Virtual Tutor

MitM Attack using Bettercap.

noreply@blogger.com (Anonymous) — Sun, 4 Dec 2016 10:47:00 +0530

Man in the middle attack

Man-in-the-Middle Attack generally abbreviated as MitM, In computer security a man-in-the-middle attack is an attack where the attacker secretly relays and possibly alters the communication between two parties who believe they are directly communicating with each other. One example of man-in-the-middle attacks is active eavesdropping, in which the attacker makes independent connections with the victims and relays messages between them to make them believe they are talking directly to each other over a private connection, when in fact the entire conversation is controlled by the attacker.

As show in the above diagram Suppose user wishes to communicate some other device or person via internate Meanwhile, Attacker wishes to intercept the conversation to eavesdrop and optionally to deliver a false message between them.

bettercap

BetterCAP is a powerful, flexible and portable tool created to perform various types of MITM attacks against a network, manipulate HTTP, HTTPS and TCP traffic in realtime, sniff for credentials and much more.

Installation

First we need to install the rubygems dependency to run BetterCAP, enter following command to install dependency from gem, if you already install that then skip it.

sudo apt-get install build-essential ruby-dev libpcap-dev

After that install the BetterCAP using the following command

sudo apt-get install bettercap

If you have trouble to install BetterCAP using above command then try

gem install bettercap

Mitm using BetterCAP

Now get started bettercap with type "bettercap -h" it will show various options and operations available in bettercap.

-T         : Specify MitM target
-I    : Interface to use
-G        : Specify gateway address
--ignore              : ignore specified addresses
-X             : enable sniffer mode
-S           : spoof using ARP, ICMP, NONE
--kill       : kill connection for any target
--log       : log the output to someware
--log-timestamp : add a timestamp to the log

It will provide many options you can find by typing

bettercap -h

Sniffing Traffic

Sniffing mode bettercap capture all the details of user and its activity like creditcard data, Cleartext passwords over HTTP, FTP, POP, IMAP, SMTP, Cookies, database connection, URLs, etc

you can enable sniffing mode in bettercap using following command....

bettercap -X -T<victim's ip>

Using bettercap we can analyze the traffic of entire network and find suspicious activity in the network. here following screenshots that shows that which information sniff by bettercap.

The above figure shows the cookies captured by the battercap.

The image shows the list of creditcard data means creditcard numbers which is highlighted.

it will also capable to capture request header and request body it will also show in figure.

the above image shows the information about the device like device name, its ip address, connection type, language, device model, operating system, operating system version, mac address and other important details.

We can also save the traffic into the log file for the future process use with timestamp, using --log-timestamp append this command with sniffing or other command for example

bettercap -X -T192.168.0.101 --log-timestamp sniff

Sniffing & Credentials Harvesting

The builtin sniffer is currently able to dissect and print from the network the following information:

URLs being visited.
HTTPS hosts being visited.
HTTP POSTed data.
HTTP Basic and Digest authentications.
HTTP Cookies.
FTP credentials.
IRC credentials.
POP, IMAP and SMTP credentials.
NTLMv1/v2 ( HTTP, SMB, LDAP, etc ) credentials.
DICT Protocol credentials.
MPD Credentials.
NNTP Credentials.
DHCP messages and authentication.
REDIS login credentials.
RLOGIN credentials.
SNPP credentials.
And more!

Servers

Bettercap also provides the inbuilt servers like HTTP & DNS it allow you to serve custom contents from your own machine without installing and configuring other softwares such as Apache, nginx or lighttpd.

Proxy

Bettercap is shipped with a HTTP/HTTPS and raw TCP transparent proxies that you can use to manipulate HTTP/HTTPS or low level TCP traffic at runtime, for instance you could use the HTTP/HTTPS proxy to inject javascripts into the targets visited pages.

Once one or more proxies are enabled, bettercap will take care of the spoofing and the firewall rules needed in order to redirect your targets’ traffic to the proxy itself. It will Provides proxy for TCP, HTTP, HTTPS, and SSLSTRIP.

By default the builtin proxies won’t do anything but logging all the requests, additionally you can specify a “module” to use and you will be able to load one of the builtin plugins and manipulate all the traffic as you like.

LEGAL DECLAIMER

If you do not fully understand something on this material, then go outside of here! refer to the laws in your province/country before accessing, using, or in any other way utilizing these material.

These material are for only educational and research purpose only. we are not responsible for any kind of misuse of this material.

If you Like This Please Share With Your Friends!

sqlmap Tutorial Using kali linux

noreply@blogger.com (Anonymous) — Fri, 4 Nov 2016 14:29:00 +0530

What is SQL Injection?

SQL injection is an attack technique that exploits a security vulnerability occurring in the database layer of an application. Hackers use injections to obtain unauthorized access to the underlying data, structure, and DBMS. It is one of the most common web application vulnerabilities.

SQL Injections happen when a developer accepts user input that is directly placed into a SQL Statement and doesn’t properly validate and filter out dangerous characters. This can allow an attacker to alter SQL statements passed to the database as parameters and enable her to not only steal data from your database, but also modify and delete it.

What is SQLmap?

“it is an open source penetration testing tool that automates the process of detecting and exploiting SQL injection flaws and taking over of database servers.”

