Readers Central

Introduction to the 10 Most Popular Password Cracking Tools

noreply@blogger.com (Moonlesknight) — Tue, 09 Oct 2018 18:17:00 +0000

A password is the secret word or phrase that is used for the authentication process in various applications. It is used to gain access to accounts and resources. A password protects our accounts or resources from unauthorized access.

What is Password Cracking?

Password cracking is the process of guessing or recovering a password from stored locations or from data transmission system. It is used to get a password for unauthorized access or to recover a forgotten password. In penetration testing, it is used to check the security of an application.

In recent years, computer programmers have been trying to create algorithms for password cracking in less time. Most of the password cracking tools try to login with every possible combination of words. If login is successful, it means the password was found. If the password is strong enough with a combination of numbers, characters and special characters, this cracking method may take hours to weeks or months. A few password cracking tools use a dictionary that contains passwords. These tools are totally dependent on the dictionary, so success rate is lower.

In the past few years, programmers have developed many password cracking tools. Every tool has its own advantages and disadvantages. In this post, we are covering a few of the most popular password cracking tools.

1. Brutus

Brutus is one of the most popular remote online password cracking tools. It claims to be the fastest and most flexible password cracking tool. This tool is free and is only available for Windows systems. It was released back in October 2000.

It supports HTTP (Basic Authentication), HTTP (HTML Form/CGI), POP3, FTP, SMB, Telnet and other types such as IMAP, NNTP, NetBus, etc. You can also create your own authentication types. This tool also supports multi-stage authentication engines and is able to connect 60 simultaneous targets. It also has resume and load options. So, you can pause the attack process any time and then resume whenever you want to resume.

This tool has not been updated for many years. Still, it can be useful for you.

2. RainbowCrack

RainbowCrack is a hash cracker tool that uses a large-scale time-memory trade off process for faster password cracking than traditional brute force tools. Time-memory trade off is a computational process in which all plain text and hash pairs are calculated by using a selected hash algorithm. After computation, results are stored in the rainbow table. This process is very time consuming. But, once the table is ready, it can crack a password must faster than brute force tools.

You also do not need to generate rainbow tablets by yourselves. Developers of RainbowCrack have also generated LM rainbow tables, NTLM rainbow tables, MD5 rainbow tables and Sha1 rainbow tables. Like RainbowCrack, these tables are also available for free. You can download these tables and use for your password cracking processes.

Download Rainbow tables here: http://project-rainbowcrack.com/table.htm

A few paid rainbow tables are also available, which you can buy from here: http://project-rainbowcrack.com/buy.php

This tool is available for both Windows and Linux systems.

Download Rainbow crack here: http://project-rainbowcrack.com/

3. Wfuzz

Wfuzz is another web application password cracking tool that tries to crack passwords with brute forcing. It can also be used to find hidden resources like directories, servlets and scripts. This tool can also identify different kind of injections including SQL Injection, XSS Injection, LDAP Injection, etc in Web applications.

Key features of Wfuzz password cracking tool:

Capability of injection via multiple points with multiple dictionary
Output in colored HTML
Post, headers and authentication data brute forcing
Proxy and SOCK Support, Multiple Proxy Support
Multi Threading
Brute force HTTP Password
POST and GET Brute forcing
Time delay between requests
Cookies fuzzing

Download here:

DOWNLOAD

4. Cain and Abel

Cain and Abel is a well-known password cracking tool that is capable of handling a variety of tasks. The most notable thing is that the tool is only available for Windows platforms. It can work as sniffer in the network, cracking encrypted passwords using the dictionary attack, recording VoIP conversations, brute force attacks, cryptanalysis attacks, revealing password boxes, uncovering cached passwords, decoding scrambled passwords, and analyzing routing protocols.

Cain and Abel does not exploit any vulnerability or bugs. It only covers security weakness of protocols to grab the password. This tool was developed for network administrators, security professionals, forensics staff, and penetration testers.

Download here: http://www.oxid.it/ca_um/

5. John the Ripper

John the Ripper is another well-known free open source password cracking tool for Linux, Unix and Mac OS X. A Windows version is also available. This tool can detect weak passwords. A pro version of the tool is also available, which offers better features and native packages for target operating systems. You can also download Openwall GNU/*/Linux that comes with John the Ripper.

Download John the Ripper here: http://www.openwall.com/john/

6. THC Hydra

THC Hydra is a fast network logon password cracking tool. When it is compared with other similar tools, it shows why it is faster. New modules are easy to install in the tool. You can easily add modules and enhance the features. It is available for Windows, Linux, Free BSD, Solaris and OS X. This tool supports various network protocols. Currently it supports Asterisk, AFP, Cisco AAA, Cisco auth, Cisco enable, CVS, Firebird, FTP, HTTP-FORM-GET, HTTP-FORM-POST, HTTP-GET, HTTP-HEAD, HTTP-PROXY, HTTPS-FORM-GET, HTTPS-FORM-POST, HTTPS-GET, HTTPS-HEAD, HTTP-Proxy, ICQ, IMAP, IRC, LDAP, MS-SQL, MYSQL, NCP, NNTP, Oracle Listener, Oracle SID, Oracle, PC-Anywhere, PCNFS, POP3, POSTGRES, RDP, Rexec, Rlogin, Rsh, SAP/R3, SIP, SMB, SMTP, SMTP Enum, SNMP, SOCKS5, SSH (v1 and v2), Subversion, Teamspeak (TS2), Telnet, VMware-Auth, VNC and XMPP.

Download THC Hydra here: https://www.thc.org/thc-hydra/

If you are a developer, you can also contribute to the tool’s development.

7. Medusa

Medusa is also a password cracking tool similar to THC Hydra. It claims to be a speedy parallel, modular and login brute forcing tool. It supports HTTP, FTP, CVS, AFP, IMAP, MS SQL, MYSQL, NCP, NNTP, POP3, PostgreSQL, pcAnywhere, rlogin, SMB, rsh, SMTP, SNMP, SSH, SVN, VNC, VmAuthd and Telnet. While cracking the password, host, username and password can be flexible input while performing the attack.

Medusa is a command line tool, so you need to learn commands before using the tool. Efficiency of the tool depends on network connectivity. On a local system, it can test 2000 passwords per minute.

With this tool, you can also perform a parallel attack. Suppose you want to crack passwords of a few email accounts simultaneously. You can specify the username list along with the password list.

Read more about this here: http://foofus.net/goons/jmk/medusa/medusa.html

Download Medusa here: http://www.foofus.net/jmk/tools/medusa-2.1.1.tar.gz

8. OphCrack

OphCrack is a free rainbow-table based password cracking tool for Windows. It is the most popular Windows password cracking tool, but can also be used on Linux and Mac systems. It cracks LM and NTLM hashes. For cracking Windows XP, Vista and Windows 7, free rainbow-tables are also available.

A live CD of OphCrack is also available to simplify the cracking. One can use the Live CD of OphCrack to crack Windows-based passwords. This tool is available for free.

Download OphCrack here: http://ophcrack.sourceforge.net/

Download free and premium rainbow tables for OphCrack here: http://ophcrack.sourceforge.net/tables.php

9. L0phtCrack

L0phtCrack is an alternative to OphCrack. It attempts to crack Windows password from hashes. For cracking passwords, it uses Windows workstations, network servers, primary domain controllers, and Active Directory. It also uses dictionary and brute force attacking for generating and guessing passwords. It was acquired by Symantec and discontinued in 2006. Later L0pht developers again re-acquired it and launched L0phtCrack in 2009.

It also comes with a schedule routine audit feature. One can set daily, weekly or monthly audits, and it will start scanning on the scheduled time.

Download L0phtCrack: http://www.l0phtcrack.com/download.html

10. Aircrack-NG

Aircrack-NG is a WiFi password cracking tool that can crack WEP or WPA passwords. It analyzes wireless encrypted packets and then tries to crack passwords via its cracking algorithm. It uses the FMS attack along with other useful attack techniques for cracking password. It is available for Linux and Windows systems. A live CD of Aircrack is also available.

If you want to use AirCrack NG for password cracking, read tutorials here: http://www.aircrack-ng.org/doku.php?id=getting_started

Download AirCrack-NG here: http://www.aircrack-ng.org/

How to create a password that is hard to crack

In this post, we have listed 10 password cracking tools. These tools try to crack passwords with different password cracking algorithms. Most of the password cracking tools are available for free. So, you should always try to have a strong password that is hard to crack by these password cracking tools. These are few tips you can try while creating a password.

The longer the password, the harder it is to crack: Password length is the most important factor. If you select a small password, password cracking tools can easily crack it by using few words combinations. A longer password will take a longer time in guessing. You’re your password at least 8 characters long.

Always use a combination of characters, numbers and special characters: This is another thing which makes passwords hard to crack. Password cracking tools try the combination of one by one. Have a combination of small characters, capital letters, and special characters. Suppose if you have only numbers in your password. Password cracking tools only need to guess numbers from 0-9. Here only length matters. But having a password combination of a-z, A-Z, 0-9 and other special characters with a good length will make it harder to crack. This kind of password sometimes takes weeks to crack.

Variety in passwords: One important thing you must always take care. Never use same password everywhere. Cyber criminals can steal passwords from one website and then try it on other websites too.

In case you are not sure about the strength of your password, you can check it from variety of online tools available for free.

What to avoid while selecting your password

There are a few things which were very common a few years back and still exist. Most of the password cracking tools start from there. Passwords that fall into this category are most easy to crack. These are the few password mistakes which you should avoid:

Never use a dictionary word
Avoid using your pet’s name, parent name, your phone number, driver’s license number or anything which is easy to guess.
Avoid using passwords with sequence or repeated characters: For Ex: 1111111, 12345678 or qwerty, asdfgh.
Avoid using passwords that fall in worst password list. Every year, data analysis companies publish the list of worst passwords of the year from analyzing the leaked password data.

The top 11 worst passwords of 2012:
- password
- 123456
- 12345678
- abc123
- qwerty
- monkey
- letmein
- dragon
- 111111
- baseball
- iloveyou

Microsoft Office 2016 Pro Plus Portable X64 FREE

noreply@blogger.com (Moonlesknight) — Thu, 14 Jun 2018 15:32:00 +0000

Technical Setup Details
Full Setup Size: 978 MB
Compatibility Architecture: 64 Bit (x64)
Preactivated

System Requirements
Operating System: Windows 7/8.1/10
OS Should be Up-to-date Updated
Memory (RAM): 2GB of RAM required
Hard Disk Space: 3 GB of free space required
Processor: 1GHz processor or later

Make Windows 10 boot faster

noreply@blogger.com (Moonlesknight) — Tue, 12 Jun 2018 06:47:00 +0000

Windows 10 is an amazing OS for gamers and has many settings giving every ounce of performance to the games. However, it is loaded with telemetry and unwanted application and services. So here is how you can optimize Windows 10 to make it boot faster in diskless environment and make it more responsive as well.

1. Download the Optimizer 4.1.exe

2. Boot one of the clients in superclient mode using a freshly uploaded Windows 10 image to desktop and copy then extract the Optimizer-4.1.exe.

3. Right click the optimizer and then run it as administrator, you will see the main window (Figure 1).

Figure 1

4. It will open, on the first tab "Universal" enable all options (Figure 2).

Figure 2

5. On second tab "Windows 10" also, enable all options (Figure 3).

Figure 3

6. On the "UWP Apps" table check the Select All check box and click Uninstall to remove all unused Windows 10 Apps (Figure 4)

Figure 4

7. Removing the Windows apps will take few minutes, once done, it will open a window with list of apps that were not removed, click "OK" to close it (Figure 5)

Figure 5

8. On "Cleaner" tab check the Select All check box and then click "Clean" button (Figure 6)

Figure 6

Note: please do this on a freshly install OS before uploading image.

