM airborne (UAV) geo-location system
Gilgamesh	Sierra Nevada Corporation ICW NSA OTRS/DAED and General Atomics	N/A	Geo-location system
Airhandler	Sierra Nevada Corporation ICW NSA OTRS/DAED and General Atomics	N/A	Geo-location system

Conclusion

The information disclosed by the Intercept and contained in the catalogue provided by an anonymous source in the US intelligence are very precious to understand the methods of investigation of the US intelligence and law enforcement. The Stingray technology raises serious privacy concerns because it is used in dragnet surveillance activities.
Anyway, the massive surveillance is prohibited in the US by the Fourth Amendment, and organizations for the defense of Civil Liberties request government to provide warrants to use surveillance technologies like the StingRay.
Organizations such as the American Civil Liberties Union and Electronic Privacy Information Center (EPIC) highlighted in many cases the risks related to the use of such method of investigation.
Despite the heated debate on the surveillance technology, such kind of devices still represents a privileged solution for the secret surveillance operations conducted by governments worldwide.

References

https://theintercept.com/2015/12/17/a-secret-catalogue-of-government-gear-for-spying-on-your-cellphone/
http://securityaffairs.co/wordpress/42861/intelligence/cellphone-spying-devices-catalog.html
https://theintercept.com/surveillance-catalogue/
http://securityaffairs.co/wordpress/30175/intelligence/cell-phone-data-spied-airplane.html
http://resources.infosecinstitute.com/stingray-technology-government-tracks-cellular-devices/
http://securityaffairs.co/wordpress/28397/hacking/surveillance-solutions.html
http://www.wsj.com/articles/americans-cellphones-targeted-in-secret-u-s-spy-program-1415917533?tesla=y&mg=reno64-wsj
https://www.aclu.org/blog/national-security-technology-and-liberty/trickle-down-surveillance
https://www.aclu.org/maps/stingray-tracking-devices-whos-got-them
http://www.phonearena.com/news/Cellphone-spying-gear-law-enforcement-has-it-and-it-wants-you-to-forget-about-it_id58920
https://www.scribd.com/doc/238334715/Stingray-Phone-Tracker
http://www.washingtontimes.com/news/2014/jul/18/lye-short-circuiting-stingray-surveillance/?page=all#pagebreak
http://www.usatoday.com/story/news/nation/2013/12/08/cellphone-data-spying-nsa-police/3902809/
https://www.aclu.org/files/assets/rigmaiden_-_doj_stingray_emails_declaration.pdf
http://arstechnica.com/tech-policy/2013/09/meet-the-machines-that-steal-your-phones-data/2/
http://cdn.arstechnica.net/wp-content/uploads/2013/09/amberjack.pdf
http://records.oaklandnet.com/feedback/request/2595
http://cdn.arstechnica.net/wp-content/uploads/2013/09/oakland-penlink-hailstorm.pdf

BlueStacks App Player 0.9.7.4 Cracked Version is Here ! [LATEST]

2015-01-08T11:00:00.001-08:00

BlueStacks App Player

BlueStacks HD App Player Pro is a plateform that allows you to run applications, including games written for OS Android – on desktops, laptops and tablets and also this package contains all files to install it offline. This is a special program that uses a technology called LayerCake, which provides the correct environment for running applications for ARM-Android on a computer running Windows. Get Root (right super – user).

After you install BlueStacks on your Windows PC, you can download directly from the program needed Android-app, without having to use the Android-based smartphone. BlueStacks looks pretty neat and fits naturally into the interface Windows.

Features List

Run Android applications in full-screen and not only.
Through the cloud download your application from the phone to Windows.
In 16 player preinstalled applications and you can play them if there is no number.
Ability to set an unlimited number of applications.
Ability to play 3D games (cache).
You can set a home screen (Launcher) to replace the standard, etc.
Sync with your Android device will allow you to make calls, send SMS, take pictures and more.
Has a lot of settings and system settings Android (Although they are slightly trimmed)
Knows how to install applications from a computer at the touch of them
Ability to obtain Root (full access to the file system, etc.)
You can set Google Play, simply speaking market.
BlueStacks great friends with ADB is a very big plus, if you really want, you can change the firmware.
Ability to turn in FastBoot and Recovery.
BluesStacks has virtual disk, such as SD Card, Data, and a few others. Which again gives you the opportunity to do a lot of “body” motions with it and enjoy all its charms.
Ability to obtain Root (full access to the file system)

What’s New ?

Now Bluestacks App player Works with Bitdefender AV/IS/TS; Problem has been fixed in this release
Bug fixed

Cracked Version Info

Simple Launcher Interface
SuperUser Support
SuperSu Support
Import Windows Files directly from your PC to bluestacks
Root Explorer Support
Advanced Calculator Support
Clock, Camera, and other accessories support
Root Checker Support
Build in Media Player which run mp3, mp4 and many other formats easily
Many more…

How to Run Speed Up BlueStacks ?

Press Start Button with “R” Key [image]
Search the regedit in newly opened windows [image]
Click on HEKY_LOCAL_MACHINE >>> SOFTWARE [image]
Then select Bluestacks >>> Android >>> Hit enter on Memory and replace 300 to 600; then click on decimal and click “OK” [image]
That’s it; you will have successfully speed up your bluestacks

How to Install?

Direct Download Links

Extract winrar files and run given app as an administrator
Just wait and follow the instructions during installation of setup into your PC
After Completing the installation; Bluestacks will automatically launch; just select some options which will appear on screen
That’s it. Now run your all apps which supports the Android 4.4.2 and earlier.