It comes with a powerful detection engine, many niche features for the ultimate penetration tester and a broad range of switches lasting from database fingerprinting, over data fetching from the database, to accessing the underlying file system and executing commands on the operating system via out-of-band connections.

Features of sqlmap

Full support for MySQL, Oracle, PostgreSQL, Microsoft SQL Server, Microsoft Access, IBM DB2, SQLite, Firebird, Sybase and SAP MaxDB database management systems.

Full support for six SQL injection techniques: boolean-based blind, time-based blind, error-based, UNION query, stacked queries and out-of-band.

Support to directly connect to the database without passing via a SQL injection, by providing DBMS credentials, IP address, port and database name.

Support to enumerate users, password hashes, privileges, roles, databases, tables and columns.

Automatic recognition of password hash formats and support for cracking them using a dictionary-based attack.

Support to dump database tables entirely, a range of entries or specific columns as per user’s choice. The user can also choose to dump only a range of characters from each column’s entry.

Support to search for specific database names, specific tables across all databases or specific columns across all databases’ tables. This is useful, for instance, to identify tables containing custom application credentials where relevant columns’ names contain string like name and pass.

Support to download and upload any file from the database server underlying file system when the database software is MySQL, PostgreSQL or Microsoft SQL Server.

Support to execute arbitrary commands and retrieve their standard output on the database server underlying operating system when the database software is MySQL, PostgreSQL or Microsoft SQL Server.

Support to establish an out-of-band stateful TCP connection between the attacker machine and the database server underlying operating system. This channel can be an interactive command prompt, a Meterpreter session or a graphical user interface (VNC) session as per user’s choice.

Support for database process user privilege escalation via Metasploit’s Meterpreter getsystem command.

Hacking web application using sqlmap

First of all you need to Kali or backtrack Linux and running on your computer or laptop. Other linux os might be work but you need to install sqlmap separately while kali linux provides it as inbuilt package. If you don’t have kali linux installed in your computer then you can use Bootable USB or kali linux LIVE CD.

Now Boot your computer using kali linux after that Find the sqlmap from the application which is located in

Application → Database assessment → sqlmap

Type into the terminal following command

Sqlmap –u http://testphp.vulnweb.com/listproducts.php?cat=1

When you enter this command it will displays the some message. Sqlmap process the URL and test some query on that URL and it will find that entered URL is vulnerable or not. Sometimes sqlmap ask the permission as yes/no like “it looks like the back-end DBMS is ‘MySQL’. Do you want to skip test payload specific for other DBMSes? [Y/n]” you can enter your choice as "y" or "n".

(Here Note that sqlmap provides info message as green color warning message as yellow color and error message as red color.)

Now the turn the Enumeration of website database.

Enter the following command to find the available database of the website.

Sqlmap –u http://testphp.vulnweb.com/listproducts.php?cat=1 --dbs

The following command finds the available databases from the entered website, here you can see that two database available on the following website.here --dbs option is used to Enumerate DBMS databases.

Now we choose the acuart database to Enumerates tables, this will shows that how many tables are into the acuart database. so first you will specify that which database table you want to enumerate so you can use the -D <Database name> and Replace --dbs to --tables.

Sqlmap –u http://testphp.vulnweb.com/listproducts.php?cat=1 -D acuart --tables

The result of above command is looks like

Now you have the list of the tables of the acuart database, now choose any table from the above 8 tables.

Here i will choose the categ table and try to find the columns and table structure of the categ table. to enumerates the columns of the categ table enter the following command.

Sqlmap –u http://testphp.vulnweb.com/listproducts.php?cat=1 -D acuart -T categ --Columns

Here in the categ table 3 columns are available output are displayed into the above shot. now you have target database, tables and table structure so it's time to dumping the data from the specific table.

Now we will getting data from the multiple columns as well as single columns also, here we will specify the database with -D, table with -T and columns with -C, multiple columns are separated by comma. --dump is use to get all data from specified columns. The final command looks like

Sqlmap –u http://testphp.vulnweb.com/listproducts.php?cat=1 -D acuart -T categ -C cat_id,cdesc,cname --dump

Here is the Result of above command.

Here total 4 entry into the categ table and those all entry are copied into the categ.csv file which is located in ./sqlmap directory.

To get this file you need to copy that file into the somewhere into your computer, you will need to change directory from the following command and reach the dump directory.

cd .sqlmap/output/testphp.vulnweb.com/dump/acuart

After reach acuart directory type ls command to get list of the files and directory into the current directory. now copy the categ.csv file into the root directory so you can use it for further processing, enter the following command.

cp categ.csv /root

The cd and cp both commands are shown in bellow shot.

LEGAL DISCLAIMER

If you do not fully understand something on this material, then go outside of here! refer to the laws in your province/country before accessing, using, or in any other way utilizing these material.

These material are for only educational and research purpose only. we are not responsible for any kind of misuse of this material.

If you Like This Please Share With Your Friends!

Wine Tutorial : to installing and managing windows programs on linux.

noreply@blogger.com (Anonymous) — Sun, 18 Sep 2016 15:16:00 +0530

Introduction to Wine

Different software programs are designed for different operating systems and cause of platform dependency they cant run on different platform. for example, windows programs won't run in Linux because they contain instructions that the system can't understand until they're translated by the Windows environment likewise, Linux Programs won't run under the Windows operating system because Windows is unable to interpret all of their instructions. This situation presents a fundamental problem for anyone who wants to run software for both Windows and Linux. A common solution for this problem is to install both operating systems on the same computer, known as "dual booting". When a Windows program is needed, the user boots the machine into Windows to run it; when a Linux program is needed, then the user reboots the machine into Linux.