ANNOUNCING THE ROG PHONE: CHANGING THE GAME FOR MOBILE

noreply@blogger.com (Moonlesknight) — Wed, 06 Jun 2018 09:38:00 +0000

Since its inception in 2006, the Republic of Gamers has pursued a mandate to push boundaries to deliver a better gaming experience. We started with motherboards, spread to virtually every DIY desktop component, and have been building hardcore gaming laptops for more than a decade.

The smartphones in that early era barely qualified as such, but they started a revolution that transformed the computing landscape. We watched closely as these digital sidearms became increasingly capable gaming machines and all-around computers, and we saw how developers harnessed their growing power to take mobile gameplay and graphics to the next level. We also gained insight from esports professionals, regular players, and game developers on how mobile gaming devices could be improved.

Now, the time is right to introduce the ROG Phone. Our first Android device combines special Snapdragon silicon with innovative cooling to produce silky frame rates you can actually sustain. Its uncompromised display blends blistering speed with beautiful HDR visuals, while programmable AirTriggers and tactile enhancements heighten your physical connection and comfort. There are other upgrades throughout, and the phone is joined by a collection of transformative accessories for docking with a desktop, doubling up on screens and batteries, and adding console-like controls alongside a wireless display. The whole family debuted today at Computex 2018 in Taipei, Taiwan.

Cherry-picked chips binned for speed and tuned for gaming

Performance is paramount for competitive gamers who need to stay one step ahead of their opponents, and for everyday players who don’t want hiccups ruining their immersion. Like other flagships, the ROG Phone is based on Qualcomm’s latest Snapdragon 845 SoC, whose eight Kryo CPU cores and Adreno 630 graphics have ample horsepower for the latest games. Rather than taking the standard processor, we worked the company to get a binned version selected specifically for its ability to run at faster frequencies. Exclusive to the ROG Phone, this special chip clocks up to 2.96GHz, nearly 200MHz higher than stock, making it Qualcomm’s fastest-ever mobile platform!

Your phone also needs to last all day, so the Snapdragon 845 aggressively reduces clock speeds during idle periods, and balances workloads between high-performance and power-efficient CPU cores. While these measures dramatically improve battery life, they can also introduce small delays that slow down your game. To prevent interruption, we developed X Mode, which raises the minimum clock speed to keep the CPU on its toes, and confines tasks to the chip’s four fastest cores to ensure maximum performance. You can enable this mode instantly from the Quick Settings menu or configure Game Center to activate it automatically when running your favorite games and any other apps that need a boost.

Powerful processors generate significant heat when running cutting-edge games, often leading to thermal throttling that turns flawlessly fluid gameplay into a stuttering slide show. Our new GameCool system improves thermals with a copper heat spreader and 3D vapor chamber that efficiently transfer heat away from the SoC and into the body. If you want an extra kick, the optional AeroActive Cooler blows air over the back to accelerate heat dissipation into the environment. This auxiliary cooler comes in the box and lowers the phone’s surface and processor temperatures enough to improve sustained performance for extremely strenuous gaming sessions.

Refuse to compromise on the display

Better performance means more frames per second, but a higher refresh rate is required to actually see them. The ROG Phone’s roomy 6” display refreshes at 90Hz, allowing it to draw 50% more frames than typical smartphone screens. The graphics and gameplay look and feel much smoother in titles optimized for high refresh rates.

Some high-refresh mobile displays suffer from slower pixel transitions that leave blurry ghosts trailing behind moving objects, but the ROG phone uses an ultra-fast AMOLED whose one-millisecond response time matches the pixel-flipping speed of our competition-grade ROG Swift PG258Q esports monitor. The graphics are crystal clear even in fast-paced and action-oriented titles with lots of movement.

The wide-gamut panel’s plentiful palette covers 108.6% of the cinema-grade DCI-P3 color space, painting a vivid picture whether you’re scavenging in a battle royale or scrolling through Instagram. Bottomless blacks and a 10,000:1 contrast ratio make imagery look bolder and more likelike, while HDR support extends the dynamic range. You don’t need special content to benefit from HDR, either. We use an independent image processing chip that enhances local contrast for all content. In addition to exposing more depth, this visual treatment can provide a competitive advantage by helping you see enemies lurking in the shadows.

Triggered by awkward landscape limitations

Although the ROG Phone has a 10-point touchscreen sensitive enough to detect input through gloves, your fingers are best placed on the AirTriggers. These dedicated ultrasonic buttons actuate with only 20 grams of force, giving them a light touch for quick reflexes. There are two on the left edge, positioned perfectly for your fingers with the phone rotated in a landscape orientation, plus one more on the bottom right edge to add versatility for portrait mode. Each one can be customized to perform different functions, including executing macros that reliably reproduce game-specific gestures. The buttons can also be configured for non-gaming tasks, like instantly launching specific apps and activating functions like one-handed mode.

The AirTriggers help keep your fingers off the screen to expose more of what you want to see. Under the hood, an advanced haptic engine generates nuanced vibrations for more detailed force feedback in games.

Most mobile games are meant to be played in landscape mode, but this orientation creates a problem echoed by everyone we talked to when designing the ROG Phone. When you rotate to landscape, the charging and headphone cables get in the way, making your phone awkward and uncomfortable to hold. We fixed this issue by adding a port to the right side, so you can game while charging without the cable affecting your grip. The AeroActive Cooler also plugs into this multi-purpose port and includes its own landscape-friendly connectors for both charger and headphones.

More than just another gaming phone

Much of what makes the ROG Phone exceptional for gaming has broader appeal for day-to-day use. The pumped-up processor is perfect for power users who do everything on their mobile devices, especially when paired with 8GB of RAM and up to 512GB of speedy UFS 2.1 storage. The faster display adds a luxurious layer of polish to everyday activities like quickly scrolling through web sites and social feeds, and its 18:9 aspect ratio makes the body narrower and easier to hold. Gorilla Glass protects the screen from inadvertent damage, while a water-resistant design protects the body against liquid infiltration.

Dual front-facing speakers use Smart Amp technology to produce more volume with less distortion for everything from Spotify playlists to battlefield gunfire. Alternatively, you can plug in analog headphones or the new ROG Delta Type-C headset, and immerse yourself in virtual surround sound with a measure of privacy. The integrated networking is top notch, with Gigabit LTE cellular, plus WiGig-certified 802.11ad 60GHz WiFi with both 2x2 MIMO and WiFi Direct. The side-mounted port also supports Gigabit Ethernet over Type-C, plus HDMI and USB.

Both of the Type-C ports work with standard chargers for convenience and compatibility, but they really shine with the included HyperCharge adapter. This upgraded adapter integrates the charger IC that’s usually in the phone, which increases the power delivery up to 20W and lowers charging temperatures for the handset. The ROG Phone can charge its 4,000mAh battery to 60% capacity in only 33 minutes and get to 85% in just over an hour.

Fast charging is a given with high-end smartphones, as is the fingerprint reader for instant unlocking, and the dual rear cameras sitting next to it. The primary shooter captures 12MP images with a conventional lens, while the secondary camera takes 8MP wide-angle shots with a 120° field of view.

The logo on the back adds an element of exterior personalization, glowing whichever color you choose with static, breathing, and strobing effects, or cycling through the spectrum. You can synchronize RGB illumination across up to five ROG Phones wirelessly to match the rest of your squad. The lighting also syncs with optional accessories that plug into the side-mounted connector.

Dock into more than a smartphone

The Mobile Desktop Dock lets you build a complete desktop around the ROG Phone, including hooking up a 4K monitor, Gigabit Ethernet, 5.1-channel speakers, and a stack of USB peripherals. It may not be sporting to deftly destroy your rivals using a keyboard and mouse, but the competitive advantage is available if you want it. Using desktop peripherals to plow through your inbox and work on documents is much less controversial.

Rather than stationing the ROG Phone at a desk, the TwinView Dock takes it on the road in a handheld package complete with another screen. The secondary display is identical to the one on the phone, giving game developers more real estate to show maps, inventory, and other important information. Players have room to simultaneously view another application for chatting with teammates, reading up on strategies, or watching other matches. The TwinView Dock is great for live-streaming, especially since it prevents your fingers from blocking the front-facing camera. It also takes gaming further into console territory with physical trigger buttons and dual haptic feedback engines. Enhanced cooling keeps performance on point, while a massive 6,000mAh auxiliary battery extends the run time for your mobile adventures.

The WiGig Dock takes a different approach to secondary screens by using low-latency 802.11ad 60GHz WiFi to broadcast display signals to a base station that plugs into big-screen TVs. It pairs well with the third-party GameVice controller, which squeezes the ROG Phone between banks of traditional gamepad joysticks and buttons to enable a console-like experience that works from across the room on the couch.

ROG Phone
Processor	Exclusive 2.96GHz octa-core Qualcomm Snapdragon 845 Mobile Platform
GPU	Qualcomm Adreno 630
Display	6.0“ 18:9 (2160x1080) AMOLED 90Hz refresh rate with 1ms pixel response time 108.6% DCI-P3 color gamut and 10000:1 contrast ratio 10-point multi-touch (supports Glove Touch) Discrete image processing chip supports HDR
Memory	LPDDR4X 8GB RAM
Storage	UFS 2.1, 128GB / 512GB
Sensors	Accelerometer, e-compass, proximity sensor, Hall sensor, ambient-light sensor, fingerprint sensor, gyroscope, 2 x ultrasonic AirTriggers
Wireless	802.11a/b/g/n/ac/ad 2x2 MIMO Wi-Fi Direct and WiGig 802.11ad wireless display support Bluetooth 5.0 and NFC
GPS	Supports GPS, aGPS, Glonass, BeiDou
Side I/O	Custom USB-C supports USB 3.1 Gen 1, DP 1.4, fast charging (15W) ASUS HyperCharge direct charging
Bottom I/O	USB-C supports USB 2.0, fast charging (20W), Direct Charge 3.5mm headphone jack
Cameras	Main: 12MP + 8MP (120° wide-angle) Front: 8MP
Audio	Dual front-facing stereo speakers with smart amplifier 24-bit/192KHz Hi-Res Audio DTS Headphone:X 7.1 virtual surround-sound Qualcomm aptX High-definition Bluetooth® wireless audio
Battery	4,000mAh
Dimensions	158.8 x 76.2 x 8.6mm
Weight	200g

Into a new era of gaming

Although we created the ROG Phone to raise the bar for mobile gaming, its compelling technology and versatile accessories lay a foundation to redefine what portable computers can be. This is more than just a gaming device; it’s a well-rounded digital companion that channels the history of the Republic of Gamers while offering a glimpse into its future.

The ROG Phone will be available this summer in configurations with 128GB and 512GB of internal storage. Both of which come with the AeroActive Cooler. All the other accessories will be sold separately, and a special bundle will pack all of them into a suitcase with the high-end version of the phone. Ask your local ROG representative for details about street dates and pricing in your region.

Ultimate guide to Windows 10 keyboard shortcuts

noreply@blogger.com (Moonlesknight) — Sat, 02 Jun 2018 05:59:00 +0000

Turning multiple mouse clicks into a simple press of a key or two may not seem like a lot, but if you are an avid user of keyboard shortcuts you've likely noticed just how helpful they can be. Although memorizing which shortcuts do which functions can be a little daunting at first, it's important to remember not everyone needs to know every shortcut. Learning and using the ones that are most important to you is a great way to enhance your Windows 10 experience.

