BestSuperTech!

iOS 5 tethered and untethered jailbreak

noreply@blogger.com (w7l) — Thu, 15 Dec 2011 12:49:00 +0000

As a lot of you know that tethered jailbreak for iOS 5 is already available (check the links below) ,but what is new tha pod2G (previouse member of the Chronic Dev team ) announced that untethered iOS 5 jailbreak will be available soon, as he tweeted about he was successfully jailbreak iphone running iOS 5.0.1

the release date still unknown as he mentioned,

If you want to jailbreak your iOS 5 by tethered jailbreak follow the link below

Redsn0w-iOS5 tethered jailbreak

Redsn0w website.

for step by step use this link

[Android] Use Mobile Camera With Any Apps!

noreply@blogger.com (w7l) — Sun, 22 May 2011 14:50:00 +0000

Android.com

I will show you how to use your mobile camera as webcam or as surveillance camera ....etc.

What you will need:

Any Android Phone will do it! (I'm using LG P500 Optimus one running Android 2.2 rooted)
IP webcam app

How To Use Android Cam As WebCam!

1.Open the market

2. Look For IP Webcam app.

3. Install it! (I already installed it!)

4. Now after you open it, you will have a lot of different option to customize such as resolution,cam quality, orientation,pass....

5. Now Click "Start Server", you will see IP address on the screen (its not obvious here) you will use it to connect to the camera.

6. In this step i used my iPad to view the camera, but as you can see you can use whatever device you like, and you can connect to the cam using different applications such as Skype,yahoo messenger...etc

[iPad] How To Make Personal Hotspot!

noreply@blogger.com (w7l) — Sun, 22 May 2011 14:15:00 +0000

Today i will show you how you can make a wireless hotspot using your ipad, this is useful if you need to share your 3G connection or you want simply to make a local network to share files or photos.

What you'll need:

Jailbroken iPad
MyWi 4 apps

How To Make Personal Hotspot!

1. Install MyWi 4 app from Cydia.

2. After starting MyWi app you will have different option for creating your WiFi hotspot.

Using Bluetooth

Using USB port

Using WiFi connection

3. So i will make WiFi hotspot in this tutorial, trun WiFi Hotspot button to "on" ,

the status bar will start to blink, that means you are ready to connect to your network.

4. You can change a lot of options such as :

Name of the network

Security

WiFi channel, transmit power, auto shutdown...

[iPad] How To Connect Wifi Only iPad To GPS (android)

noreply@blogger.com (w7l) — Wed, 27 Apr 2011 13:47:00 +0000

Today i will show you how you can connect your wifi-only ipad to external GPS device, in this example i will use my mobile phone running android OS (if you are using external GPS device skip 3-5 steps)

What you need:

Jailbreak iPad
Cydia installed
GPS source (iPhone, mobile phone, external GPS device ( it should be Bluetooth enabled))
BTstalk GPS apps (free demo available in Cydia, Full version costs 5$ )

How to Connect iPad To Android To Use GPS!

1. Using your iPad, start Cydia and look for BTstack GPS

2. Download it, or purchase it!

3. Now go to your Android phone, and start the market and look for apps called "BlueNMEA"

4. Install it.

5. Start BlueNMEA on your android, make sure that your GPS and Bluetooth is on.

6. On you iPad, start BTstack, it called GPS

7. Now it will search for the device (in our case my android phone LG P500)

8. After find it, click over LG p500 and you will notice that your android displayed your iPad name ( you may need to go through pairing process before that)

9. Now wait a min ,and your iPad will get your location! (in demo version location is not delivered to other applications)

[iPad] How To Lock Any Apps Using Locktopus

noreply@blogger.com (Dr.Mohammed) — Sat, 23 Apr 2011 21:44:00 +0000

Here how you can lock any application you want in your iPad from unauthorized access, what you will need:

Jailbreak iPad
Cydia
locktopus apps (Free from "cydia.xsellize.com" source, how to add source to cydia)

How To Lock Any Apps in iPad!

1. Open Cydia and search for "locktopus".

Cydia

2. Install Locktopus.

Locktopus

3. Go to settings and click on locktopus on the left side, and click "change master password" and enter any password you want .

Set password in locktopus

4. Now go back to your home, and press and hold over any application you want to lock, on the corner you will notice small lock icon, press on it and enter the password.

Press&Hold to activate locktopus

5. Now whenever you want to access this apps you will prompt for password.

Set password in locktopus

[iPad] How To Change The "iPad" Text In Status Bar

noreply@blogger.com (Dr.Mohammed) — Fri, 22 Apr 2011 12:09:00 +0000

Here is how you can change the text "iPad" written in the status bar to whatever text you want.

What you will need:

Jailbreak iPad
Cydia
FakeCarrier App.

How to Change the Status Bar!