This option presents great difficulty because of frequently rebooting of specific system and switch on to another os like windows or ubuntu. the solution of the problem is the use of wine application on mac os or linux os

Wine makes it possible to run Windows programs alongside any Unix operating system, particularly Linux. Wine is an implementation of the Windows Application Programing Interface (API) library, acting as a bridge between the Windows program and Linux. Think of Wine as a compatibility layer, when a Windows program tries to perform a function that Linux doesn't normally understand, Wine will translate that program's instruction into one supported by the system. For example, if a program asks the system to create a Windows push button or text-edit field, Wine will convert that instruction into its Linux equivalent in the form of a command to the window manager using the standard X11 protocol.

Features of wine

Support for running Win64, Win32 (Win 95/98, NT/2000/XP/2003/Vista/2008/7/2012/10), Win16 (Win 3.1) and DOS programs
Optional use of external vendor DLL files (such as those included with Windows)
X11-based graphics display, allowing remote display to any X terminal, as well as a text mode console
Desktop-in-a-box or mixable windows
DirectX support for games
Good support for various sound drivers including OSS and ALSA
Support for alternative input devices such as graphics tablets.
Printing: PostScript interface driver (psdrv) to standard Unix PostScript print services
Modem, serial device support
Winsock TCP/IP networking support
ASPI interface (SCSI) support for scanners, CD writers, and other devices
Advanced Unicode and foreign language support
Full-featured Wine debugger and configurable trace logging messages for easier troubleshooting

Ubuntu versions of Wine (Recommended)

open the software center
Type wine and install 'wine'

Newer versions of Wine (Not Recommended)

If you are using an older version of Wine and want support from WineHQ, you will need to upgrade to the latest development version first. If you do this, however, please file associated Wine bugs at winehq's Bugzilla Page rather than in Launchpad.

Initial Setup of Wine

Before using Wine, it is necessary to create the fake C: drive where your Windows applications will be installed. To do this, enter the following command into the terminal (You may find the terminal by going to Applications -> Accessories -> Terminal).

winecfg

You also have the option of configuring Wine via the Configure Wine option in the Applications-> Wine menu. This will create a hidden folder (.wine) in your home directory containing the fake C: drive as well as registry files similar to those used in Windows. Once this directory is created, the Wine Configuration Window will appear. This window will allow you to customize a variety of settings for Wine, including which Windows Version that is emulated, drive mappings, DLL overrides, as well as application specific settings. Click the Ok button to close the window.

Installing Windows Applications With Wine

To install Windows applications using Wine, follow these instructions:

Download the Windows application from any source (e.g. download.com). Download the .EXE (executable).
Place it in a convenient directory (e.g. the desktop, or home folder).
Open the terminal, and cd into the directory where the .EXE is located.
Type wine the-name-of-the-application.extension (e.g. wine realplayer_installer.exe).
This will start the .EXE using Wine. If it is an installer, it should then run as it would in Windows. If the application asks for a directory to install the application to, select put it under C:\Program Files.

To start/run Windows programs using Wine

After installing an application using the directions above, those applications can be started and used by entering wine programname.exe (e.g. wine realplayer.exe). When done, close the application as one would normally. You must run the installed executable, which will by default be in the virtual Windows drive created by Wine, at ~/.wine/drive_c. Generally programs will install themselves somewhere under Program Files inside the virtual Windows drive, following Windows conventions.

You can also use the Wine file browser, by running winefile in a terminal. Clicking the C:\ button in the toolbar will open a window where you can browse the virtual Windows drive created in .wine. Double clicking an executable in the Wine file browser will run it in Wine.

Instead of having to always enter the terminal or use the Wine file browser, you may also create a desktop icon, and start a Wine application using that icon. To do this, right click on the desktop and select "Create a launcher." If you wish, select an icon from the list of available icons (or browse to an icon you would like to use), fill out other information that is requested (Name, generic name, etc.). For the command, type in wine the-location-of-the-program.exe (e.g. wine /home/john/.wine/realplayer.exe). The most important part of creating a launcher is the command, the generic name is not as important. Just make sure you de-select "Run in terminal." This completes the process.

In some cases the application requires to be running from a certain location. In this case create launcher with command

sh -c "cd /home/USER/.wine/drive_c/Program Files/Appdir/; wine /home/USER/.wine/drive_c/Program Files/Appdir/game.exe"

Of course you will need to replace USER and Appdir with the proper data.

If you desire to have an icon on the panel, create a launcher on the panel of choice. Do this by right-clicking the panel, selecting "Add to Panel," and selecting "Custom Application Launcher." This will ask you for the same information as before.

Alternatively, to make life easier, you can set it so wine will automatically open .exe files files for you - instead of using the Wine File to locate the file each time. To do so, right click on the .exe file, select Properties, and then select the Open With tab. Click the 'Add' button, and then click on 'Use a custom command'. In the line that appears, type in wine, then click Add, and Close. Now all .exe files will be automatically opened by Wine, so you can use Nautilus to browse and open them instead of the Wine File.