Keyboard shortcut	Action
Windows key	Open or close Start Menu.
Windows key + A	Open Action center.
Windows key + C	Open Cortana in listening mode.
Windows key + D	Display and hide the desktop.
Windows key + E	Open File Explorer.
Windows key + G	Open Game bar when a game is open.
Windows key + H	Open the Share charm.
Windows key + I	Open Settings.
Windows key + K	Open the Connect quick action.
Windows key + L	Lock your PC or switch accounts.
Windows key + M	Minimize all windows.
Windows key + R	Open Run dialog box.
Windows key + S	Open Search.
Windows key + U	Open Ease of Access Center.
Windows key + X	Open Quick Link menu.
Windows key + Number	Open the app pinned to the taskbar in the position indicated by the number.
Windows key + Left arrow key	Snap app windows left.
Windows key + Right arrow key	Snap app windows right.
Windows key + Up arrow key	Maximize app windows.
Windows key + Down arrow key	Minimize app windows.
Windows key + Comma	Temporarily peek at the desktop.
Windows key + Ctrl +D	Add a virtual desktop.
Windows key + Ctrl + Left or Right arrow	Switch between virtual desktops.
Windows key + Ctrl + F4	Close current virtual desktop.
Windows key + Enter	Open Narrator.
Windows key + Home	Minimize all but the active desktop window (restores all windows on second stroke).
Windows key + PrtScn	Capture a screenshot and save in Screenshots folder.
Windows key + Shift + Up arrow	Stretch the desktop window to the top and bottom of the screen.
Windows key + Tab	Open Task view.
Windows key + "+" key	Zoom in using the magnifier.
Windows key + "-" key	Zoom out using the magnifier.
Ctrl + Shift + Esc	Open Task Manager.
Alt + Tab	Switch between open apps.
Alt + Left arrow key	Go back.
Alt + Right arrow key	Go foward.
Alt + Page Up	Move up one screen.
Alt + Page down	Move down one screen.
Ctrl + Alt +Tab	View open apps
Ctrl + C	Copy selected items to clipboard.
Ctrl + X	Cut selected items.
Ctrl + V	Paste content from clipboard.
Ctrl + A	Select all content.
Ctrl + Z	Undo an action.
Ctrl + Y	Redo an action.
Ctrl + D	Delete the selected item and move it to the Recycle Bin.
Ctrl + Esc	Open the Start Menu.
Ctrl + Shift	Switch the keyboard layout.
Ctrl + Shift + Esc	Open Task Manager.
Ctrl + F4	Close the active window.

Did I miss anything?

Did I missed something? Let me in the comments below!

Must Have Portable Applications that Every Tech Needs

noreply@blogger.com (Moonlesknight) — Wed, 30 May 2018 10:20:00 +0000

Computer Technicians need’s to have a compilation of applications and tools that they can run instantly without the hustle to installing it, whenever doing a home or office service. Since the there can be a wide-range of issues when dealing with computer in the field, it’s best to carry a collection of applications with you that can be run from a USB drive. These are a collection of must-have portable applications for computer technicians on the job.

On this page I will compiled Free, Safe, Direct Download and Fully Portable applications specifically for computer technicians. All of these apps run directly from your USB flash drive and require no installation. I will updated this page once in a while.

Browser

1. Google Chrome Portable – fast, simple, theme-able browser. This is an online installer that will download Google Chrome during setup.

Publisher: Google & PortableApps.com (John T. Haller)
Date Updated: 2018-04-19
System Requirements: Windows 7, 8, 10
App License: Freeware (Partially open source under BSD)
Source: Google Chrome, PortableApps.com Installer

32-bit 64-bit

2. Mozilla Firefox, Portable Edition – the award-winning web browser that’s safe and secure.

Publisher: Mozilla & PortableApps.com
Date Updated: 2018-03-28
System Requirements: Windows 7, 8, 10 & WINE
App License: Open Source (MPL/GPL/LGPL under Mozilla EULA)
Source: Firefox, Launcher source, PortableApps.com Installer

32 & 64-bit

3. Opera, Portable Edition – is a lightweight, customizable browser designed for speed.

Publisher: Opera Software & PortableApps.com
Date updated: 2018-02-26
System Requirements: Windows 7/8/10
License: Freeware
Source Code: Launcher source

32 & 64-bit 36.x Legacy for XP

Disk Tools

1. Rufus Portable – a USB formatting utility which also can create a bootable USB drive using a bootable ISO image. This app requires admin rights.

Publisher: Pete Batard/Akeo & PortableApps.com
Date updated: 2017-11-08
System Requirements: Windows XP/Vista/7/8/10
License: Free / Open Source (Launcher: GPL, App: GPL)
Source Code: PortableApps.com Launcher, Rufus

32 & 64-bit

2. YUMI Portable – is the successor to MultibootISOs. It can be used to create a Multiboot USB Flash Drive containing multiple operating systems, antivirus utilities, disc cloning, diagnostic tools, and more.

Publisher: USB Pen Drive Linux & PortableApps.com
Date Updated: 2018-03-30
Date Added: 2015-09-30
System Requirements: Windows XP, Vista, 7, 8, 10
App License: Open Source (GPL)

Legacy 32 & 64-bit UEFI 32 & 64-bit

3. Crystal Disk Info Portable – HDD/SSD health monitoring. It supports a part of external USB disks, monitoring health status and temperature, graph of S.M.A.R.T. information, control AAM/APM settings and more.

Publisher: hiyohiyo & PortableApps.com
Date Updated: 2018-04-02
System Requirements: Windows XP, Vista, 7, 8, 10
License: Open Source (BSD)
Source: CrystalDiskInfo, PortableApps.com Launcher

32 & 64-bit

4. Wise Disk Cleaner Portable – disk cleaner and defragmenter packaged as a portable app, so you can work on PCs on the go. It’s freeware for personal and education use. Like many system utilities, this requires admin privileges to run.

Publisher: WiseCleaner & PortableApps.com
Date Updated: 2018-02-15
System Requirements: Windows XP/Vista/7/8/10
License: Freeware (Personal and Education Use Only)
Source Code: PortableApps.com Launcher

32 & 64-bit

5. Smart Defrag Portable – powerful disk defragmenter with a fast engine and an easy to use interface. It’s freeware for personal and business use.

Publisher: IObit & PortableApps.com
Date Updated: 2018-02-28
System Requirements: Windows XP, Vista, 7, 8, 10
App License: Open Source
Source: PortableApps.com Launcher

32 & 64-bit

File Compression

1. WinRAR Portable – file archiver utility for Windows. It can create and view archives in RAR or ZIP file formats, and unpack numerous archive file formats.

Publisher: Win.rar GmbH
Date Updated: 2018-02-14
System Requirements: Windows XP, Vista, 7, 8, 10
Source: Portableappz.blogspot.ca

32 & 64-bit

2. 7-Zip Portable – is a file archiver (compression) utility for Windows with a great array of features including: high compression ratio in new 7z format with LZMA compression; wide array of supported formats.

Publisher: Igor Pavlov et al & PortableApps.com
Date Updated: 2018-01-29
System Requirements: Windows XP, Vista, 7, 8, 10 & WINE
App License: Open Source (LGPL)
Source: 7-Zip, PortableApps.com Launcher

32 & 64-bit

3. PortableApps.com AppCompactor – allows you to easily compress applications to decrease size on disk and increase performance when running from slow media like flash drives. It’s packaged as a portable app, so you can work with your apps anywhere.

Publisher: PortableApps.com
Date updated: 2018-01-29
System Requirements: Windows XP/Vista/7/8/10, WINE on Linux/UNIX
License: Free / Open Source (GPL)
Source Code: PortableApps.com AppCompactor , UPX, 7-Zip

32 & 64-bit

Other

1. IObit Uninstaller Portable – helps you uninstall and remove unwanted programs and folders from your computer fast and easily.

Publisher: IObit & PortableApps.com
Date updated: 2018-02-02
System Requirements: Windows XP/Vista/7/8/10
License: Freeware (Personal and Business)
Source Code: PortableApps.com Launcher

32 & 64-bit

2. IObit Unlocker Portable – tool to determine what application or process has a given file locked so it can’t be deleted or moved and, if desired, unlock that file. This application requires administrative rights.

Publisher: IObit & PortableApps.com
Date Updated: 2017-10-10
System Requirements: Windows XP, Vista, 7, 8, 10
App License: Freeware (Personal and business use)
Source: PortableApps.com Launcher

32 & 64-bit

3. CPU-Z Portable – shows detailed information on the base components of your system. It shows details on your CPU (processor, speed, voltage, stepping, etc), mainboard (manufacturer, version, BIOS, chipset, GPU), memory (brand, timings, etc), and system (Windows, DirectX version).

Publisher: CPUID & PortableApps.com
Date Updated: 2018-04-01
System Requirements: Windows XP, Vista, 7, 8, 10
App License: Freeware (Personal and business use)
Source: PortableApps.com Launcher

32 & 64-bit

4. FastCopy Portable – a file copying and move utility. It automatically selects different methods according to whether the source and destination are in the same or different drive. Because reading/writing are processed with no OS cache at all, other applications aren’t slowed down as much.

Publisher: Hiroaki Shirouzu & PortableApps.com
Date updated: 2018-01-29
System Requirements: Windows XP/Vista/7/8/10
License: Free / Open Source (Launcher: GPL, App: BSD)
Source Code: PortableApps.com Launcher, FastCopy

32 & 64-bit

5. KCleaner Portable – is designed to be the most efficient Hard Disk cleaner, tracking every useless byte in order to give you all the resources you may need for your documents, music, pictures, movies, etc.

Publisher: KC Softwares & PortableApps.com
Date Updated: 2018-04-24
System Requirements: Windows XP, Vista, 7, 8, 10
App License: Freeware
Source: PortableApps.com Launcher

32 & 64-bit

6. QwikMark Portable – provides fast and easy benchmarking of several system elements in one simple screen.

Publisher: Vista Software & PortableApps.com
Date Updated: 2012-10-30
System Requirements: Windows XP/Vista/7/8/10
License: Freeware
Source Code: PortableApps.com Launcher

32 & 64-bit

7. Revo Uninstaller Portable – lets you uninstall programs using a simplified interface. If you have lots of software installed, you can reorder them, list them by icon or detail and even search by name.

Publisher: VS Revo Group & PortableApps.com
Date Updated: 2018-04-24
System Requirements: Windows XP, Vista, 7, 8, 10
App License: Freeware (Personal and business use)
Source: PortableApps.com Launcher

32 & 64-bit

8. CCleaner Portable – is a utility program used to clean potentially unwanted files and invalid Windows Registry entries from a computer.

Publisher: Ccleaner
Date Updated: 2018-04-26
System Requirements: Windows XP, Vista, 7, 8, 10
App License: Freeware (Personal use only)
Source: ccleaner.com

32 & 64-bit

9. Speccy Portable – lets you obtain highly detailed statistics about your computer. It covers not only the basics, like processor and RAM memory, but also hard drive, graphics card, motherboard, optical drives, operating system and more.

Publisher: Ccleaner
Date Updated: 2018-04-26
System Requirements: Windows XP, Vista, 7, 8, 10
App License: Freeware (Personal use only)
Source: ccleaner.com

32 & 64-bit

Remote Connectivity

1. TeamViewer Portable – contains support, administration and screen-sharing in one package. It can do remote administration of unattended servers, file transfers, remote support without installation, remote presentations, and more.