1. Open Cydia and search for "fakeCarrier"

2. Install fakeCarrier.

3. Open it.

4. Click on "Fake Carrier"

5. Write whatever text you want, and click "Set"

6. Thats it!

How To Send Photos From Android To iPad/iPod/iPhone

noreply@blogger.com (Dr.Mohammed) — Tue, 12 Apr 2011 19:06:00 +0000

Sharing photos between different OS something is hard to do, especially between Android and iPad/iPhone, so today we will use Bump apps to share photos between any OS you want, what you need:

Bump apps installed on both iPad and Android.[Free]
Jailbreak iPad
Rooted Android device
Active internet connection

How To Send Photos Android/iPad/iPhone!

1. Install Bump on your android phone.

2. Now this is how bump app looks like, go to photo section and click "Attach Photos"

3. Choose the photo you want to send.

4. Now you are ready, go to your iPad .

5. Install Bump app on your iPad, you can find it in Apple Store free of charge.

6. Install it.

7. Run it.

8.Now you are ready to receive the files, what you need to do is hold your android phone and bump it with your iPad (check the video here!) then you will get conformational message on both devices.

9. LG-P500 is my android device, so choose "yes".

and this is a conformational message from my android

10. Thats it!

11. You can send contacts too!

p.s : remember, you have to have active internet connection to do it!

[iPad] Download Free Paid iPad Apps

noreply@blogger.com (Dr.Mohammed) — Mon, 11 Apr 2011 23:01:00 +0000

We will use app called Installous, what you need :

Jailebreak iPad
Cydia installed

How To Install Free iPad Apps

1. Open Cydia

2. Go to Search tab, and write "installous" ,the current version is "installous 4" click on it.

3. Click "Install" at upper right corner.

4. Click "Confirm"

5. Now you will find Installous apps on your Home, run it. (not necessary at your dock station)

6. You have the category on your left, and you can download any game or apps you want by clicking download button.

7. Dont forget to click install when your downloads finish, you can change the setting to auto install after finishing downloads (not recommended)

[iPad] How To Send Files Using Wireless Connection

noreply@blogger.com (Dr.Mohammed) — Mon, 11 Apr 2011 22:37:00 +0000

You can send your files using wireless network connection using two apps called : iFile , GoodReader

What you need:

Jailbreak iPad
iFile or GoodReader Apps Installed
Your home wireless network

Send Files Using Wireless Connection [iPad]

iFile

1. Open iFile

2. Click on the wireless icon in bottom of the screen

3. Wait till the connection established, you will given network address and port in my case it was:

192.168.1.14:10000

4. Go to your PC , and open any internet explorer and enter the above address (192.168.1.14:10000), you will be connected directly to your iPad , you can now upload any file by clicking "choose file" then "upload".

GoodReader

1. Open GoodReader

2. Click on the wireless icon in bottom of the screen , same as iFile , you will be given address in my case (192.168.1.14:8080)

3. Go to your PC, and open any internet explorer and enter the above address (192.168.1.14:8080), you will be connected directly to your iPad , you can now upload any file by clicking "choose file", here you can create directories too.

[iPad] How To Add Source To Cydia

noreply@blogger.com (Dr.Mohammed) — Mon, 11 Apr 2011 22:15:00 +0000

I will show here how you can add sources to cydia, to be able to download latest cracked apps

What you need:

Jailbreak iPad
Cydia Installed

How To Add Sources To Cydia

1.Open "Cydia"

2.Click on "Edit" to the right upper corner

3. Click "Add" on the left upper corner

4. Now right the source you want to add and click "Add Source"

5. Wait till verification and downloading required files ....

6. Now your source is added successfully.

[Case Study] Online Shopping - Jordan

noreply@blogger.com (Dr.Mohammed) — Sat, 26 Mar 2011 21:56:00 +0000

Anybody live in Jordan knows how there are a lot of shopping places everywhere, i am not talking about small shops, i am talking about mega-stores! the main problem here is the high price, and in a lot of times the low quality stuff ("made in china" !!! ) ,add to that; you don't find exactly what you want, especially for electronics and hardware parts . (ya you can find it , but for 3X the original price!)

So what to do ? The answer is online shopping, but wait!! is it safe? does my stuff arrive? they maybe lost? continue reading please.

Online Shopping , is it safe?

First thing pop in the mind regarding online shopping is "is it safe?" ; so the answer is "yes ,it is; but.." there is some things you have to be aware of , for example dont ever buy from unknown online sites, don't ever enter your visa card number on unknown sites.....so how you will know which site is trusted? i will give you small tutorial for safe online shopping.

I can find my stuff at my local stores, so why should i go online?

Simply you will get better quality ,for lower prices, i think i saved more than 50% of the stuff i bought online instead of buying them from local stores!

What can i buy online?

Well......everything , anything you want you will find online, but!!!! some stuff is not recommend to be bough online such as clothes or shoes , not because its not possible, but because European and USA standards for clothes differ than our standards.

What else? obviously prohibited things that will not get through the customs, such as explosive stuff, harmful, alcohol...etc

How much time it will take?