Screenshots

Requirements!

To run 3D games need support virtualization technology Intel® VT-x or AMD-V ™

To install the BlueStacks need a video card that supports OpenGL 2.0 or later

To start BlueStacks need about 1GB of RAM, otherwise you run the risk of “infinite loading”.

For optimum performance, BlueStacks is highly desirable to update your graphics card drivers

NVIDIA – (WHQL – certified, stable drivers. Beta – unstable, but can increase in speed)

AMD RADEON – (Download drivers – Category components: Desktop / Notebook Graphics)

INTEL – (family of products: graphics adapters)

Downloads

BlueStacks App Player 0.9.7.4101 SuperSu Support MOD (252.9 MB)

IPTV Pro v2.12.1 Cracked APK is Here! [Latest]

2015-01-08T10:58:00.000-08:00

IPTV Pro

Watch IPTV from your Internet service provider or free live TV channels from any other source in the web. If you are using VLC to watch TV on your PC then this app is for you. This is the paid version of IPTV app.

Sometimes m3u files on Android could be deleted by the system. This happens because Android scans sd-card, reads m3u playlists and fixes them by deleting the links to files which could not be found on your sd-card. Since you have URLs instead of files in your playlist, Android thinks that playlist is empty and deletes it. To avoid this just create some folder, place there empty “.nomedia” file and your m3u playlist. After that Android will exclude that folder from scanning and won’t touch the playlist.

Alternatively, you can place your playlist to some web server (Dropbox public link is one of the options) and specify its URL in the app.

Pro Features

Ad free
Ability to auto-reconnect to streaming server when connection is closed unexpectedly (http streams only).
Start app on device boot option, useful for set-top boxes.
Extended playlists history

Key Features

Direct Download Links

M3U and XSPF playlists support
Playlists history
Playing multicast streams with UDP proxy (proxy need to be installed in your LAN)
Ability to auto-reconnect to streaming server when connection is closed unexpectedly (http streams only)
Grid or list view of TV channels
EPG support in XMLTV and JTV formats
Start app on device boot option

How to install?

Save the downloaded .apk on your android phone’s SD card
Run and install it
That’s it,Enjoy!

Screenshots

Downloads

IPTV Pro v2.12.1 Cracked APK (1.1 Mb) | Mirrors

New Softwares Folder Lock v7.5 Serial Key is Here ! [LATEST]

2015-01-08T10:52:00.003-08:00

Folder Lock v7.5

Folder Lock 7 locks, hides, and password-protects files and folders on your PC, but it also encrypts files and email attachments, takes secure backups, protects USB and CD drives, and makes wallets that can store credit card numbers and other sensitive personal information. It thwarts hackers by logging and acting upon multiple failed log-in attempts, while a hotkey-activated stealth mode keeps out snoops. Folder Lock is free to try for 30 days.

Features

Lock files & folders
Encrypt your files
Backup Lockers
Portable Lockers
Make Wallets
Shred files
History Clean

How To Activate ?

Donload and Install Folder Lock 7.5 (SKIP IF INSTALLED)
Open Folder Lock 7.5
Navigate to Help & Support > Register
Enter Serial Key and Registration Key Given Below
Click Submit (It may stop responding, Dont worry….Just Force Close It)
Done ! Enjoy

Screenshot

Direct Download Links

Serial Key & Registration Key

Serial Key : F7-20120725-7-239532

Registration Key : 6658DE00CA1040167818DA708A164EB44C2CF44A

Downloads

Folder Lock v7.5 Official Trial Setup (9 MB) / Mirrors

VMware Workstation 11 Serial 2014

2015-01-08T10:46:00.003-08:00

VMware Workstation™ 11 continues VMware’s tradition of delivering leading edge features and performance that technical professionals rely on every day when working with virtual machines. With support for the latest version of Windows and Linux, the latest processors and hardware, and the ability to connect to VMware vCloud Air, it's the perfect tool to increase productivity, save time and conquer the cloud.

Features

Designed for Windows, Linux, and More
Support for the Latest Processors
Create Powerful Virtual Machines
Ready for the Latest Laptops and Tablets
Leverage the Power of vSphere and vCloud Air
User Interface Improvements
Enhanced Usability and Productivity
Protect Your Work and Save Time
Restricted Virtual Machines
Expiring Virtual Machines
Virtual Machine Cross Compatibility

What’s New

New Operating System Support
New CPU enablement, including Intel Haswell microarchitecture extension support.
Updated xHCI controller.
Updated NDIS drive.
Unity improvements for Windows 8.1 virtual machines
Allocate up to 2GB video memory to a virtual machine
Improvements for high DPI displays
Integration with VMware vCloud Air virtual private cloud
Boot virtual machines with EFI support
Create desktop shortcuts for virtual machines

Official Download

Serial Keys

GC75U-21E50-M8D5Q-K6YQX-W28V8

VU1N2-6DE5N-M8DLQ-AEMEV-XA2Z4

UV3NR-AMZ17-08EZP-9YQQE-MZAY8

CV512-FAW91-085NP-DMXQX-QLHAF

AA7DU-APW15-H848Q-P5ZGZ-PCRC2

Cracked: DotNetBar For Windows Forms 12.0.0.1 official original + RI (powerful user interface control library)

2014-12-25T10:53:00.001-08:00

The easiest way to create professional WinRT Windows 8 applications. Hands down.