Uninstalling Wine Applications

Open up a terminal window and type the command below.

wine uninstaller

What this will do is open up a program similar to the Windows add/remove programs control panel, allowing you to uninstall applications from a Wine installation. Running uninstall programs directly via Wine should also work normally. Alternatively, you could also simply delete the folder of the application. However, as when done in Windows, this method will be unclean and will not remove the program's configuration from the Wine registry like using an uninstaller will.

Configuring Wine

On the command line or in Run Application, type

winecfg

Adding CD and DVD drives to Wine

Go to the drives tab in winecfg. Hit the Autodetect button.
If you find that this does not work correctly for you, then follow these instructions:

Open Run and Type winecfg in textbox
Navigate to the drives tab
Click on Add...
In the path bar, type /media/cdrom
Click Show Advanced button below the Browse... button and set the Type to CD-ROM
Click OK

If you have more than one CD/DVD device you will need to identify each one differently. Use /media/cdrom0 for the first CD/DVD device, /media/cdrom1 for the second one, and so on. If in doubt, type the following command in your terminal.

ls -la ~/.wine/dosdevices/

What this command will do is check your CD/DVD device details after Wine is installed.

Adding applications to the menu

It is good procedure before setting up the menu entry to launch the new Windows program from the command line to make sure the program runs properly. To do this type this command in the terminal.

wine "C:\PATHTOPROGRAM\Program.exe"

For example the command would be wine "C:\Program Files\Medal Of Honor Allied Assault\MOHHA.exe" Once you are satisfied that you have the correct details, use the normal menu editing process to add a new entry. When you get to the Command field of the entry editor be sure to copy and paste the line you used to launch the program from the terminal. Finish and save the new entry. Test to make sure the new Windows program loads via the menu.

Changing application specific settings

Type this command into your terminal.

winecfg

Click on Add Application...
Navigate to where the .exe is and choose that program
The dropdown at the bottom allows you to choose which version of Windows Wine should emulate. Also, any changes to the Libraries and Graphics tabs will only affect the chosen application in the Applications tab.

100 Greatest Hacking Tools that must have every hacker!

noreply@blogger.com (Anonymous) — Tue, 13 Sep 2016 12:14:00 +0530

Hacking could be great fun if you have the right kind of tools coming in handy. Well, look not further as here's a list of top 100 must-have tools for hackers.

Here are the top 100 hacking tools being used by pros around the world nowadays.

Wireless Hacking: These are tools that help you hack into wireless networks. Wireless hacking tools though useful, do not make you a complete hacker. In order to achieve that, you must learn the different ways in which a secure network can be accessed. Also, you should work on making your own network as secure as possible.

1. Aircrack-ng

2. Kismet

3. inSSIDer

4. KisMAC

Intrusion Detection Systems: Intrusion detection tools are one of the most important part of any security arrangement. They allow you to detect those threats that are potentially dangerous for your system.

1. Snort

2. NetCop

Port Scanners: port Scanner is an application designed to probe a server or host for open ports. This is often used by administrators to verify security policies of their networks and by attackers to identify services running on a host and exploit vulnerabilities.

1. Nmap

2. Superscan

3. Angry IP Scanner

Encryption Tools: In an age where more and more governments are being found spying on their own citizens, encryption is the word of the day. These tools allow you to encrypt your data so that even if someone does get through, they can’t get to the data easily.

1. TrueCrypt

2. OpenSSH

3. Putty

4. OpenSSL

5. Tor

6. OpenVPN

7. Stunnel

8. KeePass

Password Crackers: The name is pretty self explanatory in this case. These tools help you recover passwords from the data that a computer system is storing or transmitting over a network.

1. Ophcrack

2. Medusa

3. RainbowCrack

4. Wfuzz

5. Brutus

6. L0phtCrack

7. fgdump

8. THC Hydra

9. John The Ripper

10. Aircrack - Aircrack is 802.11 WEP and WPA-PSK keys cracking program.

11. Cain and Abel

Packet Crafting: Packet crafting is the technique through which an attacker finds vulnerabilities or entry points within your firewall. These tools help you achieve that more easily.

1. Hping

2. Scapy

3. Netcat

4. Yersinia

5. Nemesis

6. Socat

Traffic Monitoring: These are tools that let you monitor what websites your employees or children are monitoring.

1. Splunk

2. Nagios

3. P0f

4. Ngrep

Packet Sniffers: These are tools that can allow you to capture and visualise the traffic that is coming on your website.

1. Wireshark

2. Tcpdump

3. Ettercap

4. dsniff

5. EtherApe

Vulnerability Exploitation: These are the tools that you would use in order to gain access to various places.

1. Metasploit

2. sqlmap

3. sqlninja

4. Social Engineer Toolkit

5. NetSparker

6. BeEF

7. Dradis

For 50 more of such free hacking tools, click here

Vulnerability Scanners: These are programs that have been designed to asses a computer or network’s vulnerability to attacks. The functionality of these tools varies from one to the other, but they all present a detailed analysis of how vulnerable your system is.

1. Nessus

2. OpenVAS

3. Nipper

4. Secunia PSI

5. Retina

6. QualysGuard

7. Nexpose

Web Vulnerability Scanners: While vulnerability scanners are meant for your system, web vulnerability scanners assess the vulnerability of web applications. The identify the security vulnerabilities that your app may have through various tests.

