TECHFIRE

A Pentester's Guide to Practical Shell Scripting

2025-10-13T18:43:00.002+05:30

Contents

From Command Line to Weapon
The Anatomy of a Security Script
Control Flow: Making Decisions
1. if...then...else Statements
2. for & while Loops: Automation in Action
Text Manipulation: The Hacker's Scalpel
Putting It All Together: A Practical Recon Script
The Blue Team Perspective: Scripting for Defense

As a veteran cybersecurity professional, I'm reframing the foundational chapter on shell scripting through the lens of practical, real-world offensive and defensive operations. Here is how I would teach this essential skill to the next generation of security professionals.

From Command Line to Weapon: A Pentester's Guide to Practical Shell Scripting

After decades in the trenches of digital warfare—from government red teaming to enterprise threat hunting—I can tell you that the most powerful weapon in a security professional's arsenal is often the simplest. It’s not some zero-day exploit or a million-dollar analysis platform. It's the humble shell script.

The academic foundation teaches you the syntax—the "what." My goal is to teach you the tradecraft—the "why" and "how" for using these building blocks in real-world security engagements.

Think of individual command-line tools like nmap, grep, and curl as individual soldiers. A shell script is the mission plan that coordinates them into an effective fighting force. It’s how you automate reconnaissance, chain together exploits, and parse mountains of data to find the needle in the haystack. It’s a force multiplier.

Let's translate these core concepts into the language of offensive and defensive security.

The Anatomy of a Security Script: Core Concepts in Practice

1. The Shebang and Execution: Your Operational Foundation

The book correctly points out two ways to run a script. In our field, the first method (bash myscript.sh) is for quick tests. The second method is for building real tools. #!/bin/bash (the "shebang") is non-negotiable for any script you intend to reuse or deploy on a target.

Why it Matters: When you gain execution on a target system, you can't be sure what the user's default shell is (sh, zsh, csh). The shebang ensures your script uses the interpreter it was written for (bash in this case), making your payload portable and reliable. An exploit that fails because of a syntax error is just noise.
Permissions (chmod +x): This is fundamental. Your script is just a text file until you tell the operating system it's an executable program.

# A simple script to check for network connectivity
# Filename: check_host.sh

#!/bin/bash
TARGET="8.8.8.8"
echo "Pinging ${TARGET}..."
ping -c 4 ${TARGET}

To run it:

$ chmod +x check_host.sh
$ ./check_host.sh

2. Variables: Your Operational Parameters

The book uses examples like CITY="Springfield". Let's think like an operator. Our variables will define the parameters of our mission.

Offensive Example: Defining target and attacker details.

TARGET_IP="10.129.42.15"
LHOST="10.10.14.2"  # Our attack machine's IP
LPORT="4444"        # Our listening port for a reverse shell
WORDLIST="/usr/share/wordlists/rockyou.txt"

Defensive Example: Setting up parameters for monitoring.

LOG_FILE="/var/log/auth.log"
SUSPICIOUS_IP="198.51.100.5"
ALERT_EMAIL="soc@mycompany.com"

This makes your scripts readable, maintainable, and easy to modify for the next engagement.

3. Command Substitution: Capturing Intelligence

This is where scripting becomes truly powerful. Command substitution—$(command) or `command`—allows you to store the output of a command in a variable. This is how you chain tools together.

Pentester's Example: Let's find open web ports from an Nmap scan and store them in a variable.

#!/bin/bash
TARGET_IP="10.129.42.15"

echo "[*] Finding open web ports on ${TARGET_IP}..."
# Run a fast scan, grep for "http", and cut out the port number.
OPEN_PORTS=$(nmap -F ${TARGET_IP} | grep 'http' | cut -d'/' -f1)

if [ -z "$OPEN_PORTS" ]; then
    echo "[-] No open web ports found."
else
    echo "[+] Found open web ports: ${OPEN_PORTS}"
fi

Here, we captured the intelligence from one tool (nmap) to be used later in the script.

4. Positional Parameters (`$1`, `$2`, `$@`): Building Reusable Tools

Hardcoding TARGET_IP is fine for a one-off task. But real operators build tools they can reuse. Positional parameters let you pass arguments to your script from the command line.

Let's upgrade our recon script:

#!/bin/bash
# Filename: web_recon.sh

# Check if a target IP was provided.
if [ -z "$1" ]; then
    echo "Usage: $0 <TARGET_IP>"
    exit 1
fi

TARGET_IP=$1 # The first argument is our target

echo "[*] Finding open web ports on ${TARGET_IP}..."
OPEN_PORTS=$(nmap -F ${TARGET_IP} | grep 'http' | cut -d'/' -f1)

# ... rest of the script ...

Now you can run it against any target:

$ ./web_recon.sh 10.129.42.15
$ ./web_recon.sh 192.168.1.1

The special variable $? is your best friend. It holds the exit code of the last command. A 0 means success; anything else means failure. This is critical for error checking.

ping -c 1 $TARGET_IP > /dev/null 2>&1
if [ $? -eq 0 ]; then
    echo "[+] Host is up!"
else
    echo "[-] Host is down. Aborting."
    exit 1
fi

Control Flow: Making Decisions in the Field

`if...then...else` Statements

This is your logic engine. It allows your script to react to changing conditions. We already used it above to check if a host is up or if a command-line argument was supplied.

Real-World Use Case: Checking for root privileges.

if [ $(id -u) -ne 0 ]; then
    echo "[-] This script requires root privileges. Please run with sudo."
    exit 1
fi
echo "[+] Running with root privileges."

`for` and `while` Loops: Automation in Action

Loops are the heart of automation. They perform the same action on a list of items. This is how you scale your efforts from one target to one hundred.

for loop: Iterate through a list of targets.

# targets.txt contains one IP per line
# 10.10.1.1
# 10.10.1.5
# 10.10.1.12

for target in $(cat targets.txt); do
    echo "[*] Scanning ${target}..."
    nmap -T4 -F ${target}
done

while loop: Read a file line by line. This is often better for handling lines with spaces.

# Bruteforcing SSH with a list of passwords
while read -r pass; do
    echo "[*] Trying password: ${pass}"
    sshpass -p "${pass}" ssh user@target.com "whoami"
done < passwords.txt

Text Manipulation: The Hacker's Scalpel

The book introduces grep, cut, sed, and tr. For a security professional, these aren't just text utilities; they are data-mining tools. You will use them every single day to parse logs, tool output, and configuration files.

grep: Your searchlight. Find passwords in config files (grep 'password' config.xml), filter for specific events in logs (grep 'Failed password' /var/log/auth.log), or find interesting files (find / -name "*.bak" 2>/dev/null).
cut: Your extractor. Pull usernames from /etc/passwd (cut -d':' -f1 /etc/passwd). We used it earlier to pull port numbers from Nmap output.
sed: Your editor. Use it to craft payloads or clean up data. For example, creating a list of URLs from a file of directory names: sed 's#^#http://target.com/#' dirs.txt.
awk: The powerhouse. While cut is simple, awk is a full-featured text-processing language. It's brilliant for parsing structured text. For example, to print the username and shell of everyone in /etc/passwd: awk -F: '{print $1 " uses " $7}' /etc/passwd.

Putting It All Together: A Simple, Practical Recon Script

Let's combine these concepts into a tool that's genuinely useful for an initial penetration test.

#!/bin/bash
# A simple script to perform initial recon on a target.

# --- Check for correct usage ---
if [ "$#" -ne 1 ]; then
    echo "Usage: $0 <Target IP>"
    exit 1
fi

# --- Variables ---
TARGET=$1
OUTPUT_DIR="recon_results/${TARGET}"
NMAP_FILE="${OUTPUT_DIR}/nmap_scan.txt"

# --- Setup ---
echo "[*] Starting reconnaissance on ${TARGET}"
mkdir -p ${OUTPUT_DIR}
echo "[+] Created output directory: ${OUTPUT_DIR}"

# --- Host Discovery ---
echo "[*] Checking if host is online..."
ping -c 1 ${TARGET} > /dev/null 2>&1
if [ $? -ne 0 ]; then
    echo "[-] Host ${TARGET} appears to be down. Aborting."
    exit 1
fi
echo "[+] Host is up!"

# --- Port Scanning ---
echo "[*] Performing a quick Nmap scan..."
# -F for fast scan (top 100 ports), -T4 for speed
nmap -F -T4 ${TARGET} -oN ${NMAP_FILE}

echo "[*] Nmap scan complete. Results saved to ${NMAP_FILE}"

# --- Service Enumeration ---
echo "[*] Enumerating open ports for more details..."
# Get open TCP ports from the Nmap file, format them for the next scan
PORTS=$(grep 'open' ${NMAP_FILE} | grep 'tcp' | cut -d'/' -f1 | tr '\n' ',')

if [ -z "$PORTS" ]; then
    echo "[-] No open TCP ports found to enumerate."
else
    echo "[+] Found open ports: ${PORTS}"
    echo "[*] Running detailed service scan on discovered ports..."
    nmap -sV -p${PORTS} ${TARGET} -oN "${OUTPUT_DIR}/service_scan.txt"
    echo "[+] Detailed scan complete."
fi

echo "[*] Reconnaissance finished."