Publisher: TeamViewer
Date Updated: 2018-04-05
System Requirements: Windows XP, Vista, 7, 8, 10
App License: Freeware (Personal use only)
Source: PortableApps.com Launcher

32 & 64-bit

Recovery

1. Recuva Portable – A portable tool to restore accidentally deleted files.

Publisher: Ccleaner
Date Updated: 2018-04-26
System Requirements: Windows XP, Vista, 7, 8, 10
App License: Freeware (Personal use only)
Source: ccleaner.com

32 & 64-bit

Document Viewers

1. PDF-XChange Editor Portable – is a lightweight PDF editor and viewer with OCR functionality. Some functionality requires payment but most features are free.
- Publisher: Tracker Software & PortableApps.com
- Date updated: 2018-02-28
- System Requirements: Windows XP/Vista/7/8/10
- License: Freeware (Business and Personal) / Launcher: GPL
- Source Code: PortableApps.com Launcher
32 & 64-bit

2. Foxit Reader Portable – is a free PDF document viewer and creator, with incredible small size, breezing-fast launch speed and rich feature set.
- Publisher: Foxit Software Incorporated & PortableApps.com
- Date Updated: 2017-12-19
- System Requirements: Windows XP, Vista, 7, 8, 10
- App License: Freeware (Personal and business use)
- Source: PortableApps.com Launcher
32 & 64-bit

Contents provided on this Website is for informational purposes only. The owner of this website/blog does not claim ownership to the contents

Hacked: The Bangladesh Bank Heist

noreply@blogger.com (Moonlesknight) — Tue, 29 May 2018 03:03:00 +0000

How hackers got away with one of the biggest thefts in history, robbing Bangladesh's central bank of more than $80m.

It was a daring raid. Tens of millions of dollars stolen from Bangladesh's central bank via the Federal Reserve Bank of New York, transferred to accounts in the Philippines and then laundered through the Philippine casino system.

The money, and the thieves, then vanished. And it was all done online. In this comprehensive investigation spanning several countries, 101 East examines one of the biggest bank robberies in modern times, to find out how cyber-hackers infiltrated the global banking system, and got away with it.

Tens of millions of dollars were stolen from the Bangladesh Central Bank by cyber hackers. An infected email was possibly opened; through this way the hackers breached the system. [Al Jazeera]

The crime stunned the then-governor of Bangladesh Bank, Atiur Rahman. "It was like a terrorist attack, into the central bank," he says. "I couldn't believe it ... because nothing like that ... ever happened."

The robbery prompted investigations in the Philippines, Bangladesh and by the FBI. It revealed weaknesses in the supposedly secure global money transfer system known as SWIFT, which banks use to move billions of dollars daily between themselves.

The stolen money was transferred to accounts in the Philippines via the Federal Reserve Bank of New York, in New York City. [Al Jazeera]

The heist also exposed the murky banking system of the Philippines, where some of the world's toughest bank secrecy laws make the country vulnerable to potential corruption and money laundering. And it drew attention to the country's casinos, which are exempt from anti-money laundering laws, and not required to report suspicious transactions.

101 East exposes how cyber-hackers got away with one of the biggest bank thefts in history, robbing Bangladesh's central bank of more than $80m.

The money was eventually transferred to accounts in the Philippines and then laundered through the Philippine casino system. [Al Jazeera]

Windows 10 Optimization (Diskless)

noreply@blogger.com (Moonlesknight) — Mon, 21 May 2018 01:18:00 +0000

File setup + skin (trans) icafe8v9 9.0.6.0

noreply@blogger.com (Moonlesknight) — Mon, 21 May 2018 01:06:00 +0000

Note: File "Barview.exe + iCafeTray" non-specific light weight e trans e copy of the running back and forth delectable DC 1 post them alone kaka.

North Korea Denies Allegations of Hacking U.N. Sanctions Database

noreply@blogger.com (Moonlesknight) — Wed, 09 May 2018 06:13:00 +0000

North Korea has denied all allegations that the U.S has reportedly made about Pyongyang hacking the U.N. sanctions database.

Time Magazine reports- “North Korea on Wednesday dismissed as “nonsense” what it said was a U.S. claim that Pyongyang hacked the database of the United Nations committee that monitors sanctions against the North, saying the Trump administration should instead be working toward peace.”

This kind of linking North Korea to the recent hacking episode, according to the country’s U.N. mission, is a trick that aims at keeping up the atmosphere of pressure and sanction against the country.

The Time Magazine, in its report dated Thursday, 3rd May, says that the North Korea UN mission states that “…the United States “again picked fault” with North Korea over the hacking incident at a closed meeting of the sanctions committee on Monday “. North Korea hadn’t participated in the sanctions committee meeting as it’s not a member of the committee.

The Guardian meanwhile reports- “In a statement, the North Korean mission at the UN said Pyongyang “has never recognised the illegal and unlawful security council’s ‘sanctions resolutions’” and “is not interested in what the sanctions committee does”, adding the idea that it had carried out a hacking operation was “nonsense”.”

In the meantime, reports say that the US mission has denied having made any such claims against North Korea and that a spokesman has clarified that the quotes and comments that had been attributed to the US delegation are false.

To be remembered is the fact that the UN had, because of the pressure from the U.S, imposed economic sanctions against North Korea last year. These sanctions were over North Korea’s nuclear weapons programmes and also affecting sectors like coal, iron, fishing, textiles and oil.

These developments, however, are happening even as a historic summit meeting between Donald Trump and Kim Jong-un is slated to happen soon. The developments, it should also be remembered, come immediately after the summit that the heads of state for North Korea and South Korea had; this summit has indicated the likelihood of all conflicts between the two nations coming to an end.

Kali Linux 2018.2 with new security features

noreply@blogger.com (Moonlesknight) — Tue, 08 May 2018 07:49:00 +0000

Kali Linux 2018.2 Is Now Available For Download With New Security Features And Easier Metasploit Script Access And Fixes For The Notorious Spectre And Meltdown Vulnerabilities.

Kali Linux 2018.2

On April 30th, 2018, Offensive Security announced releasing the new version of Kali Linux which in fact is the first ever version that includes Linux 4.15 kernel. It also includes x64 and x86 patches for the much-hyped Spectre and Meltdown security vulnerabilities.

Kali Linux is a popular Debian-derived Linux distribution developed for penetration testing and digital forensics. The platform is home to hundreds of penetration testing tools making it one of the best and advanced penetration testing distribution ever.

The new version of Kali Linux also includes support for AMD GPUs and AMD Secure Encrypted Virtualization which allows for encrypting virtual machine memory such that even the hypervisor can’t access it. Additionally, the updated packages include Bloodhound, Reaver, PixieWPS, Burp Suite, Hashcat, and more. To view the full list of changes, you can check out the Kali Changelog.

Kali Linux 2018.2 – Easier Metasploit Script Access

For exploit writers, the good news is that starting from Metasploit-framework_4.16.34-0kali2, you can now make use of all these scripts directly as Kali developers have included links to all of them in the PATH, each of them prepended with msf-.

root@kali:~# msf-<tab>
msf-egghunter          msf-java_deserializer  msf-nasm_shell
msf-exe2vba            msf-jsobfu             msf-pattern_create
msf-exe2vbs            msf-makeiplist         msf-pattern_offset
msf-find_badchars      msf-md5_lookup         msf-pdf2xdp
msf-halflm_second      msf-metasm_shell       msf-virustotal
msf-hmac_sha1_crack    msf-msf_irb_shell

root@kali:~#
root@kali:~# msf-pattern_create -l 50 -s ABC,123
A1A2A3B1B2B3C1C2C3A1A2A3B1B2B3C1C2C3A1A2A3B1B2B3C1
root@kali:~#

Download Kali Linux 2018.2

If you are planning to download Kali Linux 2018.2 then simply visit Kali Downloads where you will find downloads in both 32-bit and 64-bit versions along with links to Torrents and ISOs.

Moreover, links to ARM images and Offensive Security virtual machine are also available on the same link since both have been updated to 2018.2.

How To Update Existing Kali Linux To 2018.2

To update the current version of Kali that has been installed on your system, simply follow the below-mentioned commands:

apt update
&& apt full-upgrade
apt dist-upgrade
reboot

How To Install Kali Linux On Windows 10

Yes, you read that right. You can now download Kali from Microsoft store and install it on Windows 10. To know more about Kali Linux on Windows 10 you can either read more details here or follow this direct link to Microsoft store and download Kali.

Windows 10 ROG Edition x64

noreply@blogger.com (Moonlesknight) — Mon, 07 May 2018 14:41:00 +0000

=====================================================================
Screenshots:

=====================================================================

Original ISO Used :
File: en_windows_10_multiple_editions_version_1703_updated_june_2017_x64_dvd_10725021.iso
CRC-32: 2e5a7cff
MD4: 1ee510d438a5fb834d58f60a1d5f7297
MD5: 0701a27d897797b8022daebf94fe10d2
SHA-1: ab15a9cf175e8f0b8361b2d4f0ea560343b93fbe
=====================================================================
Modded ISO Name:Windows 10 ROG EDITION 2017.ISO
Build Number:15063.483
Updated:Full July 2017
Features Enabled:Net 3.5
Converted:Install.wim<Install.esd
ISO Mode:UEFI/BIOS
Checksums:
Size:4,21 GB (4.521.500.672 byte)
File: Windows 10 ROG EDITION 2017.iso
CRC-32: 898c24a9
MD4: 08ebb490b4131d0b01a495d912237eef
MD5: dfc788ff293bf35883b09fb7b691eb76
SHA-1: e63984ac94ccfd37c46bf7f468bb2fb63ff53c5d
=====================================================================
Removed/Disabled:
Internet Explorer only Disabled that mean if you want you can enable it from Features in control panel...
Removed Apps:Contact/Xbox / DVR (issues with platformers )/OfficeHub/OneNote/E-**** app/Skype App/Colitaire Games/View
3D/Paint 3D/Mixed Reality/Communication Apps/
Insider Hub/Recorded Voice/Music Groove/sticky Notes/One Drive/Movies/Maps / Bing Maps/windows alarms/windows camera
=====================================================================
Services Removed: Biometric/fingerpring/Errow Windows Reports/Tablet Touchs + Pins/SmartScreen disabled/UAC Disabled
=====================================================================
Extra Modified Stuffs:
Themes:14 themes Asus/Rog (Default Themes:ROG Red)
Rainmeter:Red Asus ROG
Sounds:Asus New Sounds
Cursors:New Cursors Sets
StartOrb:ROG start Button
Start Menu visual:ROG Visual
OldNewExpler:This pc etc
Uxtheme Patcher
IconPack:Red Package
Aero Enabled
Services Mode:Black Viper Best Perfomance
=====================================================================
Preinstallation Apps:Google Chrome/Vicual c++/Directx 9.0 Full/Silverlight/Winrar/7zip
Script Installation Apps First Log on:Cpuz ROG /FileZilla/Mozilla Firefox/K-Lite Code Pack Mega/Notepad ++/Skype / Unlocker/Vlc Player
=====================================================================
Autounattend :
OEM Information:
Manufacturer>WhiteDeath TeamOS v2017
SupportURL>

IT expert says free public WiFi exposes consumers to hackers

noreply@blogger.com (Moonlesknight) — Sat, 05 May 2018 10:13:00 +0000

Mr Oluseyi Akindeinde, an IT expert on Friday warned people to beware of using free WiFi because it enabled hackers to have easy access their personal data.

Akindeinde, the Chief Technical officer at Digital Encod, made this known in Lagos at the Nigeria Cybersecurity Conference (NaijaSecCon2018).

He spoke on the topic: “The friendly enemy: the perils of free WiFi “.

“Nowadays when people go for events or lodge at hotels, they don’t care about the food and drinks but to have free access to public WiFi.’’

Oluseyi said most people clamour for free WiFi not knowing the dangers associated with using it.

“Using free WiFi exposes the consumer to hackers and in the process they get to view personal information like bank details, credentials and so many other things.

“Because the WiFi is free, it does not require any authentication before the hacker can have access to the network connection.

“Free public Wifi creates an amazing opportunity for the hacker to get unfettered access to unsecured devices on the same network,’ he said.