This depends on shipping methods and the place, usually if your stuff is coming from far east it will take around 2-3 week, if it comes from USA and Europe it will take around 2 week or less.

But as i said it depends on the shipping method , a lot of site offers faster shipping method that may decrease delivery time to around a week, of course it will cost more.

Does my stuff really arrive?

Yes! in 99% of times it will, but sometimes it may lost during the shipping, but don't worry, most of the sites offer a refund for your stuff in case it lost, i will explain this

The shipping is costly?

No its not, in a lot of time you will pay nothing for shipping, but this will take around 2-3 weeks to arrive and maybe longer, but if you need your stuff really fast you will pay additional cost for fast shipping.

All this is theoretical talk, did you try it yourself?

Yes i did, i will give some example of some stuff i bought and the delivery time and the shipping cost.

Wireless headphone!
Price: 9$ (~6 JD)
how much it cost here? around 10-15 JD !!
Shipping Time: 3 Weeks.

Voltmeter!

Price: 3$ (~2 JD)

How much it cost here? around 10 JD !!

Shipping Time: 4 Weeks.

Car charger for my phone.

Price: 2$ (~1 JD)

How much it cost here? around 5 JD !!

Shipping Time: 2 Weeks.

Pouch for my phone!

Price: 3$ (~2 JD)

How much it cost here? I dont know, maybe the same (2 JD ) but i dont think i found something cool as that!

Shipping Time: 2 Weeks.

Connector kit!

Price: 35$ (~25 JD)

How much it cost here? around 45 JD !! yes!! double the price!

Shipping Time: not arrived yet!

There is a lot of other stuff that i bought such as headphones, screen protectors, cables....etc which cost less than 1$ (~0.7 JD).

Okay...okay i want all that cool stuff, how can i start?

These steps applied to Jordan, and it based on my experience, so i will give the easiest way to do that.

1. You should get internet shopping card, and the best bank offer that is Iskan bank and Arab bank, i prefer to go with Iskan bank.

Iskan bank offers the card for 8 JD, and you can charge it with whatever amount you like, you get your card within minutes, and it ready to be used at the end of the day.

Arab bank card needs one week to get it, and it charge with JDs so you will pay exchange rate every time you buy something, but the good thing in Arab bank you can track all your purchase online which Iskan bank didn't offer that(not a big deal!)

2. After you get your card, go to PayPal.com and make account there,this site protects your card and your purchases as well, with this site you will use your user name and password to purchase stuff instead of using your visa card number each time, add to that , the site offer a protection for your purchase in a case the stuff didn't arrive or if you have any other problem.

3. After you make account at PayPal, they will ask you to associate your card, and then they will take 2.99$ to make sure that is your card for real and not anybody else, you will need to enter a unique number they included with the 2.99$ transfer, you can call the bank and ask them for that number, after you enter the number on PayPal they refund you back for 2.99 $ and you are ready to start buying stuff!

Where does my stuff delivered?

To your inbox (post office box)

Will the customs cause me any problem?

Usually no, unless your stuff is more than 150 JD, which will charge your for 20-28% of the original price.

What is the best sites to buy from? and safest as well?

A lot of sites are consider safe, but i like to use:

1. eBay.com

2. Amazon.com (some stuff cant be shipped to Jordan!)

I like to use eBay, you can find everything on it for good price and most of the stuff can be shipped to Jordan, any official sites is consider safe such as Microsoft, apple, ....etc

What if i really need that stuff and the seller dont offer shipping to Jordan?

Simply you can open account at Aramex.com , which provide you with two address, one in USA and one in UK ,and you can use these address to ship your stuff to, by that you will be sure that your stuff will be shipped safely and you will save some $$ for overseas shipping, add to that your stuff will arrive in less than a week!

Aramex offer one time payment for life long box, and they only charge your for the shipping cost depending on the weight of your package.

Conclusion!

I really recommend online shopping for buying stuff that you cant find here, or if their prices are very high, and for electronic parts, mobile accessories, and Books, of course if you dont mind waiting for 2-3 weeks for your stuff to arrive!

[LAN] Multimedia Streaming -VLC

noreply@blogger.com (Dr.Mohammed) — Mon, 14 Feb 2011 11:05:00 +0000

-
You want to watch a movie, but you want to watch it using your laptop ,but the movie is on desktop PC, so what you have to do now?! copying it?! this take a long time, so what to do?

The answer is "Streaming" , in this tutorial i will show you how to stream media using VLC .

Media Streaming !

1. Download VLC. (18 Mb , availabe for Linux,Windows.Mac)

2. Open VLC on the computer you want to stream from it .

3. Go to "Media" > "Streaming".

4. Add the file you want to stream ,it doesn't matter if its a video or music, then click "Stream".

5. New window will open ,for the one called "Source" leave it and click next.

6. For the second step the screen called "Destinations", now choose the new destination as "UDP (legacy)" and click add .