1. Burp Suite

2. WebScarab

3. Websecurify

4. Nikto

5. w3af

Web Proxies: Proxies were originally created in order to add encapsulation to distributed systems. The client contacts a proxy server in order to request an item that exists on your server.

1. Paros

2. Fiddler

3. Ratproxy

4. sslstrip

Rootkit Detectors: This tool is a file and directory integrity checker. It verifies if a file is trustworthy and informs the user if found otherwise.

1. AIDE (Advanced Intrusion Detection Environment)

Firewalls: You obviously know what a Firewall is. These monitor and control the traffic in your network, whether incoming or outgoing. They are essential security tools that are used by the most novice to the most advanced users.

1. Netfilter

2. PF: OpenBSD Packet Filter

Fuzzers: The concept of fuzzing is usually put to use in order to test the security vulnerabilities of computer systems or in the software that runs on them.

1. skipfish

2. Wfuzz

3. Wapiti

4. W3af

Forensics: This refers to tools that are used for computer forensic. They are used in order to find evidence that is existing in computer systems.

1. Sleuth Kit

2. Helix

3. Malteg0

4. Encase

Debuggers: These are tools that are used in order to write exploits, reverse engineer binary files and to analyse malware.

1. GDB

2. Immunity Debugger

Hacking Operating Systems: These are operating systems that have been designed specifically for hackers. These distros are preloaded with tools that a hacker needs etc.

1. Backtrack 5r3

2. Kali Linux

3. SELinux

4. Knoppix

5. BackBox Linux

6. Pentoo

7. Matriux Krypton

8. NodeZero

9. Blackbuntu

10. Samurai Web Testing Framework

11. WEAKERTH4N

12. CAINE (Computer Aided Investigative Environment)

13. Bugtraq

14. DEFT

15. Helix

Other Hacking Tools: There are also other miscellaneous hacking tools that are often used by hackers. They can’t be put into a particular category, but they are still quite useful.

1. Netcat

2. Traceroute

3. Ping.eu

4. Dig

5. cURLCourtesy: EFY

7 Apps To Help You Run Windows Programs On Another OS

noreply@blogger.com (Anonymous) — Sat, 10 Sep 2016 19:07:00 +0530

So you have switched to another operating system, but still miss some of your favourite programs on Windows? Here are 7 app to help your run Windows program on your current platform!

now a day popularity of Linux based OSes are spreading like wildfire, and many others are opting for Mac OS as well. But let's face it, Windows is still the most used operating system for desktops and laptops. And if you are also a Windows user who is willing to switch to another platform but is held back by your favorite Windows applications, here's a 7 Apps To Help You Run Windows Programs On Another OS.....

1. Wine

Started in 1993, Wine is an open source project. The project is developed and maintained by the community under the coordination of Alexandre Julliard.

The already popular app is compatibility layer between Windows programs and the operating system. It converts Windows API calls to POSIX calls, thus allowing integration of Windows applications to POSIX-compliant OS (Mac OS X, GNU/Linux, and BSD). Rather than an emulator or virtual machine, it is a reimplementation of Win32 API.

The app basically supports Windows XP, but support for newer versions of Windows is actively included in its new releases. Wine supports 32-bit architecture; support for 64-bit architecture is still under development. It allows you to run programs like MS Office, Windows Media Player, Adobe Photoshop, Max Payne, and several other games and applications.

2. CrossOver

CrossOver is the commercialized and supported version of Wine for Linux and Mac OS X. The proprietary software comes with out-of-the-box support for many commercial Windows applications like MS Office, MS Outlook, MS .NET Framework, Adobe Lightroom, DirectX, etc.

You can also play games like Counter Strike, Diablo, StartCraft, Half Life, World of Warcraft via this. Though Wine is a free alternative, CrossOver, provided by CodeWeavers, is a better choice for professionals and organizations who want to run particular software on Linux or Mac OS X.

3. PlayOnLinux

While Wine and CrossOver both provide support for a lot of applications with Wine, you are required to customize settings for the particular app, and for CrossOver you have to fork out money for it. PlayOnLinux is a nice alternative for both.

PlayOnLinux is a graphical front-end for Wine compatibility layer. It simplifies the installation of Windows apps and especially games on GNU/Linux by auto-configuring Wine. It provides wrapper shell scripts to specify the configuration of Wine for any particular software. It also uses an online database of scripts to apply for different programs, and a manual installation can be performed if the script is not available.

4. WineBottler

WineBottler is an app packager, which means it packages Windows-based applications into Mac app-bundles. The name suggests that it is connected to Wine, which is basically how you can run Windows programs with it on your Mac. To use it, install it. That’s it.

Click the Install button in WineBottler and it will take care of the rest. It comes with handy scripts that take care of downloading, installing, and configuring an application for you. WineBottler can pack your Windows .exe software into Mac .app package and convert .exe or .msi into an app. It even provides options to install special dependencies.

5. PlayOnMac

Like PlayOnLinux, PlayOnMac is a graphical software built on top of Wine. It aims to ease the installation of Windows programs and games on Mac OS.

You can use PlayOnMac to easily install many apps and games on Mac OS, without the need of making changes to Wine’s configuration for that particular program. PlayOnMac takes care of Wine’s settings so that you don’t have to configure them manually, and you can enjoy using the software or game.