The Blue Team Perspective: Scripting for Defense

These same skills are indispensable for defense. As a threat hunter or incident responder, you'll use scripts to:

Hunt for IOCs: Write a for loop to SSH into 500 servers and grep for a malicious filename.
Parse Logs: Use grep, awk, and sort to find the top 10 IPs hitting your web server or the accounts with the most failed logins.
Automate Response: Create a script that, when given a malicious IP, automatically adds it to a firewall blocklist (iptables -A INPUT -s $MALICIOUS_IP -j DROP).

This is the duality of our craft. The same tool can be used to build or to break. Your job is to master it for both. Start simple, build on what you learn, and never stop practicing. The command line is your laboratory. 🧑‍💻

A Comprehensive Guide to Apache Web Server Configuration

2025-10-11T15:11:00.004+05:30

This guide provides a complete walkthrough for installing, configuring, securing, and troubleshooting your Apache web server. We'll cover everything from the initial setup to hosting multiple websites with virtual hosts, securing your traffic with HTTPS, and allowing users to publish their own web content. Let's dive in!

Contents

What is the Apache Web Server?
Getting and Installing Apache
Starting Apache
Securing Apache
Understanding Apache Configuration Files
Understanding Default Apache Settings
Adding a Virtual Host to Apache
Allowing Users to Publish Web Content
Securing Web Traffic with SSL/TLS (HTTPS)
How SSL is Configured (and Testing the Default)
Creating Your Own SSL Key and Self-Signed Certificate
Generating a Certificate Signing Request (CSR)
Troubleshooting Your Web Server

1. What is the Apache Web Server?

Simply put, the Apache HTTPD (or just "Apache") is the most popular program that delivers web content (like web pages) to your browser.

It runs quietly in the background on your server as the httpd program. When you type a website address, your browser sends a request to Apache, and Apache sends the page back.

Why it's great:

It's free and open-source, supported by a massive community.
It works seamlessly on all major Linux systems, including Fedora, RHEL, and Ubuntu.
It's incredibly flexible. You can host multiple websites, secure communications, and implement various login methods.
It uses a powerful module system for extra features, like running Perl or PHP scripts, or adding SSL/TLS encryption.

A bit of history: Apache began as a series of improvements to the NCSA HTTPD web server. This effort evolved into the Apache Group and later the Apache Software Foundation (ASF), which now supports other major open-source projects like Tomcat and Hadoop.

2. Getting and Installing Apache

To get started, you'll need to install the necessary software packages on your Linux system. For a basic setup, you only need the httpd package.

What's in the httpd package?

The main Apache program: /usr/sbin/httpd
Key configuration files:
- /etc/httpd/conf/httpd.conf: The main configuration file for your server.
- /etc/httpd/conf.d/welcome.conf: Configures the default "Welcome" page.
- /etc/httpd/conf.modules.d/*.conf: Loads additional modules for extended functionality.

Apache automatically reads any .conf files in the /etc/httpd/conf.d/ and /etc/httpd/conf.modules.d/ directories to load module-specific settings.

How to check package details (before installing):

Download the package:
```
# yumdownloader httpd
```
View its information:
```
# rpm -qpi httpd-*rpm
```
See its configuration files:
```
# rpm -qpc httpd-*rpm
```

Installing the "Web Server" Group (Recommended):

For a more complete setup with useful extras, install the "Web Server" group.

# yum groupinstall "Web Server"

This bundle includes httpd-manual (for documentation), mod_ssl (for HTTPS), crypto-utils, modules for Perl and PHP, squid (for proxy services), and webalizer (for traffic analysis).

You need an active internet connection for yum to download these packages.

3. Starting Apache

Once installed, you need to start the Apache service and enable it to launch automatically on boot.

For modern Linux (Fedora 30, RHEL 8):

Enable on reboot:
```
# systemctl enable httpd.service
```
Start now:
```
# systemctl start httpd.service
```
Check status:
```
# systemctl status httpd.service
```

For older Linux (RHEL 6 and below):

```
# chkconfig httpd on
```
```
# service httpd start
```

Debugging Apache:

To get more detailed logs for troubleshooting, you can edit the httpd service to run in debug mode.

```
# systemctl edit httpd
```
Under [Service], add: Environment=OPTIONS='-e debug'
Save, exit, and restart Apache.

Important: Remove the -e debug option once you're done troubleshooting. Otherwise, your log files will grow very large, very quickly!

4. Securing Apache

Protecting your web server is crucial. This involves standard Linux security practices combined with Apache-specific settings.

File Permissions and Ownership

The httpd program runs as the apache user and apache group.
Your website content is stored in /var/www/html by default.
For Apache to serve your web pages, the apache user needs read permission on the files and execute permission on all parent directories.

Apache and Firewalls

If your firewall is active, you must open ports for web traffic.

HTTP: TCP port 80
HTTPS: TCP port 443 (if mod_ssl is installed)

Use the Firewall application or command-line tools to enable the http and https services for your public zone.

Apache and SELinux (Security Enhanced Linux)

SELinux adds a powerful layer of security, enabled by default in Fedora/RHEL. It protects your system even if Apache is compromised.

Tips for SELinux with Apache:

Read the manual: Run man httpd_selinux for detailed information.
Use standard locations: Storing content in /var/www/html automatically applies the correct SELinux labels.
Custom Locations: If you use non-standard directories, you must manually set the correct SELinux file contexts and Booleans to grant Apache access.

5. Understanding Apache Configuration Files

Apache's flexibility comes from its configuration directives. The main file is /etc/httpd/conf/httpd.conf, but settings are also loaded from files in /etc/httpd/conf.d/.

Configuration Blocks (<LocationTag>):

<Directory /path/to/folder>: Applies settings to a filesystem path.
<Files filename.ext>: Applies settings to specific files by name.
<Location /url/path>: Applies settings to a URL path, not a filesystem path.

You can also place small configuration files named .htaccess inside your web directories to override certain server settings. This is controlled by the AllowOverride directive in httpd.conf.

6. Understanding Default Apache Settings

Apache works out-of-the-box thanks to a set of sensible defaults in httpd.conf.

Key Default Settings:

ServerRoot: "/etc/httpd"
DocumentRoot: "/var/www/html"
Listen: 80 (listens on port 80 for all network interfaces)
User: apache
Group: apache
ErrorLog: logs/error_log
CustomLog: logs/access_log combined

By default, Apache denies access to the entire filesystem root (<Directory />) but then specifically allows access to /var/www and /var/www/html.

7. Adding a Virtual Host to Apache

Virtual hosts allow you to host multiple websites (e.g., example.com and example.org) on a single server.

Steps to create a Virtual Host:

Create a new configuration file, such as /etc/httpd/conf.d/example.org.conf.

Add the virtual host configuration block to the file:

<VirtualHost *:80>
    ServerAdmin webmaster@example.org
    ServerName www.example.org
    ServerAlias web.example.org
    DocumentRoot /var/www/html/example.org/
    DirectoryIndex index.php index.html
</VirtualHost>

Crucial Note: Once you add your first virtual host, the main DocumentRoot is no longer used for unmatched requests. The first virtual host you define becomes the default for all requests that don't match another ServerName.

Check and Restart Apache:

# apachectl configtest

# apachectl graceful

Point your domain's DNS to your server's IP and test it in a browser.

8. Allowing Users to Publish Web Content

You can let users publish web pages from a public_html folder in their home directory. This content is accessible at http://your-server/~username/.

Enable mod_userdir in httpd.conf:

<IfModule mod_userdir.c>
    UserDir enabled
    UserDir public_html
</IfModule>

Allow access to user directories:

<Directory "/home/*/public_html">
    Options Indexes Includes FollowSymLinks
    Require all granted
</Directory>

Set SELinux Boolean (if enforcing):

# setsebool -P httpd_enable_homedirs true

Reload Apache and test.

9. Securing Your Web Traffic with SSL/TLS (HTTPS)

Standard HTTP sends data in plain text. HTTPS uses SSL/TLS (Transport Layer Security) to encrypt the data, protecting it from eavesdroppers.

This is achieved using a private key on your server and a digital certificate that verifies your server's identity. For public websites, this certificate is signed by a trusted Certificate Authority (CA) like Let's Encrypt.

10. How SSL is Configured (and Testing the Default)

The mod_ssl package handles SSL/TLS for Apache. When installed, it creates a default self-signed certificate for immediate testing.

Key Settings in /etc/httpd/conf.d/ssl.conf:

Listen 443 https
SSLEngine on
SSLCertificateFile /etc/pki/tls/certs/localhost.crt
SSLCertificateKeyFile /etc/pki/tls/private/localhost.key

Testing the Default SSL Certificate:

Open a web browser on the server.
Navigate to https://localhost.
You will see a "Potential Security Risk" warning. This is normal because the certificate is self-signed.
Click "Advanced," view the certificate, and accept the risk to continue.

11. Creating Your Own SSL Key and Self-Signed Certificate

You can create your own key and certificate for internal use or as a first step toward getting a CA-signed certificate.