Akindeinde said that biggest threat to free Wi-Fi was the ability for the hacker to position himself between the consumer and the connection point.

He said that free WiFi usually came with a costly price and sadly only few people understood risks associated with public WiFi connection.

He warned consumers to desist from this in order to protect themselves and also ensure that important business data remained safe.

NAN reports that the Nigeria Cybersecurity Conference (NaijaSecCon) is an annual technical Cyber Security Conference that uniquely merges information about the latest and relevant threats from a Nigerian context with live technical demonstrations and hands-on workshops.

Naija SecCon 2018 had 49 attendees and 49 Catch-the-Flag (CTF) participants who will compete in a Cyber Security game.

Cybersecurity professionals from various industries including Financial Services, Insurance firms, Telecommunications, Oil and Gas, conglomerates, Tech Start-ups, Financial Technology (FinTech) companies, and Ministries, Department and Agencies (MDAs) of government attended the conference.

It is a technical cybersecurity conference is aimed at not just identifying talents, but bridging the gap between the techies and the corporate world.

HIJACKER: ALL IN ONE WIFI HACKING APPLICATION FOR ANDROID

noreply@blogger.com (Moonlesknight) — Sat, 28 Apr 2018 07:10:00 +0000

Hijacker

Hijacker is a Graphical User Interface for the penetration testing tools Aircrack-ng, Airodump-ng, MDK3, and Reaver. It offers a simple and easy UI to use these tools without typing commands in a console and copy&pasting MAC addresses.

Hijacker requires an ARM Android device with an internal wireless adapter that supports Monitor Mode. A few Android devices do, but none of them natively. This means that you will need a custom firmware. Any device that uses the BCM4339 chipset (MSM8974, such as Nexus 5, Xperia Z1/Z2, LG G2, LG G Flex, Samsung Galaxy Note 3) will work with Nexmon (which also supports some other chipsets). Devices that use BCM4330 can use bcmon.

An alternative would be to use an external adapter that supports monitor mode in Android with an OTG cable.

The required tools are included for armv7l and aarch64 devices as of version 1.1. The Nexmon driver and management utility for BCM4339 and BCM4358 are also included.

Root access is also necessary, as these tools need root to work.

Features of Hijacker Information Gathering

View a list of access points and stations (clients) around you (even hidden ones)
View the activity of a specific network (by measuring beacons and data packets) and its clients
Statistics about access points and stations
See the manufacturer of a device (AP or station) from the OUI database
See the signal power of devices and filter the ones that are closer to you
Save captured packets in the .cap file

Attacks

Deauthenticate all the clients of a network (either targeting each one (effective) or without specific target)
Deauthenticate a specific client from the network it’s connected
MDK3 Beacon Flooding with custom options and SSID list
MDK3 Authentication DoS for a specific network or to every nearby AP
Capture a WPA handshake or gather IVs to crack a WEP network
Reaver WPS cracking (pixie-dust attack using NetHunter chroot and external adapter)

Other

Leave the app running in the background, optionally with a notification
Copy commands or MAC addresses to clipboard
Includes the required tools, no need for manual installation
Includes the Nexmon driver, required library and management utility for BCM4339 and BCM4358 devices
Set commands to enable and disable monitor mode automatically
Crack .cap files with a custom wordlist
Create custom actions and run them on an access point or a client easily
Sort and filter Access Points and Stations with many parameters
Export all gathered information to a file
Add a persistent alias to a device (by MAC) for easier identification

ScreenShots:

Installation

Make sure:

on Android 5+
you are rooted (SuperSU is required if you are on CM/LineageOS install SuperSU)
you have a firmware to support Monitor Mode on your wireless interface

Download the latest version here.

When you run Hijacker for the first time, you will be asked whether you want to install the nexmon firmware or go to home screen. If you have installed your firmware or use an external adapter, you can just go to the home screen. Otherwise, and if your device is supported, click ‘Install Nexmon’ and then ‘Install’. Afterward, you will land on the home screen and airodump will start. Make sure you have enabled your WiFi and it’s in monitor mode.

Note: On some devices, changing files in `system` might trigger an Android security feature and your system partition will be restored when you reboot.

Troubleshooting

This app is designed and tested for ARM devices. All the binaries included are compiled for that architecture and will not work on anything else. You can check whether your device is compatible by going to Settings: if you have the option to install Nexmon, then you are on the correct architecture, otherwise you will have to install all the tools manually (busybox, aircrack-ng suite, mdk3, reaver, wireless tools, libfakeioctl.so library) in an PATHaccessible directory and set the ‘Prefix’ option for the tools to preload the library they need: LD_PRELOAD=/path/to/libfakeioctl.so.

In settings, there is an option to test the tools. If something fails, you can click ‘Copy test command’ and select the tool that fails. This will copy a test command to your clipboard, which you can manually run in a root shell and see what’s wrong. If all the tests pass and you still have a problem, feel free to open an issue here to fix it, or use the ‘Send feedback’ option in the app’s settings.

If the app happens to crash, a new activity will start which will generate a bug report in your external storage and give you the option to submit it by email. The report is shown in the activity so you can see exactly what will be sent.

Do not report bugs for devices that are not supported or when you are using an outdated version.

Keep in mind that Hijacker is just a GUI for these tools. The way it runs the tools is fairly simple, and if all the tests pass and you are in monitor mode, you should be getting the results you want. Also, keep in mind that these are auditing tools. However, if an attack works when you type a command in a terminal, but not with the app, feel free to post here to resolve the issue.

Warning Device

Hijacker gives you the option to install the Nexmon firmware on your device. Even though the app performs a chipset check, mistakes happen. The app currently includes the Nexmon firmware for BCM4339 and BCM4358 only. If you install any wrong firmware to android it might be brick your Phone.

Fastest DNS: ( Cloudflare’s 1.1.1.1)

noreply@blogger.com (Moonlesknight) — Wed, 25 Apr 2018 19:30:00 +0000

DNS: Internet’s Directory

Nearly everything on the Internet starts with a DNS request. DNS is the Internet’s directory. Click on a link, open an app, send an email and the first thing your device does is ask the directory: Where can I find this?

Unfortunately, by default, DNS is usually slow and insecure. Your ISP, and anyone else listening in on the Internet, can see every site you visit and every app you use — even if their content is encrypted. Creepily, some DNS providers sell data about your Internet activity or use it target you with ads.

We think that’s gross. If you do too, now there’s an alternative: 1.1.1.1

Faster than anything else.
28% faster, in fact.

We’ve built 1.1.1.1 to be the Internet’s fastest DNS directory. Don’t take our word for it. The independent DNS monitor DNSPerf ranks 1.1.1.1 the fastest DNS service in the world.

Since nearly everything you do on the Internet starts with a DNS request, choosing the fastest DNS directory across all your devices will accelerate almost everything you do online.

Setup on PC

Setting up 1.1.1.1 takes two minutes and requires no technical skill or special software. Even if you’re a computer novice, pick your device below for an easy-to-follow setup guide.

Click on the Start menu, then click on Control Panel.
Click on Network and Internet.
Click on Change Adapter Settings.
Right click on the Wi-Fi network you are connected to, then click Properties.
Select Internet Protocol Version 4 (or Version 6 if desired).
Click Properties.
Write down any existing DNS server entries for future reference.
Click Use The Following DNS Server Addresses.
Replace those addresses with the 1.1.1.1 DNS addresses:
- For IPv4: 1.1.1.1 and 1.0.0.1
- For IPv6: 2606:4700:4700::1111 and 2606:4700:4700::1001
Click OK, then Close.
Restart your browser.
You’re all set! Your device now has faster, more private DNS servers

00:00

00:35

iOS Trustjacking Attack Exposes iPhones to Remote Hacking

noreply@blogger.com (Moonlesknight) — Thu, 19 Apr 2018 08:17:00 +0000

Symantec researchers have found a loophole in how iPhone users pair devices with Mac workstations and laptops. They say attackers can exploit this flaw —which they named Trustjacking— to take over devices without the phone owner's knowledge.

At the technical level, the Trustjacking security issue is rooted in the "iTunes Wi-Fi sync" feature included with iTunes.

If this option is enabled in the iTunes settings section, when a Mac laptop/workstation owner syncs a new iPhone to his computer, this feature allows him to connect at any time to the smartphone via the local WiFi network, instead of using a wired cable.

The feature is convenient, and for solid reasons, as it allows a PC owner to easily retrieve or send data from the smartphone via the iTunes app and its API.

But Symantec researchers say there's a flaw in the design of this feature, which continues to grant a computer owner access to a paired iPhone via the local WiFi network, even after the iPhone device has disconnected from the computer.

Attackers can take control of iPhones via local WiFi

Presenting their findings today at the RSA 2018 security conference, Roy Iarchy, Head of Research and Modern OS Security at Symantec, says an attacker can abuse the iTunes Wi-Fi sync feature to take control of a device at later times, with no visible indicator to the device owner.

Iarchy says that once the iTunes WiFi sync feature is enabled, and a victim has been tricked into pairing with a malicious device, the attacker can use the iTunes API to record the user's smartphone screen by taking repeated screenshots at short intervals and sending the screenshots back to the iTunes app.

Furthermore, the attacker can also install or remove apps, all without any interaction with the iPhone owner, and can even trigger a remote backup, have it sent to his computer, and later sift through the victim's data.

Social engineering needed... and not needed

Obviously, such attacks aren't possible without social engineering, as the iPhone owner still needs to click on a popup that appears on his iPhone and agree to pair with an attacker's device.

You'd think this limits the attack surface only to situations where you're in a hurry and agree to pair your device with a stranger's laptop so that you can recharge your phone.

But the reality of Trustjacking attacks is different. Iarchy says that malware that infects your Mac laptop/workstation could enable the "iTunes WiFi sync" feature using automated scripts, and then retrieve data or infect any of the paired iPhones that are connected to the same WiFi network.

Further, the attack can work even across the Internet, not only via the local WiFi network, if the Mac computer is on the same VPN network as a paired iPhone.

Symantec says Trustjacking patch is not complete

Symantec says it notified Apple of the issue, but the solution Apple implemented to address the problem of Trustjacking attacks did not please its researchers.

The solution that Apple came up was to ask the iPhone user to enter the phone's passcode when pairing to a computer. This fix prevents random people from quickly grabbing your phone and pairing it to their own laptops.

But Symantec says this update made to iOS did not address the issue of iTunes WiFi sync being able to retrieve data from the device even after the user has disconnected from the paired computer, as the attacker could still use iTunes to silently connect to the smartphone if it's still in WiFi range.

"While we appreciate the mitigation that Apple has taken, we’d like to highlight that it does not address Trustjacking in an holistic manner. Once the user has chosen to trust the compromised computer, the rest of the exploit continues to work as described," Iarchy said today in a blog post.

"Unfortunately, there is no way to list all of the trusted computers and revoke access selectively," the expert added. "The best way to ensure that no unwanted computers are being trusted by your iOS device is to clean the trusted computers list by going to Settings > General > Reset > Reset Location & Privacy, now you will need to re-authorize all previously connected computers next time you are connecting your iOS device to each device."

What is Raspberry Pi? Is it Helpful for Programming?

noreply@blogger.com (Moonlesknight) — Thu, 19 Apr 2018 08:13:00 +0000

The Raspberry Pi’s latest released was on March 14, 2018. It is a series of small single-board computers that was developed to promote the teaching of basic computer science in schools and in developing countries.

Unfortunately, it does not include peripherals like keyboards, mice, and cases, however, some accessories have been included in several official and unofficial bundles. It supports various operating systems such as 9front, Android Things, Arch Linux ARM, CentOS, Debian, Fedora, FreeBSD, Freedombox, Gentoo Linux, Kali Linux, Kano, NetBSD, and others.