6. Q4Wine

Q4Wine is a QT4 graphical user interface for the Wine compatibility layer. It’s available for GNU/Linux and FreeBSD. It helps you to manage Wine prefixes and installed applications in an easy-to-use graphical interface.

Q4Wine lets you easily handle tasks for creating and managing Wine prefixes, controlling Wine processes, making backup of prefixes, and many more tasks that would otherwise not be as easy to handle.

7. Wineskin

Wineskin, which also uses Wine to run Windows applications, is a porting tool. It allows you to port Windows applications in Mac application bundle wrappers, which can then run on Mac OS X and even shared with other Mac users. It works with Snow Leopard, Lion and Mountain Lion.

Wineskin uses a customized version of X Window System, known as WineskinX11, to provide the graphical user interface for Windows programs on the Mac OS X. Once you have created a Mac application bundle of any Windows program, you can easily run it on your Mac OS X just like any other native software. For more info, check out the documentation.

Courtesy: EFY

Implementation and Time analysis of linear search algorithm

noreply@blogger.com (Anonymous) — Fri, 2 Sep 2016 12:01:00 +0530

linear search or sequential search is a method for finding a target value within a list. It sequentially checks each element of the list for the target value until a match is found or until all the elements have been searched.

Linear search runs in at worst linear time and makes at most

n

comparisons, where

n

is the length of the list. If each element is equally likely to be searched, then linear search has an average case of

n / 2

comparisons, but the average case can be affected if the search probabilities for each element vary. Linear search is rarely practical because other search algorithms and schemes, such as the binary search algorithm and hash tables, allow significantly faster searching for all but short lists.

//time analysis of linear searching....

#include<iostream>
#include<sys/time.h>
using namespace std;
struct timeval t1,t2;

class linear
{
    int a[100],count,i;
    public:
        void getdata(int n)
        {
            for(int i=1;i<=n;i++)
            {
                cin>>a[i];
            }
        }
        void putdata(int n)
        {
            for(int i=1;i<=n;i++)
            {
                cout<<" "<<a[i];
            }
            cout<<"\n";
        }
        void searchdata(int n,int x)
        {
            for(i=1;i<=n;i++)
            {
                if(x==a[i])
                {
                    count++;
                    cout<<"\n"<<a[i]<<" element is found at position :"<<i<<endl;
                }

            }
            if(count==0)
            {
                cout<<"element is not found\n";
            }
            putdata(n);
        }
    };
int main()
{
    double t;
    int n,x;
    linear lnr;
    cout<<"-----:Implementaton of Linear Search Algorithm:-----";
    cout<<"enter the no of elements you want ::-";
    cin>>n;
    cout<<"------enter list-----\n";
    lnr.getdata(n);
    cout<<"\n-----list-----";
    lnr.putdata(n);
    cout<<"\nEnter element you want to search ::-\t";
    cin>>x;
    gettimeofday(&t1,'\0');
    lnr.searchdata(n,x);
    gettimeofday(&t2,'\0');
    t=(double)(t2.tv_usec-t1.tv_usec)/1000000+(double)(t2.tv_usec-t1.tv_usec);
    cout<<"time diff:"<<t<<"usec.\n";
    return 0;
}

Implementation And Time analysis of Binary Search algorithm

noreply@blogger.com (Anonymous) — Wed, 31 Aug 2016 13:37:00 +0530

binary search, also known as half-interval search or logarithmic search, is a search algorithm that finds the position of a target value within a sorted array. It compares the target value to the middle element of the array; if they are unequal, the half in which the target cannot lie is eliminated and the search continues on the remaining half until it is successful.

Binary search runs in at worst logarithmic time, making comparisons, where is the number of elements in the array and is the binary logarithm and using only constant space. Although specialized data structures designed for fast searching—such as hash tables—can be searched more efficiently, binary search applies to a wider range of search problems.

Although the idea is simple, implementing binary search correctly requires attention to some subtleties about its exit conditions and midpoint calculation.

//implementation and time analysis of binary searching....
#include<iostream>
#include<sys/time.h>
using namespace std;
struct timeval t1,t2;
void bin_srch(int n,int x[],int find)
{
    int beg,end,mid;
    beg=1;
    end=n;
    mid=(beg+end)/2;
    while(beg<=end && x[mid]!=find)
    {
        if(x[mid]<find)
            beg=mid+1;
        else
            end=mid-1;

        mid=(beg+end)/2;
    }

    if(x[mid]==find)
    {
        cout<<"\nData is Found at Location : "<<mid;
    }
    else
    {
        cout<<"Data is Not Found";
    }

}
int main()
{
    int a[100],n,i,srch;
    double t;
    cout<<"\n------------ BINARY SEARCH ------------ \n\n";
    cout<<"Enter No. of Elements= ";
    cin>>n;

    cout<<"\nEnter Elements ::-\n";
    for(i=1;i<=n;i++)
    {
        cin>>a[i];
    }
    gettimeofday(&t1,'\0');
    for(i=1;i<=n-1;i++)
    {
        for(int j=n;j>=i+1;j--)
        {
            int temp;
            if(a[j]<a[j-1])
            {
                temp=a[j];
                a[j]=a[j-1];
                a[j-1]=temp;
            }
        }
    }
    cout<<"Sorted Element is:";
    for(i=1;i<=n;i++)
    {
        cout<<a[i]<<" ";
    }
    cout<<"\n\nEnter Item you want to Search ::- ";
    cin>>srch;
    bin_srch(n,a,srch);
    gettimeofday(&t2,'\0');
    t=(double)(t2.tv_usec-t1.tv_usec)/1000000+(double)(t2.tv_usec-t1.tv_usec);
    cout<<"\n\n Time required for binary searching is :"<<t<<" usec."<<endl;
    return 0;
}

/*******************************************************************************

OUTPUT

------------ BINARY SEARCH ------------

Enter No. of Elements= 7

Enter Elements ::-
6
30
78
99
121
35
1
Sorted Element is:1 6 30 35 78 99 121

Enter Item you want to Search ::- 78

Data is Found at Location : 5

Time required for binary searching is :550540 usec.