Generate a Private Key:

# cd /etc/pki/tls/private
# openssl genrsa -out server.key 2048
# chmod 600 server.key

Generate a Self-Signed Certificate:
```
# cd /etc/pki/tls/certs
# openssl req -new -x509 -key ../private/server.key -out server.crt -days 365
```
When prompted, ensure the "Common Name" matches your server's hostname or domain name.
Update the SSLCertificateFile and SSLCertificateKeyFile directives in ssl.conf to point to your new files.
Reload Apache.

12. Generating a Certificate Signing Request (CSR)

To get a certificate from a trusted CA, you must first generate a CSR.

Create a CSR directory:

# mkdir /etc/pki/tls/ssl.csr
# cd /etc/pki/tls/ssl.csr/

Generate the CSR:

# openssl req -new -key ../private/server.key -out server.csr

Copy the contents of the server.csr file and submit it to your chosen CA.
Once you receive the signed certificate from the CA, save it in /etc/pki/tls/certs/ and update your SSLCertificateFile directive in ssl.conf.

13. Troubleshooting Your Web Server

When issues arise, here’s how to diagnose and fix them. The first step is always to check the error log at /var/log/httpd/error_log.

Configuration Errors (Syntax OK fails)

Always run apachectl configtest after making changes. If it fails, the error message will usually point to the exact line with the problem.

Address already in use (make_sock)

This means another process is already using port 80 or 443. Use netstat -nltp to find the conflicting program. Check for duplicate Listen directives in your configuration files.

File permissions prevent access (403 Forbidden)

This is a permissions issue. Ensure the apache user has read access to the file and execute access to all directories in its path. Also, check for SELinux denials.

Client denied by server configuration (403 Forbidden)

Your Apache configuration is explicitly blocking the request. Check your <Directory> and <Location> blocks for Require, Allow, or Deny rules that might be the cause.

Directory index forbidden by rule (403 Forbidden)

Apache cannot find a default file (like index.html) as defined by DirectoryIndex, and the Options Indexes directive is not set to allow a file listing.

Premature end of script headers (500 Internal Server Error)

A CGI or PHP script crashed before it could output valid headers. Check the script itself for errors and review the server's error log for more specific details.

SELinux is blocking access

If file permissions are correct but you still get a "permission denied" error, SELinux is likely the cause. Temporarily set it to permissive mode with setenforce 0 to confirm. If that works, you need to apply the correct SELinux file contexts (e.g., httpd_sys_content_t) or Booleans (e.g., httpd_can_network_connect).

SciLab Practicals

2022-11-16T17:26:00.009+05:30

Ordinary Differential Equation Example 1

x0=0
xinc=0.001
xf=1
x=x0:xinc:xf
y=sqrt(x^2+2*x+0.001)
disp("The Value is", y)
plot2d(x,y)
title ('Diffrentiation')
xlabel("X")
ylabel("Y")

Ordinary Differential Equation Example 2

x0=0
xinc=0.001
xf=1
x=x0:xinc:xf
y=%e^-x
disp("The value is",y)
plot2d(x,y)
title("Diffrentiation")
xlabel("x")
ylabel("y")

Linear Equation

A=[1,1,1; 3,1,2; 1,1,-1]
B=[10;5;1] 
[x0, kerA]=linsolve(A,B)
disp("The answer is", x0)

Least Square Method

x=[-8.3, -4.8, -4.1, -0.9, 2.9, 4.7, 6.5, 8.7] 
y=[-2.3, -3.3, -0.8, -1.7, 0.6, -1.2, 2.2, 5]
n=length(x)
sx=sum(x)
sy=sum(y)
sx2=sum(x.*x)
sxy=sum(x.*y)
A=[sx n; sx2 sx]
B=[sy; sxy]
sol=A\B
m=sol(1)
c=sol(2)
xn=[-10:0.1:10]
yfit=[xn.*m + c]
plot2d(x,y,-4)
title ('Least square fitting Linear Regression', 'color', 'blue') 
xlabel"x"fontsize 2
ylabel("y")
plot(xn, yfit, "b") 
legends(['points'; 'Least Square Fit'], [-4,2])

Eigen Value Example 1

clc
k=(0.7205)
a=[2,0,0;0,4,5;0,4,3]
evals=spec(a)
disp("Eigen value are", evals)

Eigen Vector Example 1

a=[2,0,0;0,4,5; 0,4,3] 
[R,diagevals]=spec(a)
disp("The eigen vectors", diagevals)

Eigen Value Example 2

clc
k=(0.7205)
a=[-6,3;4,5]
evals=spec(a)
disp("Eigen value are", evals)

Eigen Vector Example 2

a=[-6,3;4,5]
[R,diagevals]=spec(a)
disp("The eigen vectors", diagevals)

Eigen Value Example 3

clc
k=[(8)/3*(3.14)]^2
a=[1,0,0;0,1,k;0,k,1]
evals=spec(a) 
disp("Eigen value are", evals)

Eigen Vector Example 3

a=(8/3*(3.14)^2)
[R,diagevals]=spec(a)
disp("The eigen vectors", diagevals)

Curve Fitting Method

x= [1:0.5:3.5]';
y= [97; 150; 219; 250; 278; 263];
subplot(2,2,1);
plot2d(x,y,-3);

X=[x.^2 x ones(x)];
a=X\y;
xx=[0:0.1:3.5];
yy=[a(1)*xx.^2 + a(2)*xx + a(3)];
subplot(2,2,2);
plot2d(x,y,-3);
plot(xx, yy);

Bisection Method

function y=f(x)
    y=3*x+sin(x)-%e^x
endfunction

x=linspace(0,2,100);
plot(x,f,"r")
title ("Bisection-Method")
xlabel "x"
ylabel "y"
//xgrid (1,1,7)

function bisection(a, b, TOL, n)
    i=1
    final_output=[i, a, b, (a+b)/2, f((a+b)/2)]
    disp("n a b c f(c)") 
    while(i<n),
        c=(a+b)/2
        if (f(c) == 0 | (b-a)/2 < TOL) then
            break
        else final_output=[final_output;i,a,b,c,f(c)]
    end
i=i+1
if(f(a)*f(c)>0) then 
    a=c
else
    b=c
end
end
disp(final_output)
endfunction

bisection(1,2,-10^-4,50)

Download the Source Code:

Download

List of New Page Conditional Tags on Blogger

2021-02-20T19:38:00.000+05:30

Home Page Conditional Tags

<b:if cond='data:view.isHomepage'> Code Here </b:if>

Page Post / Article Conditional Tag

<b:if cond='data:view.isPost'> Code Here </b:if>

Static Page Conditional Tags

<b:if cond='data:view.isPage'> Code Here </b:if>

Label Page Conditional Tags

<b:if cond='data:view.isLabelSearch'> Code Here </b:if>

Archive Page Conditional Tags

<b:if cond='data:view.isArchive'> Code Here </b:if>

Search Page Conditional Tags

<!-- Includes a label search page -->
<b:if cond='data:view.isSearch'> Code Here </b:if>

<!-- Only a search page -->
<b:if cond='data:view.isSearch and !data:view.isLabelSearch'> Code Here </b:if>

Error Page Conditional Tag

<b:if cond='data:view.isError'> Code Here </b:if>

Page Preview / Article Preview Conditional Tags

<b:if cond='data:view.isPreview'> Code Here </b:if>

Conditional Tag For Mobile Devices (Smartphone / Tablet)

<b:if cond='data:blog.isMobile == "true"'> Code Here </b:if>

Conditional Tags with Negative Traits

<!-- Only works other than on the Home page -->
<b:if cond='!data:view.isHomepage'> Code Here </b:if>

<!-- Only works other than on the Posts / Articles page -->
<b:if cond='!data:view.isPost'> Code Here </b:if>

<!-- Only works other than on the Static page -->
<b:if cond='!data:view.isPage'> Code Here </b:if>

Combines 2 conditional tags in 1 <b: if>

<!-- Only works on post pages and static pages -->
<b:if cond='data:view.isPost and data:view.isPage'> Code Here </b:if>

<!-- Only works on post pages and static pages -->
<b:if cond='data:view.isPost and data:view.isPage'> Code Here </b:if>

Let's Customize

<!-- Only works on the home page and other than on article pages, and static pages -->
<b:if cond='data:view.isHomepage and !data:view.isPost and !data:view.isPage'> Code Here </b:if>

How to Speed Up Blog Loading By Adding Expires Headers

2020-12-04T17:28:00.002+05:30

How to Speed Up Blog Loading By Adding Expires Headers

Expires Headers:

Leverage browser Expires Headers relating to web pages such as images, CSS, JavaScript, and so on.
So that when you re-open the same web page, the web page will open faster, because the file that originally had to be downloaded is now stored on the storage media.
Basically, leverage browser caching has a definition.
Set the expiration date in a static HTTP header.
Instructs the browser to load the source code that was previously downloaded on the storage media.
Caching functions to adjust the length of storage for files that have been downloaded when opening.