What is Raspberry PI?

Raspberry Pi is a credit-card-sized computer that plugs into your TV and a keyboard. It is like a little computer which can be used in electronic projects, and for many of the things that your desktop PC does, like spreadsheets, word processing, browsing the internet, playing games and play high-definition video as well.

Raspberry Pi Board

Raspberry Pi is a capable device that enables people of all ages to explore computing and also to learn how to program in languages such as Scratch and Python. It has the ability to interact with the outside world. It has been used in a wide array of digital maker projects from music machines and parent detectors to weather stations and tweeting birdhouses with infrared cameras. Name it and it does it.

Quick History of Raspberry Pi

There are several generations of Raspberry Pis that have been released over time. It features a Broadcom system on a chip with an integrated ARM compatible central processing unit and an on-chip graphics processing unit.

In 2012, Raspberry Pi 1 Model B was released followed by Model A.
In 2014, Raspberry Pi 1 Model B+ was released, it is a board with the improved design.
These boards are approximately credit-card sized and represent the standard mainline form-factor.
Improved A+ and B+ models were released a year later.
“Compute Module” was released in April 2014 for embedded applications.
Raspberry Pi 2 which added more RAM was released in February 2015.
In November 2015, Raspberry Pi Zero with smaller size and reduced input/output and general-purpose input/output capabilities was released.
On February 2017, the Raspberry Pi Zero W was launched, with Wi-Fi and Bluetooth capabilities.
On January 2018, the Raspberry Pi Zero WH was launched. It is the same version of the Zero W with pre-soldered GPIO headers.

Is Raspberry Pi good for programming?

Raspberry Pi is better if you want to learn to program compared with a normal computer. It is powerful enough to run as a small Linux server. Although Raspberry Pis were not designed to host large servers, you can still use it by installing a web server and relational database as well as server web-based content without a problem. This is for someone who is new to programming and/or Linux because it allows you to develop directly on the Raspberry Pi or on your main machine and quickly drop files onto your server using SFTP.

Raspberry Pi is really an educational device which is meant for hobbyists and aspiring youths to learn about programming. Benefits of using the Raspberry Pi includes:

Size. It is relatively small, you don’t need a computer desk or anything.
It’s quiet, you don’t have to worry about noise at all.
In learning hardware + software integration, you can get an Arduino setup with a Pi as well.

Raspberry Pi is a great cheap option that can give you freedom from worrying about corrupting your main computer or breaking something that you need to spend time on fixing. For an instance, you mess up, you can always flash the SD card back to a fresh install.

Getting a Raspberry Pi does not require an in-depth experience in programming because it is where you get that experience. You can learn to program on the pi as it was designed for that very purpose thus, it is made as an education tool for people to get started and learn about these things.

Microsoft launches Defending Democracy Program to protect against hacking and misinformation

noreply@blogger.com (Moonlesknight) — Tue, 17 Apr 2018 07:21:00 +0000

Concern about Russian interference in both the US presidential election and the UK Brexit referendum highlighted the importance the internet now plays in political campaigns. But as well as being a powerful tool, it's also something that is open to abuse and manipulation.

This is something Microsoft recognizes, and the company is launching a new Defending Democracy Program with the express aim of safeguarding the electoral processes.

The company says: "Threats to our democratic processes from cyber-enabled interference have become a critical concern. We've seen attempts by nation-states to target and exploit key building blocks of our democratic system including voting systems and the technology infrastructure of political campaigns. We have also endured the manipulation of social media platforms to sow misinformation."

Microsoft will work with its stakeholders in democratic countries to ensure -- among other things -- that elections are not interfered with.

In a blog post about the new program, Microsoft explains its four goals:

Protect campaigns from hackingthrough increased cyber resilience measures, enhanced account monitoring and incident response capabilities;
Increase political advertising transparency onlineby supporting relevant legislative proposals such as the Honest Ads Act and adopting additional self-regulatory measures across our platforms;
Explore technological solutions to preserve and protect electoral processes and engage with federal, state and local officials to identify and remediate cyber threats; and
Defend against disinformationcampaigns in partnership with leading academic institutions and think tanks dedicated to countering state-sponsored computational propaganda and junk news.

The first real test for the program will be US midterms in November, and Microsoft says that it will be piloting new cross-industry protections in the run-up.

Google releases Android companion app for its DIY AI hardware kits

noreply@blogger.com (Moonlesknight) — Mon, 16 Apr 2018 17:08:00 +0000

Last year, Google launched do-it-yourself artificial intelligence hardware kits for both voice and later image recognition. A new Android companion app released today makes it even easier to set up and get the kits online after assembly.

The Google AIY Projects app “lets you easily connect your assembled Vision or Voice Kit to a Wi-Fi network right from your mobile device.” It specifically lets you find the IP address to allow for wireless communication with your computer without the need of cables or other peripherals.

From the Play Store listing, the app is only helpful after initial assembly, with users still needing to follow the official Assembly Guides. You are walked through the pairing process afterwards with detailed graphics and descriptions.

Google, through partner retailers, currently offers two AIY Projects. The Voice Kit can connect to the Google Assistant and helps users create a natural language recognizer. Made from cardboard — just like the preceding VR viewers — you will essentially have an Assistant speaker that can be programmed with custom question and answer pairs.

Meanwhile, the Vision Kit uses TensorFlow’s machine learning models to build an image recognition device that can see and identify objects. It consists of a Raspberry Pi Zero W, Raspberry Pi Camera 2, and an SD card. All these kits can be hand-crafted, but the pre-assembled ones offer nice enclosures and all other needed components.

Check out 9to5Google on YouTube for more news:

DEADLY DDOS ATTACKS ARE ON THE RISE

noreply@blogger.com (Moonlesknight) — Fri, 13 Apr 2018 13:00:00 +0000

On September 20, 2016, security blogger Brian Krebs, was hit with “an extremely large and unusually distributed denial-of-service (DDoS) attack designed to knock the site offline”. According to Krebs, “The attack did not succeed thanks to the hard work of the engineers at Akamai, the company that protects my site from such digital sieges”. Akamai has said, “It was nearly double the size of the largest attack we had seen previously and was among the biggest assaults the Internet has ever witnessed.”

However, on September 22, 2016, Akamai dropped Mr. Krebb’s blog from protection due to the cost of a second sustained distributed denial-of-service. It’s thought that the source of the attack was from tens of thousands of compromised digital video recorders that either had default passwords or vulnerable web serving code.

Types of Denial of Service and Distributed Denial of Service attacks

A Denial of Service (DoS) attack overwhelms a computer network gateway by either sending too many connection requests or by the sheer volume of packets which can exhaust the systems resources. These are known by their technical terms as Volumetric, Network, or Application Attacks. When many computers combine their computing power together the attack is called a Distributed Denial of Service, a.k.a. the DDoS. Most DoS attacks are from multiple sources using multilayer attacks and as such are true DDoS attacks.

1. Volumetric Attack

A Volumetric Attack can occlude the gateway with too many packets to a targeted network in an effort to overwhelm its bandwidth capabilities. By flooding the target and slowing or stopping their services, the attackers achieve their goals. Request packet volume can be in the 100’s of Gbps and recent attacks have scaled to 1.7 Tbps.

Usually this type of attack comes from botnets of compromised computers that can amplify the attack with all bots transmitting in a single direction. When a single computer is “bot compromised” it may work normally for an owner but it has a Manchurian Candidate-like switch that, when turned on, joins an army of “bot compromised” computers with the single aim of smothering the target with massive requests. Imagine trying to receive a phone call when thousands of callers were all trying to call your number at the same time. No one would get through.

2. Network Based Attacks

Network Based Attacks are similar but are more specifically aimed at the Transmission Control Protocol (TCP) which uses a handshake connection with each party in a conversation. The attacker makes the initial request, called a synchronize or “syn” request, and the victim says “hello” and then waits for the attackers responding “hello” acknowledgement, or “ack” packet, but never receives it – and therefore waits with the connection left open. When this happens in the thousands, eventually the system runs out of connection resources and memory depletion occurs and it may even cause the system to crash.

3. Application Layer Attacks

Although less frequent and more sophisticated, Application Layer Attacks can be harder to detect and circumvent. Usually, as a part of a multi-vector approach, the attacker targets DNS, HTTP, and HTTPS, mostly because these are typical internet protocols in everyday network-to-network conversations. Think about the internet’s Domain Name Service (DNS). When you type in a domain name like google.com, your computer needs to find out the IP address of that domain name, because that’s how computers find each other, via IP addresses. DNS translates blog.eccouncil.org to an IP address like 172.217.5.228 or in IPv6 2607:f8b0:4004:804::2004. When the DNS is overwhelmed then no one can look up the IP address and everyone gets a ‘Web Page Unavailable’ page.

Application Layer Attacks also target web servers as well, and taking out a web delivery service is the easiest way to affect thousands of users that need that website.

How They Do It

The attacks are done with an array of botnets and tools. Some tools are very simple and generate the “syn” request, while others are more sophisticated, like the Low Orbital Ion Cannon (LOIC) and High Orbital Ion Cannon (HOIC) and can be used by groups to make hacktivistic public statements.

According to Wikipedia, LOIC was used by 4chan (a group growing into Anonymous) during their Project Chanology to attack websites like the Church of Scientology and the Recording Industry Association of America. LOIC was again used by Anonymous during their Operation Payback in December 2010 to attack the websites of companies and organizations that they opposed.

Why They Do It

There are many motivations for DoS attacks, including random pranks, hacktivism against your industry or country, theft by ransom (“pay us and we’ll stop”), disgruntled employees, market manipulation, diversion to mask data theft, competition and bragging rights amongst hackers and Nation State-sponsored social engineering.

Some Instances of Recent DDoS Attacks are:

In 2015, as residents of New Jersey were getting ready to celebrate Independence Day, those who tried to partake in a little online gambling on a Thursday afternoon were met with some unwanted resistance. Four of New Jersey’s internet gaming sites were hit by a DDoS attack, causing them to be inaccessible for a short period of time. “At least four casinos were impacted and experienced downtime,” said New Jersey Division of Gaming Enforcement (DGE) Director David Rebuck.
In Serbia last year, the Pescanik website said that it had been brought down by a DoS attack, directly after publishing allegations that that Serbian Interior Minister Nebojsa Stefanovic had plagiarized parts of his PhD thesis.
According to Spirent, the later part of 2017 has seen a marked increase in the number and size of DDoS attacks around the world. The political crisis in Qatar was coupled by an attack on the Al Jazeera website, one of the largest news networks in the world. Presidential elections in France were disrupted by attacks on Le Figaro and Le Monde websites. And in Great Britain, the website that was used for Brexit voter registrations was rendered useless due to an attack that stopped certain voters from registering.

As we can see, the use of DoS & DDoS attacks is very commonplace and the easiest type of attack to perpetuate.

Countering DoS Attacks

DoS attacks can also be costly to defend against. The cost of the attack on Brian Krebs was estimated to cost $100,000 a day to stop. A cost this high could put most businesses into the red quickly if allowed to continue.

The bigger commercial sites use third party DoS prevention services, but they stand to lose money with their sites down from loss of use. Some ISPs can provide sufficient DoS mitigation as well as some networking and firewall techniques.

DoS defense and mitigation needs to be considered with regards to your business, especially before it is too late.