***************************************************************************/

RUN COMMANDS

noreply@blogger.com (Anonymous) — Mon, 8 Aug 2016 14:45:00 +0530

The RUN commands allows to quickly access features and applications to customize operating system environment. These run commands are available for almost all settings available in Windows control panel.

Accessibility Controls
access.cpl

Add Hardware Wizard
hdwwiz.cpl

Add/Remove Programs
appwiz.cpl

Administrative Tools
control.exe admintools

Automatic Updates
wuaucpl.cpl

Bluetooth Transfer Wizard
fsquirt

Calculator
calc

Certificate Manager
certmgr.msc

Character Map
charmap

Check Disk Utility
chkdsk

Clipboard Viewer
clipbrd

Command Prompt
cmd

Component Services
dcomcnfg

Computer Management
compmgmt.msc

Date and Time Properties
timedate.cpl

DDE Shares
ddeshare

Device Manager
devmgmt.msc

Direct X Control Panel (if installed)
directx.cpl

Direct X Troubleshooter
dxdiag

Disk Cleanup Utility
cleanmgr

Disk Defragment
dfrg.msc

Disk Management
diskmgmt.msc

Disk Partition Manager
diskpart

Display Properties
control.exe desktop

Display Properties
desk.cpl

Display Properties (w/Appearance Tab Preselected)
control.exe color

Dr. Watson System Troubleshooting Utility
drwtsn32

Driver Verifier Utility
verifier

Event Viewer
eventvwr.msc

File Signature Verification Tool
sigverif

Findfast
findfast.cpl

Folders Properties
control.exe folders

Fonts
control.exe fonts

Fonts Folder
fonts

Free Cell Card Game
freecell

Game Controllers
joy.cpl

Group Policy Editor (XP Prof)
gpedit.msc

Hearts Card Game
mshearts

Iexpress Wizard
iexpress

Indexing Service
ciadv.msc

Internet Properties
inetcpl.cpl

Java Control Panel (if installed)
jpicpl32.cpl

Java Control Panel (if installed)
javaws

Keyboard Properties
control.exe keyboard

Local Security Settings
secpol.msc

Local Users and Groups
lusrmgr.msc

Logs You Out Of Windows
logoff

Microsoft Chat
winchat

Minesweeper Game
winmine

Mouse Properties
control.exe mouse

Mouse Properties
main.cpl

Network Connections
control.exe netconnections

Network Connections
ncpa.cpl

Network Setup Wizard
netsetup.cpl

Nview Desktop Manager (if installed)
nvtuicpl.cpl

Object Packager
packager

ODBC Data Source Administrator
odbccp32.cpl

On Screen Keyboard
osk

Opens AC3 Filter (if installed)
ac3filter.cpl

Password Properties
password.cpl

Performance Monitor
perfmon.msc

Performance Monitor
perfmon

Phone and Modem Options
telephon.cpl

Power Configuration
powercfg.cpl

Printers and Faxes
control.exe printers

Printers Folder
printers

Private Character Editor
eudcedit

Quicktime (If Installed)
QuickTime.cpl

Regional Settings
intl.cpl

Registry Editor
regedit

Registry Editor
regedit32

Removable Storage
ntmsmgr.msc

Removable Storage Operator Requests
ntmsoprq.msc

Resultant Set of Policy
rsop.msc

Resultant Set of Policy (XP Prof)
rsop.msc

Scanners and Cameras
sticpl.cpl

Scheduled Tasks
control.exe schedtasks

Security Center
wscui.cpl

Services
services.msc

Shared Folders
fsmgmt.msc

Shuts Down Windows
shutdown

Sounds and Audio
mmsys.cpl

Spider Solitare Card Game
spider

SQL Client Configuration
cliconfg

System Configuration Editor
sysedit

System Configuration Utility
msconfig

System File Checker Utility
sfc

System Properties
sysdm.cpl

Task Manager
taskmgr

Telnet Client
telnet

User Account Management
nusrmgr.cpl

Utility Manager
utilman

Windows Firewall
firewall.cpl

Windows Magnifier
magnify

Windows Management Infrastructure
wmimgmt.msc

Windows System Security Tool
syskey

Windows Update Launches
wupdmgr

Wordpad
write

Note : This command may not work on windows newer version like windows 8.1 and windows 10

How to shutdown linux machine on network

noreply@blogger.com (Anonymous) — Wed, 27 Jul 2016 14:12:00 +0530

To shutdown the local machine immediately, we can execute this command as root or under sudo:

$ shutdown -h now

If it is a remote server that we want to shutdown, it could be slightly more involved.
we need to have root privileges to shutdown a machine. However, many systems are configured to block root from logging in remotely using ssh. So, we need to ssh in as a regular, non-root user, and pass the sudo command to shutdown host.