To be sure,
you can check the blog template first, beforehand please open the Gtmetrix page, enter your blog URL and see the results.
Usually, in Add Expires Headers, the value is red if the blog loading speed is slow.
So, to overcome this, you can add a script expires headers and place the code below just below the code <head> or <head>

<include expiration='7d' path='*.css'/>
<include expiration='7d' path='*.js'/>
<include expiration='3d' path='*.gif'/>
<include expiration='3d' path='*.jpeg'/>
<include expiration='3d' path='*.jpg'/>
<include expiration='3d' path='*.png'/>
<meta http-equiv="expires" content="sat, 02 jun 2021 00:00:00 GMT"/>

Preview your template first,

If it's okay then click Save.
Then test your blog template back to the Gtmetrix page, and see the results.

Usually, the changes in the expires header in the Yslow section of the Gtmetrix page can be seen in the results a day later, but if the speed test of your blog has changed, it means that the process of adding scripts has been successful.

How To Install Burpsuite Professionals In Kali Linux For Free With Licence

2020-12-02T14:11:00.003+05:30

How To Install Burpsuite Professionals In Kali Linux For Free With Licence

Download Burpsuite Pro:

Get Burpsuite Pro

After Downloading Burpsuite Pro.zip
Extract it and you will get files as shown below.

burpsuiteloader.jar
burpsuiteloaderold.jar
burpsuitepro.jar

Installing Java In Kali Linux:

Burpsuite requires java installed in the system.
If java is not installed in your system then install it by using the below commands.

┌──(tushar㉿techfire)-[~]
└─$ sudo apt install default-jdk

┌──(tushar㉿techfire)-[~]
└─$ sudo java -version

Now you successfully installed java on your kali machine.

Active & Configure Burpsuite Pro:

First, go to that folder where burp suite all files extracted.
At there right-click on any white space and open the terminal and run the below command.

┌──(tushar㉿techfire)-[~/Downloads/Burpsuite Pro]
└─$ ls
burpsuiteloader.jar burpsuiteloaderold.jar burpsuitepro.jar

┌──(tushar㉿techfire)-[~/Downloads/Burpsuite Pro]
└─$ java --illegal-access=permit -Dfile.encoding=utf-8 -javaagent:burpsuiteloader.jar -noverify -jar burpsuitepro.jar

The above command opens burp suite pro.
It will show the JRE prompt, just ignore it and press ok.
Accept the license agreement.
Now it will prompt for entering the license.
For that open a new terminal in the same folder and run the below command.

┌──(tushar㉿techfire)-[~/Downloads/Burpsuite Pro]
└─$ java -jar burpsuiteloaderold.jar

Above command open burp suite loader.
Change 'licensed to uncia' to 'licensed to yourname'.
Copy license from the loader and paste it in burp suite enter license field and press next.
Press manual activation.
Copy request and paste it in burp suite loader's activation request field.
Copy activation response from the loader and paste it in burp suite manual activation's paste response field and click next.
Your license is successfully installed and activated!

The activation process is only for one time.
For open burp suite professionals, you have to run the below command every time or you can also make a desktop launcher to make it easier.

┌──(tushar㉿techfire)-[~/Downloads/Burpsuite Pro]
└─$ java --illegal-access=permit -Dfile.encoding=utf-8 -javaagent:burpsuiteloader.jar -noverify -jar burpsuitepro.jar

How To Setup DVWA (Damn Vulnerable Web Application) On Kali Linux

2020-11-30T09:24:00.003+05:30

How To Setup DVWA (Damn Vulnerable Web Application) On Kali Linux

Hello Friends in this article we are going to install DVWA (Damn Vulnerable Web Application) on Kali Linux with a few easy steps.

So run commands step by step as I explained.

Download & Configure DVWA:

┌──(tushar㉿techfire)-[~]
└─$ cd /var/www/html

┌──(tushar㉿techfire)-[/var/www/html]
└─$ sudo git clone https://github.com/digininja/DVWA.git
[sudo] password for tushar: 
Cloning into 'DVWA'...
remote: Enumerating objects: 3310, done.
remote: Total 3310 (delta 0), reused 0 (delta 0), pack-reused 3310
Receiving objects: 100% (3310/3310), 1.60 MiB | 1.25 MiB/s, done.
Resolving deltas: 100% (1473/1473), done.

┌──(tushar㉿techfire)-[/var/www/html]
└─$ ls
DVWA index.html

┌──(tushar㉿techfire)-[/var/www/html]
└─$ sudo chmod -R 777 DVWA/

┌──(tushar㉿techfire)-[/var/www/html]
└─$ cd DVWA

┌──(tushar㉿techfire)-[/var/www/html/DVWA]
└─$ ls
about.php docs hackable login.php README.md tests
CHANGELOG.md dvwa ids_log.php logout.php robots.txt vulnerabilities
config external index.php phpinfo.php security.php
COPYING.txt favicon.ico instructions.php php.ini setup.php

┌──(tushar㉿techfire)-[/var/www/html/DVWA]
└─$ cd config

┌──(tushar㉿techfire)-[/var/www/html/DVWA/config]
└─$ ls
config.inc.php.dist

┌──(tushar㉿techfire)-[/var/www/html/DVWA/config]
└─$ cp config.inc.php.dist config.inc.php

┌──(tushar㉿techfire)-[/var/www/html/DVWA/config]
└─$ ls
config.inc.php config.inc.php.dist

┌──(tushar㉿techfire)-[/var/www/html/DVWA/config]
└─$ sudo nano config.inc.php

The above command opens config.inc.php file.

I'm using a nano editor but if you don't know how to use a nano editor then you can use a mousepad or other editor.

Now find below lines.

$_DVWA = array();
$_DVWA[ 'db_server' ] = '127.0.0.1';
$_DVWA[ 'db_database' ] = 'dvwa';
$_DVWA[ 'db_user' ] = 'dvwa';
$_DVWA[ 'db_password' ] = 'p@ssw0rd';
$_DVWA[ 'db_port'] = '3306';

Change it like below.

$_DVWA = array(); 
$_DVWA[ 'db_server' ] = '127.0.0.1';
$_DVWA[ 'db_database' ] = 'dvwa';
$_DVWA[ 'db_user' ] = 'user';
$_DVWA[ 'db_password' ] = 'pass';
$_DVWA[ 'db_port'] = '3306';

┌──(tushar㉿techfire)-[/var/www/html/DVWA/config]
└─$ cd

The above cd command takes you to the root folder.

Create MySQL Database & User:

┌──(tushar㉿techfire)-[~]
└─$ sudo service mysql start

┌──(tushar㉿techfire)-[~]
└─$ sudo mysql -u root -p
Enter password: 
Welcome to the MariaDB monitor. Commands end with ; or \g.
Your MariaDB connection id is 51
Server version: 10.3.24-MariaDB-2 Debian buildd-unstable

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> create user 'user'@'127.0.0.1' identified by 'pass';
Query OK, 0 rows affected (0.028 sec)

MariaDB [(none)]> grant all privileges on dvwa.* to 'user'@'127.0.0.1' identified by 'pass';
Query OK, 0 rows affected (0.001 sec)

MariaDB [(none)]> exit
Bye

After running the above command it will ask you for a password, but you have to press the enter key without putting any password.

And then follow MariaDB commands as I show you above.

┌──(tushar㉿techfire)-[~]
└─$ sudo service apache2 start

Configure PHP:

┌──(tushar㉿techfire)-[~]
└─$ cd /etc/php/7.4/apache2

┌──(tushar㉿techfire)-[/etc/php/7.4/apache2]
└─$ ls
conf.d php.ini

┌──(tushar㉿techfire)-[/etc/php/7.4/apache2]
└─$ sudo nano php.ini

The above command opens the php.ini file.

Now Find the below lines.

; Whether to allow the treatment of URLs (like http:// or ftp://) as files.
; http://php.net/allow-url-fopen
allow_url_fopen = On

; Whether to allow include/require to open URLs (like http:// or ftp://) as files.
; http://php.net/allow-url-include
allow_url_include = Off

Change the above lines like below.

; Whether to allow the treatment of URLs (like http:// or ftp://) as files.
; http://php.net/allow-url-fopen
allow_url_fopen = On

; Whether to allow include/require to open URLs (like http:// or ftp://) as files.
; http://php.net/allow-url-include
allow_url_include = On

┌──(tushar㉿techfire)-[/etc/php/7.4/apache2]
└─$ sudo service apache2 restart

Open Browser:

After following all the above steps now let's open DVWA.

Open the below link in the browser.

http://127.0.0.1/DVWA/setup.php

Click on "Create/Reset Database"

and now open the below link.

http://127.0.0.1/DVWA/login.php

The default login is
Username:- admin
Password:- password

Now you're done with setting up DVWA on your Kali Linux.

Practice and Grow your hacking skills.

Kali on the Windows Subsystem for Linux

2020-11-26T13:04:00.000+05:30

Install the Windows Subsystem for Linux:

First, run PowerShell as the administrator by pressing Windows + X and clicking on "Windows PowerShell (Admin)."

Then enable this optional Windows feature by running the following command.

Enable-WindowsOptionalFeature -Online -FeatureName Microsoft-Windows-Subsystem-Linux

Once you press Enter, a loading bar will appear for a few seconds, then you will be prompted to restart the computer.
Press Y and Enter to reboot.
The system will immediately begin to restart.