DotNetBar for WinRT is toolbox of user interface components designed to help you develop professional Windows 8 apps with ease. Please checkout App-Store Demo that shows controls included and then download fully functional trial version to try it in your project.

Following components are included:

1Schedule/Calendar control designed for touch and Windows 8 platform with multi-user support, powerful recurring appointments engine, custom styling and more...

2Radial Menu touch control. Radial menu control perfect for touch applications.

3Context-Menu control. Context-menu control with nested, sub-menu support.

4Clock control. Analog clock control with automatic system time display mode, custom time display mode and drag & drop time edit.

5SuperTooltip component to be used to provide informational tips for any WinRT control in your app.

6Rating control allows user to pick a rating.

7Tab control, resurrected.

8Date Picker component to provide date input in your apps.

9Time Picker component to provide time input in your apps.

10Popup button component which opens a Popup when pressed.

11Expander component.

12Sliding color selector control.

13WrapPanel control to organize content in both vertical and horizontal orientations. We also included UniformStackPanel control which you might find useful.

14Dialog window enables easy dialog showing in your app.

15SettingsFlyout with SettingsFlyoutManager component makes it easy to add settings flyouts to your apps.

We are constantly working on adding more controls based on your requests. Please let us know what you need.

Fully function trial version of DotNetBar for WinRT is available for download now.

Why Choose DotNetBar for WinRT Controls?

Native Window 8 WinRT Controls

DotNetBar for WinRT controls are built 100% for the Windows 8 WinRT platform and they take advantage of the capabilities of Windows 8. We offer professional set of Windows 8 controls for developing great looking and lightning-fast professional applications.

Support for Visual Studio 2012

DotNetBar for WinRT controls provide support for Visual Studio 2012 with built-in designers for all our WinRT controls, toolbox support, property browsers and WYSIWYG preview for all controls. DotNetBar for WinRT controls allows you to develop professional Windows 8 applications in Visual Studio 2012 with ease.

Super-fast WinRT controls built for great performance

DotNetBar for WinRT controls are designed for excellent performance because we use uncluttered themes and templates, leverage the underlining platform and replace it where it is not fast enough.

Professional, Ready-to-Use Metro Styled Themes

DotNetBar for WinRT controls include Metro control styling for all our WinRT controls. We also include industry first ability to create custom color scheme based on single color you specify.

Command Support

DotNetBar for WinRT controls fully supports Command pattern and include built-in support for MVVM (Model-View-ViewModel). You can build complex User Interfaces and keep your code simple by having greater separation of concerns between design code and your business layer.

Download

How to play close your friend's Whatsapp application

2014-12-05T04:06:00.001-08:00

Hello, i going to show you a trick about how to close whatsapp application of your friend , all you need is to copy this code below into your mobile phone and then you copy it and send the code to your friend

the code:

ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠
ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ
㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ
㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠
ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠
ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ
㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰
ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊
ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ
㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ
㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠
ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰
ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ
㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ
㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ
㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠
ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰
ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ
㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ
㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ
㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠
ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㰟
Ѝ
ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ
㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ
㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ
㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠
ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰
ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ
㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ
㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊊ߘ㊠ ߘ
㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠
ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰
ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ
㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ
㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ
㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠
ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰
ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ
㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ
㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ
㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠
ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰
ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ
㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ
㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ
㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠
ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰
ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ
㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ
㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ
㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠
ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰
ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ
㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ
㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ
㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠
ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰
ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ
㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ
㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ㊠ ߘ㠊ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊠ ߘ㊰ߘ㊰ߘ㊠ ߘ
㊠ ߘ㠊

Far Cry 4 Gold Edition 2014 RePack MULTi2-SGAMES

2014-11-29T03:29:00.001-08:00

:::: Far Cry 4 Gold Edition 2014 RePack MULTi2 ::::


::Information::


Year: November 18, 2014
Genre: Action, Adventure, Shooter, 3D
Developer: Ubisoft Montreal, Red Storm, Shanghai, Toronto, Kiev
Publisher: Ubisoft
Publication Type: RePack
Game Version: v1.0
Language: Russian, English
Language: Russian, English
Tablet: enclosing (ALI213)


::Description::


Welcome to Kirata Lost among the peaks of the Himalayas country with 
a rich tradition, the world is threatened by a despotic ruler.


::System Requirements::


OS: Windows® 7 (SP1) / Windows® 8 / Windows® 8.1 / (64-bit only) 
Processor: 2.6 GHz Intel® Core™ i5-750 or 3.2 GHz AMD Phenom™ II X4 955 
Memory: 4 GB RAM 
Graphics: NVIDIA GeForce GTX 460 or AMD Radeon HD5850 (1 GB VRAM) 
DirectX: Version 11 
Network: Broadband Internet connection 
Hard Drive: 30 GB available space 
Sound Card: DirectX-compatible (5.1 surround sound recommended) 
Additional Notes: Windows-compatible keyboard, mouse, optional controller 
(Xbox 360 Controller for Windows recommended)


::RePack Features::


"It is based on a licensed version of the game.
"Do not cut / no recoded.
"There is all the available DLC.
»RePack from: R.G. Steamgames.


::Poster::

 
 
::Screenshots::

Get Torrent

'Regin' - 'State-Sponsored' Spying Tool Targeted Govts, Infrastructures for Years

2014-11-26T02:34:00.003-08:00

Researchers have uncovered a highly advanced, sophisticated piece of malware they believe was used to spy on a wide-range of international targets including governments, infrastructure operators and other high-profile individuals since at least 2008.

The nasty malware, dubbed "Regin", is said to be more sophisticated than both Stuxnet and Duqu, according to the researchers at antivirus software maker Symantec Corp.