7. Write the IP address of the computer you want to stream to ,then click Next ,

8. Now Click Stream ,

Now open VLC on the destination PC

1. Go to "Media" > " open network stream" ,

2. Now write the IP address of the computer you stream from,

If you are behind firewall you may need to open the port "1234" to allow streaming .

Download This Post (PDF)

See Also!

1. [Case Study] Wireless Security In Jordan

2. [Internet] How To Locate Email Sender Location!

3. [App] Speed Up Your Computer Boot

[ROM] DarkMoon v01 7-Jan (RTL Support,Hebrew,Arabic....)

noreply@blogger.com (Dr.Mohammed) — Fri, 07 Jan 2011 20:45:00 +0000

Here is another ROM for Optimus one , i called it "DarkMoon"

As a lot of users are looking for Rom that support RTL languages (Hebrew, Arabic...) so i decided to make one for them.

Features:
v01:

Build on V10a

Kernel 2.6.32.9

RTL languages support

Root permissions (root+superuser)

BusyBox

Zipalign all Apk files

Deodex all Apk files

Apps2SD

Dalvik2sd

Custom boot animation

JIT, hardware acceleration enabled

Overclock to 748mhz (optional check section II below)

Applications removed: LG Home

Applications added: Titanium backup, Astro file manager ,smartkeyboard,and ADW luncher

Section I : Flashing DarkMoon V1 Rom

What you need:
1.Root (SuperOneClick for CLShortFuse)

2.Custom recovery (Custom Recovery P500 for drellisdee)

3.DarkMoon V1 Rom (from here)

How to flash:
1. Reboot into recovery (hold Home+Down+On keys)

2. Make Nandroid backup

3. Partition your SDcard , we need (swap: 0) and (ext: 512 or more (i like to choose 1024))

4. upgrade ext2-ext3, and then ext3-ext4 .

5. wipe all your data (cache,dalvik-cache,ext,.android....)

6. Copy DarkMoon rom by selection (USB-MS toggle) then after finish copying disconnect it.

7. Flash by choosing (flash zip from sdcard) and select DarkMoon_V1.zip

8. After flash complete choose "Reboot system now"

thats it!!!

P.S:
*remember, you need to wait for 5-10 minute after the first boot, its normal !

Section II : OverClock
If you want to overclock your phone to 748 mhz (which is very stable for me) then you need:

1. download drellisdee OC kernel from here ([GPL] GNM OC BETA [p500 & p509] Kernel) . read the post carefully and donate to him if you can!

2. Reboot into recovery (hold Home+Down+On keys)

3. Make Nandroid backup (just in case!)

4. Flash by choosing (flash zip from sdcard) and select (signed_thunderg_oc_beta_gnm.zip)

5. After flashing complete reboot your device.

6. Install coolbho3000 SetCPU from here ( SetCPU for Root Users ) . read the post carefully and donate to him if you can!

7. Open SetCPU apps. and give him root permission

8. Slide to the speed you want (speed around 748 is stable for me!)

P.S
if your device freeze when using setcpu or after you set higher speeds dont worry, just reboot your device and your CPU speed will go back to 600 again, try lower value for OC.

Benchmarking:

it scored 1152 on quadrant

Great how-to:
[HOWTO] Cook your custom rom for LG P500 By janitux

[REF] Repository of howto's, roms, kernel, etc. By Noejn

[GPL] GNM OC BETA [p500 & p509] Kernel By drellisdee

[DEV] Custom Recovery P500/Thunderg By drellisdee

[Case Study] Wireless Security In Jordan

noreply@blogger.com (Dr.Mohammed) — Tue, 04 Jan 2011 21:06:00 +0000

I always been curious about how secure wireless networks in Amman (Jordan) ,so i decided to do a small project, Wardriving !

Wardriving In Amman (Jordan)

So here are the equipments i used:

LG P500 Optimus one mobile (GPS enabled)
Android OS 2.2 Froyo
Wifi Agent Apps (available for free in Google Market)
Google Earth (on my PC)
Calculator

So this journey took more than 1 hour and covered around 35 km of major streets in Amman, i started the application on my phone and placed it in a good place in the car to receive the best coverage, after that i uploaded the generated file to my PC and import it to Google earth ,after some calculation ,here are the results (summarized! for more details check Data section below):

Results

Number of Access points (AP) : 1811

Encryption type:

Open : 202 (11%)
WEP : 379 (21%)
WPA : 1230 (68%)

Names of AP :

TP-LINK (15%)
Linksys

Analysis

In December 2004, a class of 100 undergraduates worked to map the city of Seattle, Washington over several weeks ,they found 5,225 access points; 44% were secured with WEP encryption, 52% were open, and 3% were pay-for-access. (wiki)

In my study the number was better , WEP encryption was only 21% , and only 11% were open, so does this mean that we are more secure than USA?! no , not necessary , because Seattle study conducted in 2004 when WEP encryption was so popular back then, but at the same time not secure at all! so 32% of our wireless network here in Jordan are vulnerable to be hacked (21% WEP +11% Open) , as WEP is know to be not secure at all now and can be hacked within 10 minute .