Download the 'Kali Linux' Application:

Once your system has rebooted and you've logged back into your account, navigate to the Microsoft Store by searching for it in the Cortana search bar in the bottom-left corner of your screen.
Once there, search for "Kali Linux" or simply follow the link below to open the Kali page in the Microsoft Store.
From there, click "Get" to begin installing.

Launch Kali for the First Time:

Before you launch the "Kali Linux" app for the first time, I recommend clicking "Pin to Start" or, better yet, click the ellipsis (...) just to the right of it and then "Pin to Taskbar" to make it quick and simple to launch Kali in the future.
Once you've done that, click "Launch," and a shell will open and begin the final installation which can take a few minutes.

With that done, you'll be prompted to create a Unix username and password.
Congratulations, you're all set up and running a Kali Linux subsystem on your Windows machine!

Don't forget to update it regularly just like any Linux system:

techfire@TUSHAR-MAKWANA:~$ sudo apt-get update
techfire@TUSHAR-MAKWANA:~$ sudo apt-get dist-upgrade

If hard drive space is a concern, then don't forget to clean up the apt directory:

techfire@TUSHAR-MAKWANA:~$ sudo apt-get clean

Add Windows Defender Exclusion:

Unfortunately, Windows Defender doesn't always like to play nice with the tools in the Kali repository.
Sometimes, it detects them as viruses and/or malware and blocks some portion of the program.

To prevent these errors, it's a good idea to go ahead and add a Windows Defender exclusion for the Kali Linux folder.
First, find that folder by opening File Explorer and entering the following location in the address bar.
Don't forget to replace "yourusername" with your actual username!

C:\Users\yourusername\AppData\Local\Packages\

Now, open the Kali Linux folder which should look something like "KaliLinux.3785648547FFE_," and copy the folder location.

With that in hand, search for "Windows Defender Security Center" in the Cortana search bar at the bottom left of the screen.
Within the Security Center, click on "Virus & threat protection" represented by a shield on the menu to the left side of the screen.
Next, click on the cog in the bottom, then "Virus & threat protection settings," then scroll down to the bottom under Exclusions and click "Add or remove exclusions." Then press the plus icon beside "Add an exclusion," select "Folder," and then paste the Kali folder address in the top bar.

Click "Select folder," and a popup will appear — click "Yes" to add the exclusion.

If you ever want to remove this exclusion, simply click on the down arrow beside the folder location, and click "Remove."

Install Penetration Testing Tools:

With the Windows Defender exclusion in place, you're ready to get started with your ethical hacking.
Not much comes preinstalled in this version, so install tools you wish to use from the Kali repository as you normally would with the apt-get command.

For example, to install Nmap:

techfire@TUSHAR-MAKWANA:~$ sudo apt-get update
techfire@TUSHAR-MAKWANA:~$ sudo apt-get install nmap

How to Create Fedora Live Persistent USB

2020-11-25T09:24:00.001+05:30

Requirements For Making Live USB With Persistence:

1.Linux OS (Ubuntu or Fedora itself)
2.16GB & Above Drive
3.Fedora ISO
4.Gparted
5.Livecd ISO To Disk Tool

Downloading Fedora:

You can download Fedora from below.
Get Fedora

Creating Fedora Live USB With Persistence Overlay:

The livecd-iso-to-disk method is slightly less reliable than Fedora Media Writer and can be used reliably only from within Fedora:

it does not work in Windows or macOS and is not supported (and will usually fail) in non-Fedora distributions.

However, it supports three advanced features which Fedora Media Writer does not include:

You may use a non-destructive method to create the stick, meaning existing files on the stick will not be destroyed. This is less reliable than the destructive write methods and should be used only if you have no stick you can afford to wipe.

On live images, you can include a feature called a persistent overlay, which allows changes made to persist across reboots. You can perform updates just like a regular installation to your hard disk, except that kernel updates require manual intervention and overlay space may be insufficient. Without a persistent overlay, the stick will return to a fresh state each time it is booted.

On live images, you can also have a separate area to store user account information and data such as documents and downloaded files, with optional encryption for security and peace of mind.

By combining these features, you can carry your computer with you in your pocket, booting it on nearly any system you find yourself using.

It is not a good idea to try and write a new Fedora release using the version of livecd-iso-to-disk in a much older Fedora release: it is best to only use a release a maximum of two versions older than the release you are trying to write.

As a Linux system, I'm using here Ubuntu OS.

Let's installing livecd iso to disk tool first.
Open terminal,

techfire@tushar:~$ sudo apt install cryptsetup-bin
techfire@tushar:~$ git clone https://github.com/livecd-tools/livecd-tools.git
techfire@tushar:~$ cd tools
techfire@tushar:~$ ls

After running ls command you will find livecd-iso-to-disk.sh script.

Now insert your pendrive in computer & if you are formatted it in FAT32, then I would suggest you reformat it in ext4 file system using Gparted software.

If necessary, you can have livecd-iso-to-disk re-partition and re-format the target stick:

techfire@tushar:~$ sudo ./livecd-iso-to-disk.sh --format --reset-mbr Fedora-Workstation-Live-x86_64-31-1.1.iso /dev/sdaX

Here I using /dev/sdaX means in your case X will change. For example /dev/sda1, /dev/sda2 etc
Sometimes it also shown as sdbX so keep this point in your mind and then processed

To include a persistent filesystem for /home, use the --home-size-mb parameter. For example:

techfire@tushar:~$ sudo ./livecd-iso-to-disk.sh --home-size-mb 12288 Fedora-Workstation-Live-x86_64-31-1.1.iso /dev/sdaX

This will create a 12GB(12288MB) filesystem that will be mounted as /home each time the stick is booted, allowing you to preserve data in /home across boots.

To enable 'data persistence' support - so changes you make to the entire live environment will persist across boots - add the --overlay-size-mb parameter to add a persistent data storage area to the target stick. For example:

techfire@tushar:~$ sudo ./livecd-iso-to-disk.sh --overlay-size-mb 9216 Fedora-Workstation-Live-x86_64-31-1.1.iso /dev/sdaX

Here, 9216 is the desired size (in megabytes) of the overlay. The livecd-iso-to-disk tool will not accept an overlay size value greater than 4095 for VFAT, but for ext[234] filesystems it is only limited by the available space.

You can combine --home-size-mb and --overlay-size-mb & --reset-mbr for making easy process, in which case data written to /home will not exhaust the persistent overlay:

techfire@tushar:~$ sudo ./livecd-iso-to-disk.sh --reset-mbr --noverify --overlay-size-mb 9216 --home-size-mb 12288 --unencrypted-home ~/Downloads/Fedora-Workstation-Live-x86_64-31-1.1.iso /dev/sdaX

Troubleshooting a live USB

livecd-iso-to-disk problems :

Partition isn’t marked bootable
If you get the message Partition isn’t marked bootable! you need to mark the partition bootable. To do this,

run parted /dev/sdX,
and use the toggle N boot command,
where X is the appropriate letter,
and N is the partition number.

For example:

$ parted /dev/sdb
GNU Parted 1.8.6
Using /dev/sdb
Welcome to GNU Parted! Type 'help' to view a list of commands.
(parted) print
Model: Imation Flash Drive (scsi)
Disk /dev/sdX: 1062MB
Sector size (logical/physical): 512B/512B
Partition Table: msdos

Number Start End Size Type File system Flags
1 32.3kB 1062MB 1062MB primary fat16

(parted) toggle 1 boot
(parted) print
Model: Imation Flash Drive (scsi)
Disk /dev/sdX: 1062MB
Sector size (logical/physical): 512B/512B
Partition Table: msdos

Number Start End Size Type File system Flags
1 32.3kB 1062MB 1062MB primary fat16 boot

(parted) quit
Information: Don't forget to update /etc/fstab, if necessary.

How To Install Sublime Text Editor In Linux

2020-11-24T14:10:00.003+05:30

How To Install Sublime Text Editor In Linux

Hello friends,
In this article, I'm going to installing a sublime text editor in Linux with a license.
First of all, I will show you installation in Kali Linux, and then after I will show you how you can install sublime text editor in different Linux distributions.

How To Install Sublime Text Editor In Kali Linux

For that run below commands,

┌──(tushar㉿techfire)-[~]
└─$ wget -qO - https://download.sublimetext.com/sublimehq-pub.gpg | sudo apt-key add -
Warning: apt-key is deprecated. Manage keyring files in trusted.gpg.d instead (see apt-key(8)).
OK

┌──(tushar㉿techfire)-[~]
└─$ sudo apt-get install apt-transport-https
Reading package lists... Done
Building dependency tree 
Reading state information... Done
apt-transport-https is already the newest version (2.1.11).
0 upgraded, 0 newly installed, 0 to remove and 198 not upgraded.