SAP Announces First Collaboration in esports and Becomes the Official Innovation Partner of Team Liquid

noreply@blogger.com (Moonlesknight) — Thu, 12 Apr 2018 08:34:00 +0000

- SAP will become a three-year sponsor of Team Liquid

- SAP and Team Liquid will co-innovate on in-game data analysis to improve player and team performance

- SAP HANA® business data platform to be used as foundation for co-innovation process

WALLDORF, Germany, April 10, 2018 /PRNewswire/ -- SAP SE (NYSE: SAP) today announced a new sponsorship deal with Team Liquid, one of the most successful teams in esports. The sponsorship of Team Liquid is the first collaboration of SAP with a professional esports organization. As official innovation partner, SAP will work with Team Liquid on co-developing software based on in-game data, which will help Team Liquid analyze performance and achieve greater precision in areas like team and player performance and scouting new talent.

SAP will support Team Liquid by implementing a range of innovative technology solutions that deliver cutting-edge analytics to the team to improve overall performance in training and in competition. The SAP HANA® business data platform will serve as the core technology for co-development. Additional components such as SAP® Cloud Platform, the SAP Leonardo digital innovation system as well as the Internet of Things (IoT) and predictive and machine learning functionalities will be evaluated as part of the co-innovation process. By equipping Team Liquid with the most innovative tools possible to track and improve performance, SAP hopes to participate as an authentic, global and sustainable player in the esports ecosystem, addressing a young and tech-savvy esports community.

"After deciding to become a sponsor in the field of esports, SAP took time to observe and analyze the market and its ecosystem before finally deciding to partner with Team Liquid – one of the most successful teams in the business," said Stefan Ries, chief human resources officer, SAP. "For SAP, esports opens us up to a tech-savvy and highly skilled young audience and potential new talent for SAP. As a global, innovative and forward-looking technology company, SAP provides a high brand fit to the esports ecosystem."

"There is a strong demand for meaningful data and analytics software in esports," said Victor Goossens, co-CEO, Team Liquid. "For Team Liquid, competitive performance is key – and smart technology and data give us the best possible tools to analyze and improve. As a technology company at the cutting edge of innovation and with sponsorship experience across sports and entertainment, SAP is the perfect partner to collaborate with Team Liquid to create tools and solutions to fuel our competitive journey."

"esports is a highly interesting field for SAP. With a team sponsorship, SAP will be able to activate its full potential by working closely together with Team Liquid to understand their needs and apply innovative technology solutions to address them," said Lars Lamadé, head of sponsorships, Europe & Asia, SAP. "SAP as an innovation-driven company is interested in esports as a 100% digital sport with a high speed of development. The partnership with Team Liquid, with a true and authentic co-innovation mind-set at its core, will become a great use case for SAP technology."

About Team Liquid
Team Liquid was founded in 2000 as a clan on the gaming platform Battle.net, and has now evolved into one of the leading international multigame esports teams with training centers in Utrecht, The Netherlands, and Los Angeles, California. Team Liquid has over 70 athletes competing across 13 distinct games, including all major esports titles, such as DOTA 2, League of Legends and CS:GO. Team Liquid is one of the most successful esports teams in the Western market in terms of competitive achievement and fan engagement across multiple sports. In 2017 its DOTA 2 team, led by German superstar Kuro "KuroKy" Salehi Takhasomi as team captain, won The International and took home the most important title and prize pool in the sport.

About SAP
As market leader in enterprise application software, SAP (NYSE: SAP) helps companies of all sizes and industries run better. From back office to boardroom, warehouse to storefront, desktop to mobile device – SAP empowers people and organizations to work together more efficiently and use business insight more effectively to stay ahead of the competition. SAP applications and services enable more than 378,000 business and public sector customers to operate profitably, adapt continuously, and grow sustainably. For more information, visit www.sap.com.

Any statements contained in this document that are not historical facts are forward-looking statements as defined in the U.S. Private Securities Litigation Reform Act of 1995. Words such as "anticipate," "believe," "estimate," "expect," "forecast," "intend," "may," "plan," "project," "predict," "should" and "will" and similar expressions as they relate to SAP are intended to identify such forward-looking statements. SAP undertakes no obligation to publicly update or revise any forward-looking statements. All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ materially from expectations. The factors that could affect SAP's future financial results are discussed more fully in SAP's filings with the U.S. Securities and Exchange Commission ("SEC"), including SAP's most recent Annual Report on Form 20-F filed with the SEC. Readers are cautioned not to place undue reliance on these forward-looking statements, which speak only as of their dates.

Top 5 Best Operating Systems For Hackers 2018

noreply@blogger.com (Moonlesknight) — Sun, 01 Apr 2018 10:43:00 +0000

In the cyber world, there are lots of hacking attacks that occur daily, and they are done by some of the professional hackers and by some of the newcomers who use someone’s else codes and concepts to hack. But the essential thing that every hacker needs is the hacking OS and for that Linux is one of the best choices for the hackers for a long time. So today we are here with some of the best-operating systems based on Linux that hackers can use to perform their hacking attacks flawlessly. So have a look at these OS discussed below.

We are discussing here 15+ best OS for hacking with their little bit descriptions and features, and you can check them out and download the one that you think is well suited for your work. So have a look on these OS below.

#1 Kali Linux

Top 5 Best Operating Systems For Hackers 2018

It is one of the most modern OS that is being used by hackers for pen testing and lots of security exploits. This is a Linux based OS that provides you privacy and safety from the vulnerabilities that other OS have in it. So must try out this cool OS on your PC.

Features Of Kali Linux

Full Customisation of Kali ISOs
The Kali Linux ISO of doom – an excellent example of the flexibility of live-build, and the types and complexity of customizations possible.
Kali Linux Live USB persistence with LUKS encryption
Kali Linux Full Disk Encryption
Kali Linux on a Raspberry Pi and a bunch of other interesting ARM devices

#2 Backtrack

Top 5 Best Operating Systems For Hackers 2018

The other well-known Linux based Operating system is backtrack that is being used from few previous years and best known as the OS for network cracking and pen testing. And it’s also the one of the best OS that can perform various network hacks with privacy.

Features Of Backtrack

One-stop-shop for all of your security needs
Metasploit for integration
Wi-Fi drivers supporting monitor mode (of mon mode) and packet injection
Cisco OCS Mass Scanner, a very reliable and fast scanner for Cisco routers to test default telnet and enabling password.
A large collection of exploits as well as more conventional software such as browsers.

Also Read; How To Send Password Protected Document Via Email

#3 Pentoo

Top 5 Best Operating Systems For Hackers 2018

This is one of the best OS for hackers that is just in the form of Live CD. In this, you just have to create a bootable USB of this OS and then simply boot on your PC, and there is no requirement to install it, you just have to run it on your PC and do hacking attacks.

Features Of Pentoo:

Available in 32-bit and 64-bit versions, the latter having a significant speed increase from 32bit
Includes the required environment to crack passwords using GPGPU with OpenCL and CUDA configured ‘out of the box'[5][6][7]
Built on hardened Linux, including a hardened kernel and toolchain
Hardened kernel with extra patches[8]
Uses a pentoo overlay, which allows tools to be built on top of a standard gentoo build.

How hackers are hijacking your cellphone account

noreply@blogger.com (Moonlesknight) — Wed, 28 Mar 2018 12:33:00 +0000

Fraudsters have figured out how to break in to online accounts protected by two-factor authentication, where the authenticating device is your mobile phone.

They don’t steal the phone; they simply hijack the phone number. This enables them to intercept those one-time verification codes sent to that mobile number by text, email, or phone call.

Armed with their victim’s personal information, such as date of birth and last four digits of their Social Security number — information that is widely available on the dark web — these identity thieves trick the wireless carriers into transferring (or porting) their target’s phone number to a new account or device they control. That’s why this is called the “port-out” scam.

Mobile phone hijacking is on the rise. Reports of this crime to the Federal Trade Commission more than doubled between 2013 and 2016, from 1,038 incidents to 2,658. These complaints “represent only the tip of a much larger iceberg,” the FTC noted. NBC News first warned about the scam in June 2016.

Port-out scammers can take over any account where that smartphone is the verification device, such as bank, cryptocurrency, and email and social media accounts, according to a recent warning from Fraud.org, run by the National Consumers League.

“Most victims find out about this when they go to use their cellphone and it won’t work,” said John Breyault, NCL’s vice president of telecommunications and fraud. “Unfortunately, by the time they call the carrier and figure out what’s happened, the scammer has already used that hijacked cellphone number to log in to things like their bank account and drain all the funds out of it relatively quickly.”

That’s how cybercrooks stole all the money in Jesse Kloeppner’s Wells Fargo bank accounts earlier this year. Late one night, Kloeppner, who lives in Shoreview, Minn., saw an email on his smartphone that said he had just transferred $1,799 to another account — something he hadn’t done.

“I tried to call the bank from my cellphone and it said, ‘No service,’ so I'm kind of freaking out,” he said. “And I couldn’t log in to my T-Mobile or my Wells Fargo accounts because my passwords had been changed.”

Based on what he learned from the bank and the phone company, Kloeppner told NBC News what most likely happened. The phone bandits opened a new mobile account with another company and then contacted T-Mobile to have the service switched.

Armed with just his Wells Fargo user name — they didn’t have his password — the hackers requested a password change and just waited for the one-time authentication code to be texted to his phone number, which they now controlled. Once they had the new password, they logged in and transferred out all the money.

T-Mobile apologized and the bank returned the money, since this was a fraudulent transaction, but Kloeppner found the experience to be “terribly frightening" and has since set up a password to provide port-out protection.

T-Mobile would not talk to NBC News about the port-out scam, referring us to the industry association, CTIA.

Kloeppner also reported his experience to the Better Business Bureau’s Scam Tracker network, a site that helps the BBB investigate and warn others about rip-offs and scams.
HOW THE SCAM WORKS

The port-out scam can take place at a wireless store or online, but in both cases, the impostors have enough information to convince the phone company that they are who they claim to be and have that person’s phone service transferred to their mobile device.

“And with a smartphone, if you're on Wi-Fi, everything's going to work except the actual calling and texting, so you may not even notice right away that something's wrong with your phone — which can give the scammers a few hours of lead time,” said Katherine Hutt, director of communications for the Council of Better Business Bureaus. “If that ever happens, if you can't make calls or receive calls, immediately contact the phone company and see if your number has been ported.”

The wireless industry is well aware of the port-out scam. In January, T-Mobile posted a warning on its website and started encouraging customers to add a port validation feature — a 6-to-15-digit passcode — to their account. AT&T published a blog post in late February, Prevent Porting to Protect Your Identity. CTIA also issued a news release earlier this month: Protecting your accounts against number porting.

“There is a reported increase in activity and I think the carriers are addressing the problem to ensure that it doesn't get worse,” said John Marinho, CTIA’s vice president of technology and cybersecurity. “The way that we address it is to be very vigilant.”

“No system is foolproof,” Marinho told NBC News, but employees at call centers and in retail stores go through “pretty rigorous training” about the port-out scam, he said.

Lorrie Cranor, a cybersecurity expert at Carnegie Mellon, believes better authentication procedures are needed before cellphone service can be switched. Cranor was the victim of the port-out scam two years ago. At the time, she worked at the FTC and wrote about her experience.

An ID thief walked into a wireless store, claimed to be Cranor, said she had lost her phone and needed service changed to a new device. The real Cranor was talking on her cellphone at the time, so if the store employee had simply called her, she could have stopped the scammer.

Cranor told NBC News she believes there are ways wireless companies can balance increased security with a customer’s legitimate needs to change their phone service. She suggests a security protocol that requires the phone company to text or call the phone of the registered owner before service is ported to another phone. (Some carriers offer this security option.)

If someone truly loses their phone, or there’s no way to get confirmation one way or another, then the customer service representative would need to go to the next level of authentication, Cranor said.
HOW TO PROTECT YOURSELF

No one’s suggesting two-factor authentication is a problem. It’s clearly a powerful weapon to stop cybercrime, but it’s not perfect. And when it comes to protecting your mobile devices, there are other things you need to do.