Conclusion and Recommendation

32% of wireless network vulnerable to be hacked is very huge number ,add to that my project performed in the main street in the middle of Amman, where most of these network belong to either companies or governmental institution, so we have to change our encryption type to more secure one such as WPA/WPA2 (for more info how to secure your wireless network click here) , I think if this study performed around small streets and in residential areas ,i think the number will be more higher.

About the AP names, most of the names were default names, and i think the password will be default too!

Data

If you interested in the study or you want the data i collected please let me know. (Kml ,excel files....)

[Video] Chat in Ubuntu 10.04

noreply@blogger.com (Dr.Mohammed) — Tue, 24 Aug 2010 19:07:00 +0000

How to setup your chat accounts in Ubuntu 10.04 for facebook, yahoo, msn, google talk.....

Note: Watch the video in full screen for better quality.

Download this post (PDF)

See Also!

[Internet] Disposable Email Address

[Linux] Change MAC Address In Ubuntu 10.04!

noreply@blogger.com (Dr.Mohammed) — Tue, 03 Aug 2010 20:42:00 +0000

I explained in previous post how to change the MAC address in Ubuntu ,but here is another way that is more simpler and faster, we will use application called "macchanger".

Install macchanger

Type in the terminal :

sudo apt-get install macchanger

Commands used in the video:

sudo su
ifconfig wlan0 down
macchanger -s wlan0
macchanger -m 00:11:22:33:44:55 wlan0
ifconfig wlan0 up

note: if you want to change the MAC for ethernet adapter just change wlan0 to eth0,eth1..

See Also!

Windows Password Hacking

[Hack] Windows Password Hacking!

noreply@blogger.com (Dr.Mohammed) — Tue, 27 Jul 2010 16:44:00 +0000

Today i will show you how to crack Windows password ,this technique tested on Windows XP ,Windows 7

Requirements:

Linux Live CD (any live CD will do it ,i recommend Ubuntu Live CD, or BackTrack Live CD) as i am "BackTrack-er" i will use BackTrack.
Time needed : 2-3 minutes

The idea behind this technique is changing the access for sethc.exe file to cmd.exe ,sethc file is the Stickykeys application; you can provoke it by pressing shift 5 times ,and cmd.exe is the usual command prompt, so we will make windows start command prompt instead of sticky keys application when we press shift 5 times.

note: we can use utilman.exe (utility manager) instead of sethc.exe ,you can provoke it by pressing windows login key + U .

Crack Windows Password! (not really!)

1. Boot BackTrack Live CD.

2. Here is our file (sethc.exe) ,its located in "Windows/system32" folder.

3. You can rename files from the file browser directly, or you can use the console, i will use the console; its faster, browse to the location of the files (system32).

4. What we will do is rename "sethc.exe" to "sethc.old" and rename "cmd.exe" to "seth.exe" i will use the following commands:

mv sethc.exe sethc.old
mv cmd.exe sethc.exe

5. Reboot.

6. Now you will see the login screen.

7. Press shift 5 times and the command prompt should appear.

8. Start the explorer.

9. Now you can do whatever you want! you have full access .

How to protect yourself!

Change boot priority so your HDD is the first choice.
Disable USB boot if you dont use it.
Secure BIOS setup menu by password.

Links

Download this Post (PDF).

See Also!

[Hack] Session Sidejacking Using Hamster!

noreply@blogger.com (Dr.Mohammed) — Sun, 18 Jul 2010 12:27:00 +0000

Lets start with the definition :

session hijacking refers to the exploitation of a valid computer session—sometimes also called a session key—to gain unauthorized access to information or services in a computer system. (Wikipedia)

In other words , that means that you are seeing same websites that the victim sees, add to that you have full access to that website ,for example if the victim visit Facebook and he entered his user name and password, you cant see the user name and password, but you can use his Facebook page as if its yours, so you can delete friends, add comments, change status, everything!! and this concept apply to any web site ,such as mail accounts.

I am not explaining this technique to be used in wrong way, i am showing you this to know how you can be insecure if you are not using secure sites, this technique does not work for web sites that use SSL security, and now most of the sites offer SSL security, another thing, you have to be careful if you are using unknown free network (hotspot!).

http://www.facebook.com/

https://www.facebook.com/ <=== Secure site SSL !

As usual all tutorial use backtrack4, before using this tutorial you have to make arpspoof attack to the target, i explain that in previous post but i will write the commands again here without explanation.

echo 1 > /proc/sys/net/ipv4/ip_forward
arpspoof -i eth0 -t 192.168.1.12 192.168.1.1
arpspoof -i eth0 -t 192.168.1.1 192.168.1.12

SideJacking Using Hamster!