┌──(tushar㉿techfire)-[~]
└─$ echo "deb https://download.sublimetext.com/ apt/stable/" | sudo tee /etc/apt/sources.list.d/sublime-text.list
deb https://download.sublimetext.com/ apt/stable/

┌──(tushar㉿techfire)-[~]
└─$ sudo apt-get update
Get:2 https://download.sublimetext.com apt/stable/ InRelease [2,562 B] 
Get:3 https://download.sublimetext.com apt/stable/ Packages [1,026 B] 
Hit:1 http://ftp.harukasan.org/kali kali-rolling InRelease 
Fetched 3,588 B in 7s (529 B/s) 
Reading package lists... Done

┌──(tushar㉿techfire)-[~]
└─$ sudo apt-get install sublime-text
Reading package lists... Done
Building dependency tree 
Reading state information... Done
The following NEW packages will be installed:
sublime-text
0 upgraded, 1 newly installed, 0 to remove and 198 not upgraded.
Need to get 9,835 kB of archives.
After this operation, 34.8 MB of additional disk space will be used.
Get:1 https://download.sublimetext.com apt/stable/ sublime-text 3211 [9,835 kB]
Fetched 9,835 kB in 8s (1,274 kB/s) 
Selecting previously unselected package sublime-text.
(Reading database ... 300974 files and directories currently installed.)
Preparing to unpack .../sublime-text_3211_amd64.deb ...
Unpacking sublime-text (3211) ...
Setting up sublime-text (3211) ...
Processing triggers for kali-menu (2020.4.0) ...
Processing triggers for desktop-file-utils (0.26-1) ...
Processing triggers for mime-support (3.64) ...
Processing triggers for hicolor-icon-theme (0.17-2) ...
Processing triggers for gnome-menus (3.36.0-1) ...

┌──(tushar㉿techfire)-[~]
└─$ subl

after running subl command it will open the sublime text editor.
Now go to Help >> Enter License in a sublime text editor.

Copy below license and paste there and you will purchase sublime text editor for free.

----- BEGIN LICENSE -----
Member J2TeaM
Single User License
EA7E-1011316
D7DA350E 1B8B0760 972F8B60 F3E64036
B9B4E234 F356F38F 0AD1E3B7 0E9C5FAD
FA0A2ABE 25F65BD8 D51458E5 3923CE80
87428428 79079A01 AA69F319 A1AF29A4
A684C2DC 0B1583D4 19CBD290 217618CD
5653E0A0 BACE3948 BB2EE45E 422D2C87
DD9AF44B 99C49590 D2DBDEE1 75860FD2
8C8BB2AD B2ECE5A4 EFC08AF2 25A9B864
------ END LICENSE ------

How To Install Sublime Text Editor In Linux

APT (Ubuntu, Debian)

Install the GPG key:

wget -qO - https://download.sublimetext.com/sublimehq-pub.gpg | sudo apt-key add -

Ensure APT is set up to work with HTTPS sources:

sudo apt-get install apt-transport-https

Select the channel to use:

Stable

echo "deb https://download.sublimetext.com/ apt/stable/" | sudo tee /etc/apt/sources.list.d/sublime-text.list

Dev

echo "deb https://download.sublimetext.com/ apt/dev/" | sudo tee /etc/apt/sources.list.d/sublime-text.list

Update apt sources and install Sublime Text

sudo apt-get update
sudo apt-get install sublime-text

PacMan (ArchLinux)

Install the GPG key:

curl -O https://download.sublimetext.com/sublimehq-pub.gpg && sudo pacman-key --add sublimehq-pub.gpg && sudo pacman-key --lsign-key 8A8F901A && rm sublimehq-pub.gpg

Select the channel to use:

Stable

echo -e "\n[sublime-text]\nServer = https://download.sublimetext.com/arch/stable/x86_64" | sudo tee -a /etc/pacman.conf

Dev

echo -e "\n[sublime-text]\nServer = https://download.sublimetext.com/arch/dev/x86_64" | sudo tee -a /etc/pacman.conf

Update Pacman and install Sublime Text

sudo pacman -Syu sublime-text

Yum (CentOS/RHEL)

Install the GPG key:

sudo rpm -v --import https://download.sublimetext.com/sublimehq-rpm-pub.gpg

Select the channel to use:

Stable

sudo yum-config-manager --add-repo https://download.sublimetext.com/rpm/stable/x86_64/sublime-text.repo

Dev

sudo yum-config-manager --add-repo https://download.sublimetext.com/rpm/dev/x86_64/sublime-text.repo

Update yum and install Sublime Text

sudo yum install sublime-text

DNF (Fedora)

Install the GPG key:

sudo rpm -v --import https://download.sublimetext.com/sublimehq-rpm-pub.gpg

Select the channel to use:

Stable

sudo dnf config-manager --add-repo https://download.sublimetext.com/rpm/stable/x86_64/sublime-text.repo

Dev

sudo dnf config-manager --add-repo https://download.sublimetext.com/rpm/dev/x86_64/sublime-text.repo

Update DNF and install Sublime Text

sudo dnf install sublime-text

Zypper (openSUSE)

Install the GPG key:

sudo rpm -v --import https://download.sublimetext.com/sublimehq-rpm-pub.gpg

Select the channel to use:

Stable

sudo zypper addrepo -g -f https://download.sublimetext.com/rpm/stable/x86_64/sublime-text.repo

Dev

sudo zypper addrepo -g -f https://download.sublimetext.com/rpm/dev/x86_64/sublime-text.repo

Update Zypper and install Sublime Text

sudo zypper install sublime-text

Once you are done with installation open a sublime text editor and go to Help >> Enter Licence and you're done.

----- BEGIN LICENSE -----
Member J2TeaM
Single User License
EA7E-1011316
D7DA350E 1B8B0760 972F8B60 F3E64036
B9B4E234 F356F38F 0AD1E3B7 0E9C5FAD
FA0A2ABE 25F65BD8 D51458E5 3923CE80
87428428 79079A01 AA69F319 A1AF29A4
A684C2DC 0B1583D4 19CBD290 217618CD
5653E0A0 BACE3948 BB2EE45E 422D2C87
DD9AF44B 99C49590 D2DBDEE1 75860FD2
8C8BB2AD B2ECE5A4 EFC08AF2 25A9B864
------ END LICENSE ------

Kali Linux Live USB with Persistence Storage

2020-11-23T09:07:00.000+05:30

How To Create Kali Linux Live USB with Persistence Storage

Who knows you can add persistent storage with your Kali Linux on-the-go?
Well, actually you can do it with simple steps.

In this tutorial, I would like to tell you how to make a Kali Linux on-the-go (Live USB), but this Kali is special because we can save our data in the same USB we use to boot that "portable" Kali. We call it Kali Linux with Persistence.
Actually, there is the official documentation for making this stuff but it somewhat hard to understand.
You can choose either you want to read this post or read the official documentation.

Requirements:

Kali Linux ISO (https://www.kali.org/downloads/)
Minitool Partition Wizard (https://www.partitionwizard.com/free-partition-manager.html)
Win32DiskImager (https://sourceforge.net/projects/win32diskimager/)
USB flash disk or any portable storage (recommended size 8GB+)

Download & Install Minitool Partition Wizard and Win32DiskImager.
Download Kali Linux Live ISO (https://www.kali.org/downloads/)
Insert Pendrive to PC/Laptop and Format to FAT32 (My Pendrive is HP 32Gb)
Open Win32DiskImager and select your Pendrive and choose Kali Linux ISO Image file and click on Write.
Note: Win32DiskImager is not directly showing the .iso file so that you have to change the .img file format to all in the ISO selection prompt.

Open Minitool Partition Wizard and your Pendrive is shown up with three different partitions and one of them is unallocated.
Right-click on unallocated space and make partition label: persistence and as Primary with file system EXT4.
Click ok and apply settings.
After complete the process, it will prompt for format disk but ignore it and cancel.

Now restart your PC/Laptop using Kali Linux Pendrive which we made and choose Live System (persistence).
after opening Kali Linux we will configure some settings for persistence storage.

Let's Do It,

After booting Kali Linux open Terminal.
Run below command.
You have to run all commands as root privileges.
and find your Pendrive partition label.

root@kali:~# fdisk -l

After executing the above command you have to find your pen drive location, in my case /dev/sdb (29.6 GB).
and then find the partition which we make earlier as EXT4, in my case it is /dev/sdb3 (26.4 GB).

root@kali:~# mkdir -p /mnt/techfire

Here techfire = give any name you want.

root@kali:~# mount /dev/sdb3 /mnt/techfire/

This command creates a mount point of our persistence storage at /mnt/techfire.

root@kali:~# echo "/ union" > /mnt/techfire/persistence.conf

After running the above command this will print (/ union) in the persistence partition, you can check it by opening the persistence partition.

root@kali:~# umount /dev/sdb3

The above command unmounts the partition which we mount at /mnt/techfire.

root@kali:~# reboot

This will reboot the system and you're done with persistence storage settings.

Now boot Kali Linux with Live System (persistence mode) and try it with making some changes and check that data remain persistent or not.

If you follow my all steps then I'm sure it will work perfectly fine and if you're facing some issue in understanding the post then you can also watch the below video tutorial.
Note: After making Kali Linux live persistent Pendrive, don't run it as live mode, in every boot you have to run with Live System (persistence mode).