DEVELOPED BY NATION STATE

The research showed that the Regin malware is believe to be developed by a wealthy "nation state" and is a primary cyber espionage tool of a nation state because of the financial clout needed to produce code of this complexity with several stealth features to avoid detection. But, the antivirus software maker didn't identify which country was behind it.

"It is likely that its development took months, if not years, to complete and its authors have gone to great lengths to cover its tracks. Its capabilities and the level of resources behind Regin indicate that it is one of the main cyber espionage tools used by a nation state," said Symantec Security Response team.

"The security firm did not name a nation as the source of Regin, but is willing to say most of its victims were from Russia and Saudi Arabia and were targeted between 2008 and 2011 with a since decommissioned version of the malware that re-surfaced after 2013."

Regin uses a modular approach allowing it to load features that exactly fit the target, enabling a customized spying. The malware's design makes it highly suited for persistent, long-term mass surveillance operations against targets, the company said.

The nasty malware's main targets include Internet service providers and telecommunications companies, where it appears the complex software is used to monitor calls and communications routed through the companies' infrastructure. Other targets include organisations in hospitality, energy, airline, health sectors and research.

HIGHLY CUSTOMIZABLE FIVE STAGE STRUCTURE

Regin's highly customizable nature allows large-scale remote access Trojan capabilities, including password and data theft, hijacking the mouse's point-and-click functions, and capturing screenshots from infected computers. Other infections were identified monitoring network traffic and analyzing email from Exchange databases.

"Customisable with an extensive range of capabilities depending on the target, it provides its controllers with a powerful framework for mass surveillance and has been used in spying operations against government organisations, infrastructure operators, businesses, researchers, and private individuals," Symantec said.

In order to remain stealthy, Regin is organized into five layers, each "hidden and encrypted, with the exception of the first stage." It's a multi-stage attack and each stage reveals the overall attack. Executing the first stage starts a domino chain in which the second stage is decrypted and executed, and that in turn decrypts the third stage, and so on.

NASTY MODULES

The whole picture of the malware only emerges when you have acquire all five stages because each individual stage provides little information on the complete package. Regin contains dozens of payloads, including code for capturing screenshots, seizing control of an infected computer's mouse, stealing passwords, monitoring network traffic, and recovering deleted files.

Other modules appear to be tailored to specific targets. Specialist modules were found monitoring the traffic of Microsoft Internet Information Services (IIS) server, parsing mail from Exchange databases, and collecting administration traffic for mobile base station controllers.

CryptoPHP Backdoor Hijacks Servers with Malicious Plugins & Themes

2014-11-26T02:29:00.000-08:00

Security researchers have discovered thousands of backdoored plugins and themes for the popular content management systems (CMS) that could be used by attackers to compromise web servers on a large scale.

The Netherlands-based security firm Fox-IT has published a whitepaper revealing a new Backdoor named "CryptoPHP." Security researchers have uncovered malicious plugins and themes for WordPress, Joomla and Drupal. However, there is a slight relief for Drupal users, as only themes are found to be infected from CryptoPHP backdoor.

In order to victimize site administrators, miscreants makes use of a simple social engineering trick. They often lured site admins to download pirated versions of commercial CMS plugins and themes for free. Once downloaded, the malicious theme or plugin included backdoor installed on the admins’ server.

"By publishing pirated themes and plug-ins free for anyone to use instead of having to pay for them, the CryptoPHP actor is social-engineering site administrators into installing the included backdoor on their server," Fox-IT said in its analysis on the attack.

Once installed on a web server, the backdoor can be controlled by cyber criminals using various options such as command and control server (C&C) communication, email communication and manual control as well.

Other capabilities of the CryptoPHP backdoor include:

Integration into popular content management systems like WordPress, Drupal and Joomla

Public key encryption for communication between the compromised server and the command and control (C2) server

An extensive infrastructure in terms of C2 domains and IP’s

Backup mechanisms in place against C2 domain takedowns in the form of email communication

Manual control of the backdoor besides the C2 communication

Remote updating of the list of C2 servers

Ability to update itself

Miscreants are using CryptoPHP backdoor on compromised Web sites and Web servers for illegal Search Engine Optimization (SEO), which is also known as Black Hat SEO, researchers said in its report. It is because the compromised websites link to the websites of the attackers appear higher in search engine results.

Black hat SEO is a group of techniques and tactics that focus on maximizing search engine results with non-human interaction with the pages, thus violating search engine guidelines. These include keyword stuffing, invisible text, doorway pages, adding unrelated keywords to the page content or page swapping.

The security company has discovered 16 variants of CryptoPHP Backdoor on thousands of of backdoored plugins and themes as of 12th November 2014. First version of the backdoor was appeared on the 25th of September 2013. The exact number of websites affected by the backdoor is undetermined, but the company estimates that at least a few thousand websites or possibly more are compromised.

Spy Planes Equipped with Dirtbox Devices Collecting Smartphone Data

2014-11-16T13:57:00.003-08:00

The U.S. government is reportedly using spy airplanes equipped with special military-grade snooping equipment to eavesdrop on cell phone information from millions of smartphone users in U.S, according to a new report.

This little device, nicknamed "Dirtbox", is being used to mimic mobile phone tower transmissions from the sky and gather data from millions of mobile phones, helping the US Marshals Service track criminals while recording innocent citizens’ information.

The purpose of the device is supposedly to track a specific target, but if active, all mobile devices in the particular area will respond to the signal. The Dirtbox causes smartphones to transmit back the users’ location, registration information and identity data – uniquely identifying IMEI numbers stored in every mobile device, The Wall Street Journal reported.