1. Open console.

2. Go to hamster folder

cd /pentest/sniffers/hamster/

(note: this may be different if you are using other Linux distors, just search for hamster folder)

3. Start hamster

./hamster

4. Now go to your internet browser ( i use Firefox ) go to Tools and clear your cookies.

5. Now we will change the proxy settings to what hamster uses;

Edit > Preference > Advance > Network > Settings

6. Chane the proxy to "Manual proxy configuration" and type 127.0.0.1 and port 1234.

7. Now type " hamster" in address bar.

8. Click on adapters to choose which adapter you want to use ( i will use eth0, you can use whatever adapter you want according to your network type, if you are connecting to the network using your wireless adapter, then you have to use wlan0 )

9. After a while , you will start seeing the targets, click in anyone of them and the cookies will appear on the left,

10. So i have one cookies says " www.facebook,com/home...." after clicking it you will see the victim page as if you are the owner! you can do whatever you want!

11. Here is another example for yahoo mail,

Again this way is not effective for SSL secure sites (https), so next time you login to any site make sure to use https if he has one.
This Attack could be combined with DNS spoof attack to get the passwords!

See Also!

[Security] Man In The Middle Attack (MiTM) !

[Video] Network Managment In BackTrack4

noreply@blogger.com (Dr.Mohammed) — Wed, 07 Jul 2010 17:50:00 +0000

Some people don't know how to use network settings in Backtrack4 , so here is a video showing you how to activate network settings and connecting to wireless network and wired network to share files between Linux and Windows machine; its very easy.

Network Connection Using Backtrack4

Commands used in the video:

wicd
wicd-client
smb:/

See Also!

[Internet] Disposable Email Address

[Internet] Disposable Email Address!

noreply@blogger.com (Dr.Mohammed) — Sat, 03 Jul 2010 16:03:00 +0000

Download This Post (PDF)

Don't you hate having a lot of spam emails in your personal email account? In most of times when you register in new website or forum there are a good chance that your email will be distributed to advertising companies, so you need email account to verify registration for websites and in the same time you don't want to use your personal email!! so here is the solution, Temporary (Disposable) email account!!!

Temporary Email Account I

1. Go to Mailinator .

2. With this site you don't have to do anything!! just send your emails to any chosen email address end with "@mailinator.com",such as Mohammed@mailinator.com ,MohammedSuperTech@mailinator.com ,or anything you want! the account automatically created after sending emails to it !!

3. Here an example when i sent email from my yahoo account to MohammedSuperTech@mailinator.com.

4. Then i went to Mailinator, and i entered my user name "MohammedSuperTech" in the box says "Check your inbox" in the left corner, and it arrived immediately!

5. You can delete or forward the email!

Temporary Email Account II

1. Go to guerrillamail.

2. Scroll down ,now you have two options ,either to make random email account ,or to choose specific user name.

3. Now your email is ready ,you will receive emails directly to this website ,you can click the "reload" button shown to check for new emails ,the email is valid for 1 hour ,but it can be extended!

4. In this site the email arrived after 5 minutes .

5. After clicking "show" button.....

6. You can delete or reply the email.

There are a lot of other services :

See Also !

[Internet] Use Fake IP & Hide Your Identity Online!

noreply@blogger.com (Dr.Mohammed) — Fri, 02 Jul 2010 17:36:00 +0000

Download This Post PDF

Sometimes you need to hide your identity and browse anonymously, this is useful if you want to watch some video content that is not available in you country (Hulu ,ABC....) or simply you hate when site gives you some information to your location!

First of all you have to know what is your IP to make sure that you are successfully change it , so go to WhatIsMyIP.

Change Proxy Setting!

This technique involves using a proxy to hide your IP ,

1. First go to DigitalCyberSoft and choose any proxy from there, you can see that proxy IP address is listed as 129.105.15.37:3127 , so the proxy IP is 129.105.15.37 and the port is 3127

2. (Firefox) Go to Tools > Option > Advance > Network > Settings , and choose "Manual proxy configuration" and write the IP and the port, Click OK .

If you are using internet explorer ( Tools > Internet Options > Connections > LAN Settings ) .

3. To make sure you successfully change it, we will go to WhatIsMyIP again and make sure it changed.

Use Web Proxy

You can visit certain sites that give you the ability to surf anonymously ,

Use Software!

There are a lot of applications that change your IP address, you can take a look here (Google Search Link).

See Also!

[How To] 3 Steps To Destroy Your Computer!

[Security] Man In The Middle Attack (MiTM) !

noreply@blogger.com (Dr.Mohammed) — Thu, 01 Jul 2010 23:42:00 +0000

Download This Post PDF

MiTM attack is very dangerous attack, this attack put the users of specific network at great risk , because every single information could be retrieved by the hacker easily, this includes user names , passwords ,visited sites, images , emails sent, IM (yahoo messenger, MSN ....) and much more , simply your connection is no longer secure at all !

So , what is MiTM attack? here is the definition from Wikipedia: (if you are familiar with definition skip to the practical part!!)