Video Tutorial:

GPS Live Location Spoofing | How To Send Fake GPS Location To Our Friends!

2020-11-22T09:06:00.000+05:30

GPS Live Location Spoofing | How To Send Fake GPS Location To Our Friends!

Hello, friends in this tutorial we talk about GPS Live Location Spoofing.
How we can send fake locations to our friends and make them fool.

Step 1:

Turn on the developer's option on your android phone:
Go to about phone.
Search for build number/software info/this may be different in some phones.
Hit 7 times on build number.
After that you will prompt with you are a developer now something like this.
It's done.

Step 2:

Go to Google play store.
Search for a Fake GPS location and download it.

Fake GPS location

Open it.

Step 3:

Open the phone's settings.
Go to developer options.
Search for a select Mock Location.
Now select the Fake GPS location app.

Step 4:

Open fake GPS location app.
Now set any location which you want and hit on the green play button.
Now your location changed to your desired location.
For back to normal location simply hit on the pause button.

I hope you like this tutorial and also have a video tutorial to show you.

Video Tutorial:

How To Uninstall System Apps Using Adb Without Root

2020-11-21T14:02:00.001+05:30

How To Uninstall System Apps Using ADB Without Root

In this article, we discuss how to remove/uninstall system apps in the android phone using ADB (Android Debug Bridge).

Requirements:

1.USB Drivers For Your Device
2.Minimal ADB and Fastboot
3.Enable Developer Option & USB Debugging

To enable the developer option, go to your settings >> about section >> then tap 7 times on the build number.
In the developer option, you have to tick on USB Debugging.

Let's Do it,

Download and install Minimal ADB & Fastboot.

Minimal ADB & Fastboot

Open Minimal ADB and Fastboot command prompt.
Connect the android phone with pc/laptop using a USB cable and make sure your USB Debugging is turned on.

Now run the below commands,

Microsoft Windows [Version 10.0.19041.630]
(c) 2020 Microsoft Corporation. All rights reserved.

C:\Program Files (x86)\Minimal ADB and Fastboot>adb devices
List of devices attached
ZFXXXXXJMM device

C:\Program Files (x86)\Minimal ADB and Fastboot>adb shell

chef_sprout:/ $ pm list packages | grep 'camera'

In the above command, pm list packages | grep 'OEM/Carrier/App Name'
OEM/Carrier/App Name = Your app name which you want to delete, here in this example I choose camera app.
After running the above command you will get an output with the package name shown below.
In some cases, you will get many more package names but you are smart enough to find the perfect package name for the app which you want to delete.

package:com.motorola.ts.camera

chef_sprout:/ $ pm uninstall -k --user 0 com.motorola.ts.camera

SOME PROCESS GOING HERE

C:\Program Files (x86)\Minimal ADB and Fastboot>

In the above command, pm uninstall -k --user 0 (name of the package)
Change package name with your app's package name.

How To Get Back/Re-Install uninstalled Apps (APKs) with ADB

Open a command prompt or terminal window, and enter the following command

C:\Program Files (x86)\Minimal ADB and Fastboot>adb shell
chef_sprout:/ $ cmd package install-existing com.motorola.ts.camera

com.motorola.ts.camera = package name

so change it with your app's package name

This works because applications truly aren’t being fully uninstalled from the device, they are just being uninstalled for the current user (user 0 is the default/main user of the phone). That’s why, if you omit the “–user 0” and “-k” part of the uninstall command, the command won’t work. These two flags respectively specify that the system app will only be uninstalled for the current user (and not all users, which is something that requires root access) and that the cache/data of the system application will be preserved (which can’t be removed without root-access). Therefore, even if you “uninstall” a system application using this method, you can still receive official OTA updates from your carrier or OEM.

Video Tutorial:

How To Add Download Box Button with Countdown Timer In Blogger Blogs

2020-11-20T19:22:00.002+05:30

How To Add Download Box Button with Countdown Timer In Blogger

Function: Reduces the bounce rate of article pages on the download blog.
Difficulty Level: Easy
Usage: Manual
Programming Languages: HTML, CSS, and Javascript
External File: Font Awesome 4.7 or later.

HTML

<div class='container'>
  <div class="batas-downx">
    <div class="dalam-downx">
      <div class="bungkus-info">
        <div class="file-info">
          File Name
        </div>
        <button onclick="generate()" id="btnx">
          <i class="fa fa-cloud-download fa-fw" aria-hidden="true">
          </i> download
        </button>
        <a id="downloadx" href="https://1plex.blogspot.com/" style="display:none">
          <i class="fa fa-cloud-download fa-fw" aria-hidden="true">
          </i> Download again
        </a>
      </div>
      <div class="file-deskripsi">
        <span class="uploader">
          <i class="fa fa-user-circle fa-fw" aria-hidden="true">
          </i> Uploader / Creator Name
        </span> 
        <span class="file-size"> 
          <i class="fa fa-file fa-fw" aria-hidden="true">
          </i>
          File Size: 500MB
        </span>
      </div>
    </div>
    <div class="catatan-downx">
      If it is not automatically downloaded, please click Download again. And if the link is broken, please report via the Contact page of this blog.
    </div>
  </div>

CSS

/* Fonts */
@font-face{font-family:'Google Sans';font-style:normal;font-weight:400;src:local('Google Sans Regular'),local(GoogleSans-Regular),url(//fonts.gstatic.com/s/googlesans/v5/4UaGrENHsxJlGDuGo1OIlL3Kwp5MKg.woff2) format("woff2");unicode-range:U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116}
@font-face{font-family:'Google Sans';font-style:normal;font-weight:400;src:local('Google Sans Regular'),local(GoogleSans-Regular),url(//fonts.gstatic.com/s/googlesans/v5/4UaGrENHsxJlGDuGo1OIlL3Nwp5MKg.woff2) format("woff2");unicode-range:U+0370-03FF}
@font-face{font-family:'Google Sans';font-style:normal;font-weight:400;src:local('Google Sans Regular'),local(GoogleSans-Regular),url(//fonts.gstatic.com/s/googlesans/v5/4UaGrENHsxJlGDuGo1OIlL3Awp5MKg.woff2) format("woff2");unicode-range:U+0100-024F,U+0259,U+1E00-1EFF,U+2020,U+20A0-20AB,U+20AD-20CF,U+2113,U+2C60-2C7F,U+A720-A7FF}
@font-face{font-family:'Google Sans';font-style:normal;font-weight:400;src:local('Google Sans Regular'),local(GoogleSans-Regular),url(//fonts.gstatic.com/s/googlesans/v5/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2) format("woff2");unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
@font-face{font-family:'Google Sans';font-style:normal;font-weight:500;src:local('Google Sans Medium'),local(GoogleSans-Medium),url(//fonts.gstatic.com/s/googlesans/v5/4UabrENHsxJlGDuGo1OIlLU94Yt3CwZ-Pw.woff2) format("woff2");unicode-range:U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116}
@font-face{font-family:'Google Sans';font-style:normal;font-weight:500;src:local('Google Sans Medium'),local(GoogleSans-Medium),url(//fonts.gstatic.com/s/googlesans/v5/4UabrENHsxJlGDuGo1OIlLU94YtwCwZ-Pw.woff2) format("woff2");unicode-range:U+0370-03FF}
@font-face{font-family:'Google Sans';font-style:normal;font-weight:500;src:local('Google Sans Medium'),local(GoogleSans-Medium),url(//fonts.gstatic.com/s/googlesans/v5/4UabrENHsxJlGDuGo1OIlLU94Yt9CwZ-Pw.woff2) format("woff2");unicode-range:U+0100-024F,U+0259,U+1E00-1EFF,U+2020,U+20A0-20AB,U+20AD-20CF,U+2113,U+2C60-2C7F,U+A720-A7FF}
@font-face{font-family:'Google Sans';font-style:normal;font-weight:500;src:local('Google Sans Medium'),local(GoogleSans-Medium),url(//fonts.gstatic.com/s/googlesans/v5/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2) format("woff2");unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}
a,a:link,a:visited{color:#333;text-decoration:none;transition:all .3s}
a:hover,a:hover:visited{color:#1e7ce5}
*,*:before,*:after{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}
body{background:#74b9ff;font-family:"Google Sans",sans-serif;margin:0;padding:0;position:relative;line-height:normal;height:100%;color:#000}
.container{background:#fff;max-width:620px;margin:4% auto;padding:5px;font-size:16px;line-height:1.6;box-shadow:0 3px 10px rgba(0,0,0,0.1);border-radius:3px}
.container h1,.container h2{display:block;margin-bottom:20px;font-weight:400;color:#000}
.container h2{margin-top:30px}
/* Download Counter Box */
#btnx{cursor:pointer;padding:10px 20px;border:0;border-radius:3px;background:#1DB954;color:#fff;float:right;text-transform:capitalize;font-weight:500;transition:all 0.5s}
#btnx:hover,#downloadx:hover{background:#1db95480;color:#fff;outline:none}
.batas-downx{display:block;margin:0 auto;border-radius:4px}
.dalam-downx{background:#222 url('#');color:#fff;padding:20px;display:block;border-top-right-radius:3px;border-top-left-radius:3px}
.file-info{color:#fff;display:inline-block;font-size:1.2em;line-height:38px;text-align:left}
.catatan-downx{padding:20px;background:#ddd;border-bottom-right-radius:3px;border-bottom-left-radius:3px;color:#555;font-size:14px}
.catatan-downx:before{content:'\f05a';display:table;float:left;font-family:FontAwesome;font-size:32px;margin:-5px 10px auto auto}
#downloadx{float:right}
#downloadx{padding:10px 20px;border-radius:3px;background:#ffc832;color:#222;float:right;text-align:center;font-size:14px;text-transform:capitalize}
.bungkus-info span{display:inline-block;line-height:38px;float:right}
.file-deskripsi{display:block}
.file-deskripsi span{margin-right:5px}
@media screen and (max-width:640px){.batas-downx{float:none;width:100%}}
@media screen and (max-width:320px){.file-info{display:block;text-align:center}#btnx,#downloadx{width:100%;margin-bottom:10px}.bungkus-info span{float:none;width:100%;text-align:center}.file-deskripsi{text-align:center}}