The name Dirtbox is given after the initials of Digital Receiver Technology, Inc. (DRT), a Boeing Company subsidiary that allegedly manufactures these devices. These two-foot-square snooping devices imitate cellphone towers and thus make contact with all handsets in the range.

"DRT has developed a device that emulates a cellular base station to attract cell phones for a registration process even when they are not in use," Boeing said in a 2010 filing [PDF].

The operation began in 2007 and according to the WSJ, a "source familiar with the program" said that these devices are fitted onto Cessna aircraft and fly from at least five metropolitan airports in the US. The planes cover the majority of the US population.

The dirtboxes operate in the same way as the so-called mobile phone surveillance tool IMSI (International mobile subscriber identity) catchers or Stingrays, that is in use by over 46 agencies including the law enforcement, the military, and intelligence agencies across 18 states and Washington, D.C. for more than a decade.

StingRays are common surveillance devices that allow law enforcement to mimic a cell phone tower, and track users position who connect to it, and sometimes even intercept calls and Internet traffic, send fake texts, install spyware on a phone, and determine precise locations.

Both Stingrays and Dirtboxes make use of "off-the-shelf" components to gather mobile phones’ International Mobile Subscriber Identity (IMSI) which is a unique code to each device. They can be used to track individuals’ movements via their mobile phone devices but work indiscriminately, hovering up information from a general area.

The US Department of Justice – which oversees the marshal service – has neither confirmed nor denied the existence of the Dirtbox program, but anonymous sources familiar with their use said the flying spies-in-the-sky were technically above board.

The WSJ quotes one source as stating, "What is done on US soil is completely legal….., Whether it should be done is a separate question."

European Space Agency’s Spacecraft Lands on Comet’s Surface

2014-11-12T08:31:00.001-08:00

The Philae has landed.

The European Space Agency’s ambitious attempt to place a spacecraft on the surface of a comet succeeded when a signal arrived at the mission control center at Darmstadt, Germany, just after 5 p.m . local time (11 a.m. Eastern time).

Cheers erupted.

“We’re there and Philae is talking to us,” said Stephan Ulamec, the manager for the lander. “We are on the comet.”

The lander, Philae, and its 10 instruments have now begun 64 hours of scientific operations before its batteries drain. Solar panels will then recharge the batteries, allowing intermittent operations over the coming months, about one hour every two days.

The landing culminated a long day as the Rosetta maneuvered to the correct position to let Philae go — moments of celebration interspersed with long, quiet stretches of waiting.

The operation proceeded despite a few small glitches and one potential showstopper problem: an apparent failure of a thruster that was to fire right after touchdown to press the lander against the comet’s surface. A pin was supposed to break a wax seal on the gas tank, but repeated attempts did not appear to succeed.

Without the thruster, the washing machine-size Philae would have to rely on ice screws on its landing legs and a couple of harpoons to keep it attached to the comet. The thruster, which was to shoot a stream of cold nitrogen gas, was intended to counteract not just the possibility of Philae bouncing off the surface but also the upward kick from the firing of the harpoons.

Mission managers decided to proceed, because there was no way to repair it, and there was no benefit to waiting.

Philae detached on schedule, for a seven-hour descent to the surface. There was some worrying a couple of hours later when the lander was about 10 minutes late in re-establishing communications with the Rosetta orbiter.

After that, scientists received photos — a blurry image of Rosetta’s solar array taken by Philae about 50 seconds after separation and then a sharper image by Rosetta of the descending Philae.

“We see the lander going down on the right track,” said Andrea Accomazzo, the flight director.

Then there was more waiting, with amusing updates via the Twitter accounts of Rosetta and Philae.

“Finally! I’m stretching my legs after more than 10 years. Landing gear deployed!” was a tweet from Philae.

The web comic XKCD also provided real-time updates with a comic that updated throughout the landing operation, even mentioning the problem with the nitrogen thruster. In the comic, Rosetta told Philae that mission control was worried about the thruster, and the lander responded, “"I really hope harpoons work on a comet.”

Call of Duty: Advanced Warfare Crack ONLY

2014-11-08T11:51:00.003-08:00

Platform: PC
Language: English
Gender:Action
Quality: DVD
Format: ISO
Size: 39.50 GB
Fecha: 03-11-2014

Download

BackTrack 5 or Kali Linux

2014-11-06T06:28:00.001-08:00

BackTrack is/was a specialty Linux distribution for security professionals. It is designed for hacking and penetration testing and is loaded with the best Free and Open Source (FOSS) hacking applications available. The last edition was BackTrack 5 R3 (the R is for Revolution).

After BackTrack 5 R3, the developers decided to retool and revamp their distribution. The result of their effort was released as Kali Linux. So the gist of this article is this: BackTrack is now known as Kali Linux, and if you came to this website searching for information about BackTrack 5 R3, Kali Linux 1.0 is the distribution you should be looking for.

So, aside from upgraded applications and a name change, what’s the real difference between BackTrack and Kali Linux?

The most important differences are these:

1. While BackTrack is based on Ubuntu Desktop and used Ubiquity as the graphical installation program, Kali Linux is based on the latest edition of Debian and uses the Debian Installer (DI).

2. The difference in the graphical installation programs is significant, because with DI comes support for LVM, the Linux Logical Volume Manager, and full disk encryption. Those are features that you didn’t have with BackTrack’s installer.