".....In cryptography, the man-in-the-middle attack (often abbreviated MITM), bucket-brigade attack, or sometimes Janus attack, is a form of active eavesdropping in which the attacker makes independent connections with the victims and relays messages between them, making them believe that they are talking directly to each other over a private connection, when in fact the entire conversation is controlled by the attacker. The attacker must be able to intercept all messages going between the two victims and inject new ones, which is straightforward in many circumstances (for example, an attacker within reception range of an unencrypted Wi-Fi wireless access point, can insert himself as a man-in-the-middle)......" From Wikipedia.

This simply means if i have user A , and user B , and both of them connected to each other, the technique is done by sending a message to user A from the hacker says " hi A ; I am B" , and to user B " hi B ; I am A " that means you fool each side and make them believe that you are the other part, by doing this all the connection will go through you !

MiTM Attack!

I will explain how you can perform MiTM by using Backtrack4 , this tutorial is very important for network security administrators , because it gives you a good idea for what information can be discovered in you network and to help you fix this problem.

Things you have to know before starting:

You have to have access to the network you want to examine.
You have to know the IP address of the victim , and the router (gateway, server...).
I am using LAN connection so i will use my ethernet adapter , so i will use (eth0) interface, change it according to what you have, if you are using wireless connection for example use (wlan0 , ath0 ...) .
I TAKE NO RESPONSIBILITY FOR ANY MISUSE FOR THIS GUIDE.

1. First; you have enable IP forwarding.

echo 1 > /proc/sys/net/ipv4/ip_forward

2. We will do ARP spoofing for both the target and the server (or router or the gateway) :

arpspoof -i eth0 -t targetip gatewayip

-i eth0 : the adapter you are use, mine is eth0 .
-t targetip : substitute this with your target ip , my target at 192.168.127.129
gatewayip : this stands for server, router,or the gateway IP, my router at 192.168.127.1

So the command will be :

arpspoof -i eth0 -t 192.168.127.129 192.168.127.1

3. Now we have to run the command for the router too , (keep the previous command running ; open new window) but notice the target IP (after -t ) will be the router here, because we are targeting the router in this step (arpspoof -i eth0 -t gatewayip targetip )

arpspoof -i eth0 -t 192.168.127.1 192.168.127.129

4. Next step is to make sure that you are successfully poison the two target, and this step will give you a look at all information the target requests (remember keep the previous two command running all the time!).

tcpdump host 192.168.127.129 and not arp -i eth0

You will see a lot of information , this shows you when the victim request www.google.com , you can see the time , victim IP , the port used, the website URL .....etc

5. If you are expert user you are maybe satisfied to what you got in Tcpdump , so you can analysis everything you have , and even dump it to a file ( add "> filename" to the previous command) but to make things much easier , there are other commands you can use to make things more simple and to check how much secure your information :

macof -i eth0

This attack floods the LAN with random MAC addresses, in a lot of times this may cause the LAN to collapse and stop responding for a while, you can add "-s" to specify source IP address and "-d" for destination IP address.

dsniff -i eth0

Password sniffer , it can sniff a various type of passwords such as FTP, Telnet, SMTP, HTTP, POP...etc. here is an example, the username is admin and the password was shown too! (i hide it !!)

msgsnarf -i eth0

Sniff chat messages from common IM client, such as Yahoo, MSN , AIM ...

urlsnarf -i eth0

This shows websites visited , see the image below after the target request mail.yahoo.com

driftnet -i eth0

This shows images (jpeg,jpg) that target see.

You can save them too, by simply clicking over the photo.

DNS Spoof !

Redirect the requested websites to another sites!

I explained this in previous post using ettercap , but this technique is much simpler and straightforward.

1. Step 1,2,and 3 above should be running!
2. In this example we will direct any request for Yahoo to Google , so we have to know Google IP , we will write :

ping www.google.com

3. We will create a file called dnsspoof.hosts

kate dnsspoof.hosts

and write in it:

Save the file and exit.

4.Now we will start spoofing:

dnsspoof -i eth0 -f dnsspoof.hosts

5. Here is the target requesting www.yahoo.com

And here is the result :

Here is our output :

There are a lot of other commands that can be used in MiTM attack feel free to take a look at them, here is a list with all other command:

arpspoof : send out unrequested (and possibly forged) arp replies.
dnsspoof: forge replies to arbitrary DNS address / pointer queries on the Local Area Network.
dsniff::password sniffer for several protocols.
filesnarf:saves selected files sniffed from NFS traffic.
macof: flood the local network with random MAC addresses.
mailsnarf: sniffs mail on the LAN and stores it in mbox format.
msgsnarf: record selected messages from different Instant Messengers.
sshmitm: SSH monkey-in-the-middle. proxies and sniffs SSH traffic.
sshow: SSH traffic analyzer.
tcpkill: kills specified in-progress TCP connections.
tcpnice: slow down specified TCP connections via "active" traffic shaping.
urlsnarf: output selected URLs sniffed from HTTP traffic in CLF.
webmitm: HTTP / HTTPS monkey-in-the-middle. transparently proxies.
webspy: sends URLs sniffed from a client to your local browser.

See Also!