$ ssh -t 192.168.1.112 'sudo shutdown -h now'
peter@192.168.1.112's password: 
[sudo] password for peter:

SQL INJECTION INTRODUCTION

noreply@blogger.com (Anonymous) — Wed, 29 Jun 2016 14:13:00 +0530

What are SQL injections?

An SQL injection is a kind of injection vulnerability in which the attacker tries to inject arbitrary pieces of malicious data into the input fields of an application, which, when processed by the application, causes that data to be executed as a piece of code by the back end SQL server, thereby giving undesired results which the developer of the application did not anticipate. The backend server can be any SQL server (MySQL, MSSQL, ORACLE, POSTGRESS, to name a few)

The ability of the attacker to execute code (SQL statements) through vulnerable input parameters empowers him to directly interact with the back end SQL server, thereby leveraging almost a complete compromise of system in most cases.

What are different types of SQL injections?

SQL injections can be classified and categorized in different ways, based on the type of data extraction channel, the response received from server, how server responses aid in leveraging the successful exploitation, impact point, etc.

Based on the data extraction channel

Inband or inline
Out-of-band

SQL injections that use the same communication channel as input to dump the information back are called inband or inline SQL Injections. This is one of the most common methods, readily explained on the Internet in different posts. For example, a query parameter, if injectable, leads to the dumping of info on the web page.

Injections that use a secondary or different communication channel to dump the output of queries performed via the input channel are referred to as out-of-band SQL injections. For example, the injection is made to a web application and a secondary channel such as DNS queries is used to dump the data back to the attacker domain.

Based on the response received from the server

Error-based SQL injections
- Union query type.
- Double query Injections.

Blind SQL Injections
- Boolean-based blind injections.
- Time based blind injections.

Error-based SQL injections are primarily those in which the SQL server dumps some errors back to the user via the web application and this error aids in successful exploitation. In the image below, the yellow line displays the error. These will be discussed further in this post and in related posts to come.

Blind SQL injections are those injections in which the back-end database reacts to the input, but somehow the errors are concealed by the web application and not displayed to the end users. Or the output is not dumped directly to the screen. Therefore, the name “blind” comes from the fact that the injector is blindly injected using some calculated assumptions and tries.

Based on how the input is treated in SQL query (what data type)

String-based
Numeric- or integer based

Based on how the input parameter would be treated in the back end SQL query, an injection can be classified as string- or integer-based.

Based on the degree/order of injections (where the impact happens)

First-order injections.
Second-order injections.

The degree or the order of injection identifies the way in which the injection yields the output. If the injection directly delivers the result, it is considered to be a first-order injection, but if the injection input yields no successful result in extraction, but instead impacts some other result which the attacker can take advantage of on some other place/page, it is called a second-order injection. Consider second-order injections similar to stored XSS injections, where the input is stored in the application and later rendered on some other page, thereby impacting that page indirectly because of initial malicious input.

Based on the injection point location

Injection through user input form fields.
Injection through cookies.
Injection through server variables. (headers-based injections)

Why does SQL injection happen?
Generally when an application is communicating with the backend database, it does so in the form of queries with the help of an underlying database driver. This driver is dependent on the application platform being used and the type of backend database, such as MYSQL, MSSQL, DB2, or ORACLE.

A generic login query would look something like this:

`SELECT Column1, Column2,Column3 FROM table_name WHERE username=’$variable1′ AND password=’$variable2′;`

We can split this query into two parts, code section and the data section. The data section is the $variable1 and $variable2 and quotes are being used around the variable to define the string boundary.

Let us try to walk through the process in a crude way. Say at the login form, the username entered is Admin and password is p@ssw0rd which is collected by application and values of $variable1 and $variable2 are placed at their respective locations in the query, making it something like this.

`SELECT Column1, column2, Column3 FROM table_name WHERE username=’Admin’ AND password=’p@ssw0rd’;`

Now the developer assumes that users of his application will always put a username and password combination to get a valid query for evaluation by database backend. What if the user is malicious and enters some characters which have some special meaning in the query? For example a single quote. So, instead of putting Admin, he puts Admin’, thereby causing an error thrown by the DB driver. Why? Because of the unpaired quote entered by the user breaking the application logic.

We will discuss the process in detail. To summarize: Whenever an attacker is able to escape the data boundaries, he can append data which then gets interpreted as code by the DB Driver and is executed on the SQL back-end, thereby causing SQL injection.

ERROR-based SQL injections

In general, all programming languages give developers a flexibility to debug and fix their applications by using some inbuilt error-handling functions/libraries. These could be some explicit function, classes, or methods that deliver friendly error messages so that the troubleshooting experience can be streamlined and detecting the part of code responsible for raising those exceptions can be easier.

These functions should be controlled before an application goes to production because they can dump a lot of sensitive info about the application and underlying logic, thereby making it easy for a bad guy to exploit the application.

Therefore, those applications where these error-handling functions are available to aid in gaining useful info about the application or in dumping the database info by means of SQL interaction are classified as error-based SQL Injections.

Based on the way data is extracted using helpful errors, the error-based injections can be classified into two main types:

Union-query type
Double-query type