3. Another significant difference is that because Ubuntu’s packages are not compatible with Debian packages, upgrading from BackTrack 5 R3 to Kali Linux 1.0 is not recommended. So if you have an installation of any edition of BackTrack 5, you should be prepared to switch to Kali Linux.

4. The last difference worth noting here is this: With BackTrack 5, you had a choice of two desktop environments – KDE and GNOME 2. However, with Kali Linux, you could roll your own desktop environment, aside from the default, which is GNOME 3. So, if Cinnamon, KDE, E17 is your choice, the steps for creating them are easy to follow. For example, see how to build a custom KDE image for Kali Linux.

Several article have already been published on this website about Kali Linux, which you may read here. To download the latest edition of Kali Linux, click here.

This is a screen shot from a test installation of the KDE edition of BackTrack 5.

Here’s one from a test installation of Kali Linux 1.0

Sony Xperia Devices Secretly Sending User Data to Servers in China

2014-11-04T09:59:00.003-08:00

If you own a Sony smartphone either the Android 4.4.2 or 4.4.4 KitKat firmware then inadvertently you may be transmitting your data back to the servers in China, even if you haven’t installed any application.

Quite surprising but it’s true. I know many of you haven’t expected such practices from a
Japanese company, but reports popping up at several forums suggest that some new Sony Xperia handsets seem to contain the Baidu spyware.

MYSTERIOUS BAIDU SPYWARE

About a month ago, a group of community users of Sony smartphone detected the presence of a strange folder, named “Baidu”, mysteriously appeared from among those present in various versions of Android for these handsets.

The creepy part is that the folder is created automatically without the owners permission and there is no way of deleting it. Even if someone tries to remove it, it instantly reappears as well as unticking the folder from device administrator equally seems to do nothing, neither does starting the phone in Safe Mode.

“Just unpacked my Sony Z3 compact, haven't installed a single app and its connecting to China. I am not so concerned about the folder itself but my phone now has a constant connection to an IP address in Beijing which I am not too happy about.” Reddit user commented.

The Baidu folder appears to be created by Sony’s ‘my Xperia’ service each time a connection is made and is reported to be sending pings to China. There is no further information known on what these pings are transmitting but nevertheless they do seem to be transmitting.

PERSONAL INFORMATION SEND TO CHINA

Going deep, several users reported they found that the Chinese government is able to detect the status and identity of the device, take pictures and make videos without the consent of the user. A user, going by the handle Elbird, posted on Sony Forums that with the help of Baidu folder, the Chinese Government can:

Read status and identity of your device

Make pictures and videos without your knowledge

Get your exact location

Read the contents of your USB memory

Read or edit accounts

Change security settings

Completely manage your network access

Couple with bluetooth devices

Know what apps you are using

Prevent your device from entering sleep mode

Change audio settings

Change system settings

AFFECTED PRODUCTS

Thankfully this is a spyware and you can check to see if you have or not. If you see the folder named Baidu in your device then your device contains the spyware. But, for users it isn't the folder which seems to be the real cause for concern, though; it’s the fact that the phones open a connection to servers.

According to the reports affected devices include the new Sony Xperia Z3 and Z3 Compact, and several users from the Reddit community have also reported about the presence of this folder on their mobile phones, too — and not necessarily phones made by Sony. One owns an HTC One M7, another an HTC One X, a few others the OnePlus One.

STEPS TO DISABLE BAIDU SPYWARE

Backup your important data and factory reset the device.

Turn on the device and go to Settings -> Apps -> Running and Force stop both “MyXperia” apps.

Then remove the baidu folder using File Kommander app.

Go to Settings -> About Phone -> Click 7 times on the Build Number to enable developer mode.

Download or Install the Android SDK on your computer and then connect the Sony device to it using USB cable.

Run the adb tool terminal : adb shell

In adb shell, type the command: pm block com.sonymobile.mx.android

Exit adb shell

Reboot the device.

Note that the spyware does not necessarily affect the process or functionality of your mobile devices, so you shouldn't be worried in this respect. Sony has not officially responded to this ‘baidu’ folder issue.

However, the company has recognized the issue and has said that in the next release the problem will be fixed. Unless Sony can roll out some kind of fix in the near future then it seems you might have to wait until Lollipop rolls out in January before you can get rid of Baidu.

Recently Chinese smartphone manufacturer Xiaomi has been called out for spying on personal user data using their smartphones. According to F-Secure Xiaomi Smartphones were sending user data back to the servers based in China.

AirHopper — Hacking Into an Isolated Computer Using FM Radio Signals

2014-11-04T09:51:00.000-08:00

In order to secure sensitive information such as Finance, many companies and government agencies generally use totally secure computer systems by making sure it aren't connected to any network at all. But the most secure systems aren't safe anymore.

Security researchers at the Cyber Security Labs at Ben Gurion University in Israel have found a way to snoop on a personal computer even with no network connection.

STEALING DATA USING RADIO SIGNALS

Researchers have developed a proof-of-concept malware that can infiltrate a closed network to lift data from a machine that has been kept completely isolated from the internet or any Wi-Fi connection by using little more than a mobile phone’s FM radio signals.

Researcher Mordechai Guri, along with Professor Yuval Elovici of Ben Gurion University, presented the research on Thursday in the 9th IEEE International Conference on Malicious and Unwanted Software (MALCON 2014) held at Denver.

This new technology is known as ‘AirHopper’ — basically a keylogger app to track what is being typed on the computer or the mobile phone.

AirHopper is a special type of keylogger because it uses radio frequencies to transmit data from a computer, all by exploiting the computer's monitor display, in order to evade air-gap security measures.