[Security] DNS Spoofing!
[Security] Wireless Network Hacking!

[Internet] How To Locate Email Sender Location!

noreply@blogger.com (Dr.Mohammed) — Thu, 24 Jun 2010 09:31:00 +0000

Today i will show you how you can trace email sender address, of course this tutorial is not 100% accurate, but it usually gives you an idea about the location for the sender .

Email Tracing!

1. Open the email you want to trace.

2. Look at the right lower corner of the screen; you will see something called "Full headers" , click it.

3. Now start looking from the bottom of headers and go up till you found something called "Received" , its exactly above the sender email address and the date and time, copy the IP address (its the number that comes after "from...." , look at the image below.

4. Go to What Is My IP and enter the IP address in the box and click "Lookup" .

5. Now you will see a lot of information, such as the country , city name, internet provider company, the exact location latitude, longitude, and you will see image from Google Earth too,

As i said the information provided is not 100% accurate , in this example it gave me a location somewhere in downtown- Amman, but i live 20 km away from there!

Notice that we depend on the IP address , so as you know most of the times the IP address changed automatically when we disconnect and reconnect again, but this could be very useful to determine locations of companies ! in the image below i traced email i received from Google, and the result was 100% accurate!

You can copy the latitude and longitude and look for them in Wikimapia.com to show the exact location for this coordinate , but you have to add "N" after latitude and "E" after the longitude , see the image below.

Reference

Download This Post (PDF)

See Also!

[How To] 3 Steps To Destroy Your Computer!

[How To] Boot From USB!

noreply@blogger.com (Dr.Mohammed) — Mon, 21 Jun 2010 10:08:00 +0000

Booting from USB is very handy thing , if you need to do something when you are away from your computer , and if you want to do things privately using others computer .

How To Boot From USB!

1. Download UNetBootin . ( Sourceforge.net , 4.36 MB , EXE )

2. Install UNetBootin , and start it.

3. Choose which distubuation you want and the version .

4. Now you can download .iso image from the website given , or you can locate it in your computer if you have it .

5. At the bottem of the screen , choose in which drive you want to create the bootable USB (My flash drive is drive K) and click OK.

6. Wait .....

7. Now reboot your computer, and remember you have to choose to boot from USB when your computer starts, this can be done either by clicking specific key (in my case F8) or to change the priorities in the boot setting in BIOS setup (press Del ) .

See Also!

[App] Speed Up Your Computer Boot!

[How To] 3 Steps To Destroy Your Computer!

noreply@blogger.com (Dr.Mohammed) — Sat, 19 Jun 2010 17:45:00 +0000

Seriously, do you feel sometimes angry from your computer ? do you want to destroy it within seconds? here is 3 ways to make your computer useless within seconds!

Warning: Mohammed SuperTech! blog holds no responsibility for the misuse of this tutorial, and for any damage that may occur!

Seriously, some of these methods need serious work to repair it, and some needs formatting your computer, so use at your own risk.

How To Destroy Your Computer!

Access Denied !!

1. First way is to remove all access privileges that given to you , or even worse , for any other user in your computer, that means nothing will work in your computer after you reboot , because simply you are not authorized to use anything! yes , anything!!

2. Go to "Start" > "run" and type "regedit" .

3. Registry editor screen will open .

4. Right click on the "HKEY_CLASSES_ROOT" and choose "Permissions.." .

5. Remove all the users by choosing the user name then click "Remove" .

6. Repeat step 5 for all users until you remove all of them , then click "Apply" then "OK".

7. Repeat Steps 4-6 for all other keys "HKEY_CURRENT_USER" , "HKEY_LOCAL_MACHINE" ......etc .

8. After you finish close "Registry Editor" screen and reboot your computer .

9. After rebooting you will have screen telling you "Access denied" , click "OK" .

10. Thats it ! dont expect that anything else will work !! i tried pressing "ctrl-alt-del" to start "explorer.exe" but i found nothing in "My Computer" folder!!!

NTLDR is Missing!!

1. NTLDR is abbreviation for NT loader, simply its responsible for starting your windows, so in this step we will delete it ;)

2. We will show hidden files and show the protected operating system files , follow the photos below.

"My Computer" > "Tools" > "Folder Options"

"View"> choose "show hidden files and folders"

and remove the tick from "Hide protected system files" , you will have confirmation message , click yes.

3. Click "Apply" and "OK" .

4. Go to "My computer" > " C:" and delete the files shown in the photo below!

5. Reboot your computer and..... The final result!

P.S this can be repaired easily be reinstalling boot loader again!

Invalid Boot.ini File!!!

1. This looks similar to the previous way, as NTLDR needs boot.ini file for booting, we will mess up with this file.

2. Show hidden files and show the protected operating system files , as shown in the steps 2 -3 above.

3. Go to "My computer" > " C:" and open Boot.ini file with notepad .

4. Erase everything and write whatever you want , save it , and reboot your computer.

5. Tadaaa!

See Also!

[APP] Speed Up Your Computer Boot.