If you haven't already done so, call your wireless carrier and ask for PIN authentication for your accounts. Sprint requires customers to create a PIN when they open a new account. Here’s what to do with the other major carriers.
AT&T: Log into your ATT.com account, go to your profile by clicking your name, and under the wireless passcode drop down menu, click on “manage extra security.”
T-Mobile: Call 611 from your cellphone or (800) 937-8997 to speak with customer service.
Verizon: Visit vzw.com/PIN or call (800) 922-0204.

For those who want to go one step further, Fraud.org has this recommendation: See if your accounts that use two-factor authentication offer an app-based way, such as Authy or Google Authenticator, to receive that one-time verification code.

Download Kali Linux from Microsoft Store and use on Windows 10

noreply@blogger.com (Moonlesknight) — Sat, 24 Mar 2018 07:49:00 +0000

You can now download Kali Linux and install it on Windows 10, thanks to Microsoft who a few months ago vowed to bring open source software to its store.

Kali Linux is a popular Debian-derived Linux distribution developed for penetration testing and digital forensics. The platform is home to hundreds of penetration testing tools making it one of the best and advanced penetration testing distribution ever.

Kali Linux was added to Microsoft store on February 5th while in a March 6th blog post by Microsoft’s WSL programme manager Tara Raj, it was announced that Debian GNU/Linux for WSL now available in the Windows Store.

“We’re excited to announce that you can now download & install Debian GNU/Linux via the Windows Store! After we announced that you’d be able to install and run multiple distro’s side-by-side on WSL, we are happy to introduce another one of your favorite Linux distros to the Windows Store. As promised, we are expanding your ability to run multiple distros on WSL,” wrote Tara.

The screenshot shows Kali Linux running on WSL (Image credit: Tara Raj, Microsoft)

“We would like to extend our sincerest thanks to the Kali Linux team and especially [Kali lead developer] Mati Aharoni for all their patience, hard work and support to plan, build, and publish their distro packages in the Windows Store. Thank you!”

However, there is a problem. According to some users who downloaded Kali Linux on their Windows devices are complaining that Windows Defender, an anti-malware component of Microsoft Windows is flagging Kali Linux’s packages as threats.

The screenshot shows Windows Defender flagging Its packages as threats (Image credit: BleepingComputer)

Microsoft is aware of the situation since the official Kali Linux download page does address the issue. “Some tools may trigger Antivirus warnings when installed, please plan ahead accordingly,” says Microsoft.

You can download Kali Linux from here.
The Kali for Windows application allows one to install and run the Kali Linux open-source penetration testing distribution natively, from the Windows 10 OS. To launch the Kali shell, type “kali” on the command prompt, or click on the Kali tile in the Start Menu. For more information about what you can do with this app, check https://www.kali.org/kali-on-windows-app.

Hack WiFi Password With Linset Tools

noreply@blogger.com (Moonlesknight) — Sat, 24 Mar 2018 07:38:00 +0000

Linset Is Not a Social Enginering Tool - Hacking without brute force-Disconnecting all the clients in the selected network, connecting them to my fake network Capture handshake (can be used without handshake but a chance of fail), asking for the router password. If they introduce the asked password, LINSET will stop working, will save the password and the client will reconnect to the legit network.

This is for educational purposes only

Requirements :
- Linux OS
- Laptop or PC with WiFi Adaptor

Instructions :
1. Download the Linset patched and extract it on your PC running on Linux OS

2. Update software for linset (Kali Linux) internet needed dito

Open terminal

First Command
apt-get update && apt-get install -f
Second
apt-get install isc-dhcp-server
Third
apt-get install hostapd
Fourth
apt-get install lighttpd
Fifth
apt-get install php5-cgi

Pag may error punta ka dito source list update mo then try again

# Regular repositories
deb http://http.kali.org/kali sana main non-free contrib
deb http://security.kali.org/kali-security sana/updates main contrib non-free
# Source repositories
deb-src http://http.kali.org/kali sana main non-free contrib
deb-src http://security.kali.org/kali-security sana/updates main contrib non-free

Source List

deb http://http.kali.org/kali kali-rolling main contrib non-free
# For source package access, uncomment the following line
# deb-src http://http.kali.org/kali kali-rolling main contrib non-free
deb http://http.kali.org/kali sana main non-free contrib
deb http://security.kali.org/kali-security sana/updates main contrib non-free
# For source package access, uncomment the following line
# deb-src http://http.kali.org/kali sana main non-free contrib
# deb-src http://security.kali.org/kali-security sana/updates main contrib non-free
deb http://old.kali.org/kali moto main non-free contrib
# For source package access, uncomment the following line
# deb-src http://old.kali.org/kali moto main non-free contrib

2. Change the terminal directory to extracted folder Type "cd Desktop" press enter
or sample naka folder sa Desktop wpa2 folder Type "cd wpa2" press enter after nyo mag cd Desktop.
3. Type this command in terminal "chmod +x linset" and "chmod +x airmon"
4. Finally "./linset"

Dapat OK OK OK lahat lilitaw

5. Ganito dapat lilitaw lilitaw yung WiFi device mo

Type 1 Press Enter

6. Select Channel All Channel Press mo 1 then press Enter.

7. Then makikita BOX list ng available na WiFi SSID sa area mo wait mo mga 1 minute or 30 seconds.

8. Close the White Box List then may lilitaw na ganito APS list yung may (*) sa number maganda i hack.. available yun for handshake. Select ka sample I select 2 Type 2 then press Enter.

9. Mode of Fake AP ( eto gagawin neto mag gegenerate ng Fake AP same ng target pati Mac at Vendor Name )
Press 1 recommended Hostapd then Enter.

10. Info MAC just press Enter lang dito

11. Examination Handshake Press 1 then Enter

Tapos Capture HandShake Target Mass AP

12. Now wait to have WPA handshake ( at this momment i di disconnect nya yun mga user kaya makakita kayo ng mga mac list yun ang mac ng user ng WiFi at mag rerecon)

Kapag nakita nyo na may WPA handshake Press 1 Yes..
pag Wala Press 2 Strike Again

13. Now After success handshake Select Web Interface Press 1 and Enter

14. Select Language English Press 1 and Enter

15. WiFi Attack is on Going ( at this momment gagawa siya ng Fake AP at Fake DNS at DHCP)
ma didisconnect yung mga device sa original AP at i coconnect sila sa Fake AP )

Kailangan 6 windows ang lilitaw yung isa madalas natatakpan ng mdk3 yung AP
1.Main window
2.DHCP
3.Esperando
4.AP
5.FakeDNS
6.mdk3

16. Wait nyo lang may kumagat sa Fake AP SSID nyo
Ganito mang yayari sa Device ng ina atack na WiFi router mag ma rerecieve silang Notification Sign into WiFi network.. Hindi sila mag kaka internet hangat di nila na enter ang tamang password!

Pag nag open sila ng browser ganito lilitaw mag aask parin ng Password... yung Router nila kuhang kuha din Name Mac at Mac Vendor

17. Success!! Kapag na inpunt na nila yung password nila at na verify na correct titigil ang 4 Aps Window eto na yung password.
Yung password ma sasave yan sa root folder .

Minsan di lumilitaw yun dhcp
Eto gagawin :
Punta kasa root/var/lib/dhcp/ or buksan mo computer var then lib then dhcp folder tapos meron isang file jan na .leases ang format rename mo un ng dhcpd.leases

Kapag blanko yung var/lib/dchp walang laman punta kasa var/lib/networkmanagement/ nandyan yung may file.leases

rename mo ng dhcpd.lease copy mo sa /var/lib/dhcp/

Readers Central

Introduction to the 10 Most Popular Password Cracking Tools

What is Password Cracking?

1. Brutus

2. RainbowCrack

3. Wfuzz

Key features of Wfuzz password cracking tool:

4. Cain and Abel

5. John the Ripper

6. THC Hydra

7. Medusa

8. OphCrack

9. L0phtCrack

10. Aircrack-NG

How to create a password that is hard to crack

What to avoid while selecting your password

Microsoft Office 2016 Pro Plus Portable X64 FREE

Make Windows 10 boot faster

ANNOUNCING THE ROG PHONE: CHANGING THE GAME FOR MOBILE

Into a new era of gaming

Ultimate guide to Windows 10 keyboard shortcuts

(adsbygoogle = window.adsbygoogle || []).push({}); Did I miss anything?

Must Have Portable Applications that Every Tech Needs

Browser

(adsbygoogle = window.adsbygoogle || []).push({}); Disk Tools

(adsbygoogle = window.adsbygoogle || []).push({}); File Compression

Other

Remote Connectivity

Recovery

Document Viewers

Contents provided on this Website is for informational purposes only. The owner of this website/blog does not claim ownership to the contents

Hacked: The Bangladesh Bank Heist

How hackers got away with one of the biggest thefts in history, robbing Bangladesh's central bank of more than $80m.

Windows 10 Optimization (Diskless)

File setup + skin (trans) icafe8v9 9.0.6.0

North Korea Denies Allegations of Hacking U.N. Sanctions Database

Kali Linux 2018.2 with new security features

Kali Linux 2018.2 Is Now Available For Download With New Security Features And Easier Metasploit Script Access And Fixes For The Notorious Spectre And Meltdown Vulnerabilities.

Kali Linux 2018.2

Kali Linux 2018.2 – Easier Metasploit Script Access

Download Kali Linux 2018.2

(adsbygoogle = window.adsbygoogle || []).push({}); How To Update Existing Kali Linux To 2018.2

How To Install Kali Linux On Windows 10

Windows 10 ROG Edition x64

IT expert says free public WiFi exposes consumers to hackers

Mr Oluseyi Akindeinde, an IT expert on Friday warned people to beware of using free WiFi because it enabled hackers to have easy access their personal data.

HIJACKER: ALL IN ONE WIFI HACKING APPLICATION FOR ANDROID

Hijacker

Attacks

Other

google_ad_client = "ca-pub-9932522177975251"; google_ad_slot = "1667888240"; google_ad_width = 336; google_ad_height = 280; ScreenShots:

Installation

Download the latest version here.

Note: On some devices, changing files in system might trigger an Android security feature and your system partition will be restored when you reboot.

Troubleshooting

Do not report bugs for devices that are not supported or when you are using an outdated version.

Warning Device

Fastest DNS: ( Cloudflare’s 1.1.1.1)

Setup on PC

iOS Trustjacking Attack Exposes iPhones to Remote Hacking

(adsbygoogle = window.adsbygoogle || []).push({}); Attackers can take control of iPhones via local WiFi

Social engineering needed... and not needed

Symantec says Trustjacking patch is not complete

What is Raspberry Pi? Is it Helpful for Programming?

What is Raspberry PI?

Quick History of Raspberry Pi

Is Raspberry Pi good for programming?

Microsoft launches Defending Democracy Program to protect against hacking and misinformation

Google releases Android companion app for its DIY AI hardware kits

DEADLY DDOS ATTACKS ARE ON THE RISE

Types of Denial of Service and Distributed Denial of Service attacks

1. Volumetric Attack

2. Network Based Attacks

3. Application Layer Attacks

How They Do It

Why They Do It

Some Instances of Recent DDoS Attacks are:

Countering DoS Attacks

SAP Announces First Collaboration in esports and Becomes the Official Innovation Partner of Team Liquid

Top 5 Best Operating Systems For Hackers 2018

Did I miss anything?

Disk Tools

File Compression

How To Update Existing Kali Linux To 2018.2

ScreenShots:

Note: On some devices, changing files in `system` might trigger an Android security feature and your system partition will be restored when you reboot.

Attackers can take control of iPhones via local WiFi