"This is the first time that a mobile phone is considered in an attack model as the intended receiver of maliciously crafted radio signals emitted from the screen of the isolated computer," according to a release by Ben Gurion University.

HOW DOES AIRHOPPER WORK ?

The technology works by using the FM radio receiver included in some mobile phones. AirHopper is able to capture keystrokes by intercepting certain radio emissions from the monitor or display unit of the isolated computer.

The researchers can then pick up the FM signals on a nearby smartphone and translate the FM signals into the typed text.

LIMITATIONS

The technique is completely new, although it has some limitations. The team claims that textual and binary information can be gathered from a distance of up to 7 meters with an effective FM-bandwidth of 13-60 bps (bytes per second).

"AirHopper demonstrates how textual and binary data can be exfiltrated from physically a (sic) isolated computer to mobile phones at a distance of 1-7 meters, with effective bandwidth of 13-60 (bytes per second). Enough to steal a secret password."

This, according to researchers, is enough to steal a secret password. Therefore, in an effort to obtain secret data an attacker can infect a mobile phone of someone from the staff using AirHopper method worked in stealth mode, and then transmit the data.

VIDEO DEMONSTRATION AND POTENTIAL DANGER

Researchers have also provide the Proof-of-concept video, so you can Watch the demonstration video and find out if you should be worried or not.

According to the researchers, the Airhopper technique of data theft was developed by the University in order to protect against potential intrusions of its kind in the future.

"Such technique can be used potentially by people and organizations with malicious intentions and we want to start a discussion on how to mitigate this newly presented risk." said Dudu Mimran, chief technology officer of the Ben Gurion University’s cyber security labs.

BlackEnergy Malware Targets Linux Systems and Cisco Routers

2014-11-04T09:17:00.000-08:00

BlackEnergy Malware Targets Linux Systems and Cisco Routers

Cyberespionage Group, generally known for using the malware BlackEnergy for their cyber-crime activities has been compromising routers and Linux system based on ARM and MIPS architectures in addition to Windows Computers.

BlackEnergy was mainly developed by cybercriminals to
perform DDos attacks. AV software vendor Kaspersky Lab reported the details of the modules which have been being used as plugins for this malicious malware.

The group behind these attacks target mainly high-profile private and government organizations such as municipal offices, federal emergency services, national standards bodies, banks, academic research institutions, property holdings and other organizations.The victims of these attacks belong to at least 20 countries.

BlackEnergy plugins are available for both Windows and Linux systems. They mainly enhance the capabilities of the malware by offering some more additional features such as port scanning, password stealing, system information gathering, digital certificate theft, remote desktop connectivity and HDD wiping.

Different selections of plug-ins are deployed from command-and-control servers for every victim, depending on the group’s goals and the victim’s systems, the Kaspersky researchers said.

In one case, the attackers downloaded and executed one BlackEnergy plug-in called "dstr" to destroy data on the victim's windows machine.

Researcher said

By all appearances, the attacker pushed the "dstr" module when they understood that they were revealed, and wanted to hide their presence on machines. some machines already launched the plug-ins,lost their data and became unbootable

Another scene shows a organization who lost their data after installing the plug-in also could not access their Cisco router via telnet. When they investigated the matter they found several "farewell" scripts left for Kaspersky Researchers one of which named "Cisc0 API Tcl extension for B1ack En3rgy b0t" contained vulgar messages. Those scripts were used to delete the tracks of the attackers.

Some days ago Industrial Control Systems Cyber Emergency Response Team (ICS-CERT), a division of the U.S. Department of Homeland Security said the same thing stating that many business organization who useed HMI(Human Machine Interface) products from products from General Electric, Siemens and BroadWin/Advantech got their systems infected with BlackEnergy. HMI are softwares which provide a GUI for monitoring and interacting with industrial control systems.

Alongside Kaspersky, security Firm iSight discovered a hacking campaign by this group, which they call the Sandworm Team, on Ukrainian Government and US Based Business organization. The group, suspected to be originating from Russia exploited a zero-day-vulnerability in Microsoft Windows.

Where as Kaspersky denies this Russia Fact as they say that the group recently launched a DDos attack against a IP address belonging to the Russian Ministry of Defense.

Vulnerability in e-Commerce Wordpress Plugin: Buy Anything Without Paying

2014-11-04T09:09:00.001-08:00

Vulnerability in e-Commerce Wordpress Plugin: Buy Anything Without Paying

Alongside Drupal, one of the most popular CMS Wordpress seems also to be vulnerable to serious flaws. Researchers at Sucuri have found an information leak and access control bypass vulnerability in popular WP eCommerce Plugin.

WP eCommerce Plugin is mainly used for selling products, downloads as well as memberships online. The number of downloads of this plugin clearly says how much popular it is- 2.9 Million.

According to the researchers, the vulnerability can be exploited by a remote attacker by gaining access to names, email addresses, billing addresses and other information belonging to the users who made purchases through the Plugin.Sucuri also said that those data can be manipulated easily by the attacker.

Sucuri Researcher Mickael Nadeau said

An attacker could perform administrative-related tasks without actually being authenticated as an administrator on the targeted website. Using this vulnerability, one could send few requests to websites database, dumping all client personal information.It is also possible for someone to buy products and change the status of their transactions to Accepted Payment without actually making the payment.

The flaw came to Sucuri's vision during their routine audit of Windows Firewall. After founding the vulnerability, WP eCommerce Plugin Developer Team was immediately contacted and they patched the flaw by launching 3.8.14.4

What is the Flaw?

Sucuri posted in their blog

The plugin developers assumed that the WordPress’s admin_init hook was only called when the administrator was logged in and visited a page inside /wp-admin/. However, any call to /wp-admin/admin-post.php (or admin-ajax) also executes this hook without requiring the user to be authenticated.

Sucuri did not disclose enough technical details about the Vulnerability as they want to give the webmasters time to fix the flaw. They also said that this flaw looks similar to the vulnerability they found in MailPoet Newsletter Plugin some weeks ago.

Rootpipe — Critical Mac OS X Yosemite Vulnerability Allows Root Access Without Password

2014-11-04T09:07:00.001-08:00

A Swedish Security researcher has discovered a critical vulnerability in Apple’s OS X Yosemite that gives hackers the ability to escalate administrative privileges on a compromised machine, and allows them to gain the highest level of access on a machine, known as root access.

The vulnerability, dubbed as "Rootpipe", was uncovered by Swedish white-hat hacker Emil Kvarnhammar, who is holding on the full details about the privilege escalation bug until January 2015, as Apple needs some time to prepare a security patch.

"Details on the #rootpipe exploit will be presented, but not now. Let's just give Apple some time to roll out a patch to affected users," Emil Kvarnhammar, IT specialist and hacker security company Truesec, tweeted from his twitter account.

By exploiting the vulnerability in the Mac OS X Yosemite, an attacker could bypass the usual safeguard mechanisms which are supposed to stop anyone who tries to root the operating system through a temporary backdoor.

ROOT ACCESS WITHOUT PASSWORD

Once exploited, hackers could install malicious software or make other changes to your computer without any need of a password.

Hackers could steal victims’ sensitive information such as passwords or bank account information, or if required, they could format the entire affected computer, deleting all your important data from the computer.

Kvarnhammar has also provided a video to explain his initial finding.

“It all started when I was preparing for two security events, one in Stockholm and one in Malmö,” Kvarnhammar says. “I wanted to show a flaw in Mac OS X, but relatively few have been published. There are a few ‘proof of concepts’ online, but the latest I found affected the older 10.8.5 version of OS X. I couldn’t find anything similar for 10.9 or 10.10.”

Kvarnhammar tested the vulnerability on OS X version 10.8, 10.9 and 10.10. He has confirmed that it has existed since at least 2012, but probably is much older than that.

INFORMED APPLE

Kvarnhammar contacted Apple about the issue but he initially didn’t get any response, and Apple silently asked him for more details. When he provided with the details, Apple asked TrueSec not to disclose until next January.

Kvarnhammar said, "The current agreement with Apple is to disclose all details in mid-January 2015. This might sound like a long wait, but hey, time flies. It's important that they have time to patch, and that the patch is available for some time."

HOW TO PROTECT

The full disclosure of the vulnerability would be made public in January, after Apple will provide a fix. Apple Yosemite OS X users are advised to follow the below steps in order to protect yourself from the exploitation of the Rootpipe:

Avoid running the system on a daily basis with an admin account. An attacker that will gain control on this account will obtain anyway limited privileges.
Use volume encryption Apple’s FileVault tool, which allows encryption and decryption on the fly, protecting your information always.

However, the best way to protect yourself from such security vulnerabilities is to ensure that the operating system running on your system is always up-to-date, and always be careful to the links and documents others send to you.

Windows 7 Loader,Activator v2.0.6 Reloaded - DAZ [Team Rjaa]

2014-10-30T12:03:00.002-07:00

As seen loader, this activator promises to give eternal life to our windows seven thus achieving an OEM system with ability to perform updates from windows update, logo plate on the information system.
In this new release with an interface very similar to the view loader integrates the functionality of Hazar and potential trigger activation in 64-bit systems.

Windows 7 RTM Ultimate Activation with OEM Information
This only works for Windows Activator 7 RTM Ultimate (Retail and OEM Edition)

Tested on x86 and x64 (32 Bits & 64 Bits)
The trigger operates in both systems, both virtual machines and computers as dual boot (two or more operating systems)

There is no need to use the Activator serial
Adds a key activator OEM on your system.
Choose one of the OEM brand to add to your system.
It requires no change in the BIOS.
Does not include text to start the computer.
Method uses the OEM SLP.

Supports BIOS SLIC SLIC not.
SLIC 2.1 emulates a BIOS on a system without SLIC 2.1.
Use "7Loader Install" to install the certificate & key in offline mode.

If you have a modified BIOS can utitilizar "SLIC 2.1 in BIOS" to install the certificate & key in offline mode without applying Loader.

Instructions.
Recommended for use on a clean install of windows 7.
You must remove all changes made by 7loader in previous versions, this includes Orbit30 win7 tool kit.
Either way you will have to do a clean install.

Disable UAC to secure the facility.
1. Run "7loader" in a partition.
2. Wait until the end of the activation and display a window.
3. Restart.

* Multi-boot: Works with dual boot, however if you have windows vista Vistaloader activated, then you need to turn after turn on windows 7.
Use OpaTool and select 'B' (DO NOT use Option C in Vista).

Work in Enterprse, Home Premium and other issues?
No certificates or keys for these versions at the moment. when they exist, update triggers.
Only the Ultimate edition is compatible with the activator.

Microsoft has blacklisted the key you use to activate?
If the product key to OEM filter is blocked (blacklist), but in October when new OEM product triggers an update.

Windows 7 E?
If you have this windows, you can not activate this loader as canceled all versions microsoft E. You must install a version no E.

Download