Javascript

<script type='text/javascript'>
  //<![CDATA[
  function generate(){
    var e,n=document.getElementById("downloadx"),t=document.getElementById("btnx"),a=document.getElementById("downloadx").href,l=10,d=document.createElement("span");
    n.parentNode.replaceChild(d,n),e=setInterval(function(){
      --l<0?(d.parentNode.replaceChild(n,d),clearInterval(e),window.location.replace(a),n.style.display="inline"):(d.innerHTML="<p style='font-family:Google Sans, sans-serif'>The file is ready to download in "+l.toString()+" Seconds ....</p>",t.style.display="none")}
                                                 ,1e3)}
  //]]>
</script>

Font Awesome

<script type='text/javascript'>
  //<![CDATA[
  //CSS Ready
  function loadCSS(e, t, n) {
    "use strict";
    var i = window.document.createElement("link");
    var o = t || window.document.getElementsByTagName("script")[0];
    i.rel = "stylesheet";
    i.href = e;
    i.media = "only x";
    o.parentNode.insertBefore(i, o);
    setTimeout(function () {
      i.media = n || "all" }
              ) }
  loadCSS("https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css");
  //]]>
</script>

How to Create Instagram Image & Video Downloader Tool in Blogger

2020-11-19T08:49:00.013+05:30

How to Create Instagram Image & Video Downloader Tool in Blogger

Step 1:

Copy below code and paste it in Themes >> Customise >> Edit HTML.
First, remove all codes which are already present in the Edit HTML section and then paste the below codes.

Edit HTML

<?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE html>
<html b:css='false' b:responsive='true' expr:dir='data:blog.languageDirection' lang='en-US' xmlns='http://www.w3.org/1999/xhtml'
      xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data'
      xmlns:expr='http://www.google.com/2005/gml/expr'>
  <head>
    <meta content='width=device-width, initial-scale=1' name='viewport'/>
    <b:include data='blog' name='all-head-content'/>
    <title>
      <data:blog.pageTitle/>
    </title>
    <b:skin>
      <![CDATA[
body{background:#fff}
]]>
    </b:skin>
  </head>
  <body>
    <b:section class='main' id='main' showaddelement='yes'/>
  </body>
</html>

Step 2:

Go to layout >> Add a Gadget >> HTML/Javascript.
Copy below Javascript code and paste it in the content area of the gadget and the title will remain blank.

Javascript

<script>
  const _ = e => document.querySelector(e);
  const render = _('.result');
  // create video
  const createVideo = data => {
    let v = document.createElement('video');
    v.id = "instavideo";
    v.src = data.content;
    v.controls = true;
    v.autoplay = true;
    // create info
    let info = document.createElement('p');
    info.textContent = "Click the right button on video and select save as.";
    render.innerHTML = "";
    render.appendChild(v);
    render.appendChild(info);
  };
  // create image
  const createImg = data => {
    // create image
    let i = document.createElement('img');
    i.id = "instaImg";
    i.src = data.content;
    // create info
    let info = document.createElement('p');
    info.textContent = "Click the right button on the image and select save image..";
    render.innerHTML = "";
    render.appendChild(i);
    render.appendChild(info);
  };
  // extract html
  const getMedia = () => {
    render.innerHTML = "<div class='image-placeholder'></div>";
    // get input value
    let url = _('input').value;
    if (url) {
      fetch(url).
      then(r => r.text()).
      then(r => {
        // render html
        render.innerHTML = r;
        // wait, find meta and create video or image
        let w = setTimeout(() => {
          let v = _('meta[property="og:video"]');
          if (v) {
            createVideo(v);
          }
          else {
            let img = _('meta[property="og:image"]');
            if (img) {
              createImg(img);
            }
            else {
              document.body.innerHTML = body;
              alert('Error extracting Instagram image / video.');
            };
          }
          clearTimeout(w);
        }
                           , 200);
      }
          );
    }
    else {
      _('input').setAttribute('placeholder', 'Invalid address, use a proper Insagram link');
    }
  };
</script>

Step 3:

Go to layout >> Add a Gadget >> HTML/Javascript.
Copy below HTML code and paste it in the content area of the gadget and the title will remain blank.

HTML

<!doctype html>
Instagram Downloader
<link rel="stylesheet" href="style.css" />
<main>
  <header class="navbar">
    <input type="text" value="" placeholder="Paste link here..." />
    <button class="search" onclick="getMedia()">Get
    </button>
  </header>
  <section class="result">
    <div class="image-placeholder">
    </div>
    <p> Copy image or video link from Instagram and put it on the field given on the top. 
    </p>
  </section>
</main>
<script src="function.js">
</script>
</!doctype>

Step 4:

Go to layout >> Add a Gadget >> HTML/Javascript.
Copy below HTML code and paste it in the content area of the gadget and the title will remain blank.

CSS

<style>
  * {
    box-sizing: border-box;
  }
  html, body {
    position: relative;
    height: 100%;
  }
  body {
    margin: 0;
    padding: 0;
    font-family: "consolas",monospace;
    font-size: 14px;
    line-height: 1.5;
    background: #f9f9f9;
    color: #333;
  }
  code {
    background: #208bfd;
    color: #f9f9f9;
    padding: 0.1em 0.5em;
    border-radius: 4px;
  }
  .image-placeholder {
    margin: auto;
    width: 89%;
    max-width: 500px;
    display: block;
    height: 380px;
    background-repeat: no-repeat;
    background-size: cover;
    background-position: center center;
    background-image: url(https://webdevtrick.com/wp-content/uploads/image-placeholder.png);
  }
  @media (max-width: 420px) {
    .image-placeholder {
      width: 320px;
      max-width: 320px;
      height: 280px;
      background-size: contain;
      background-position: top left;
      background-attachment: scroll;
    }
  }
  header {
    position: absolute;
    top: 0;
    left: 0;
    width: 100%;
    height: 4em;
    background: #208bfd;
    margin: 0 auto;
    text-align: center;
    color: #f9f9f9;
  }
  ::placeholder {
    color: #212121;
  }
  input {
    display: inline-block;
    width: 100%;
    max-width: 50%;
    max-width: calc(100% - 8em);
    min-height: 2.8em;
    padding: 0.5em;
    margin: 0.5em 0;
    background: #f3f3f3;
    border-color: #208bfd;
    border-width: 1px;
    color: #212121;
    transition: all 500ms ease;
  }
  input:focus, input:hover {
    border-color: #208bfd;
    transition: all 500ms ease;
  }
  @media (min-width: 420px) {
    input {
      max-width: 50%;
    }
  }
  .search {
    display: inline-block;
    padding: 0 1em;
    text-align: center;
    min-width: 2.8em;
    height: 2.8em;
    margin: 0;
    background: #208bfd;
    border: 2px solid #212121;
    color: #f9f9f9;
    transition: all 500ms ease;
  }
  .search:focus, .search:hover {
    background: #212121;
    border-color: #f9f9f9;
    cursor: pointer;
    transition: all 500ms ease;
  }
  .result {
    margin: 0 auto;
    padding: 4em 1em;
    max-width: 40em;
  }
  .result video, .result img {
    width: calc(100% - 4em);
    margin: 2em;
  }
  .result .download {
    text-decoration: none;
    display: inline-block;
    padding: 0.5em 1em;
    background: #208bfd;
    border-color: #208bfd;
    border-width: 1px;
    color: #f9f9f9;
    transition: all 500ms ease;
  }
  .result .download:focus, .result .download:hover {
    background: #208bfd;
    border-color: #f9f9f9;
    cursor: pointer;
    transition: all 500ms ease;
  }
  @media (max-width: 600px) {
    .result {
      position: absolute;
      top: 4em;
      left: 0;
      right: 0;
      height: calc(100% - 10em);
      overflow-y: auto;
      max-width: 40em;
      background: #f9f9f9;
      margin: auto;
    }
  }
  footer {
    width: 100%;
    margin: 2em auto;
    text-align: center;
  }
  @media (max-width: 600px) {
    footer {
      position: absolute;
      bottom: 1em;
      left: 0;
      right: 0;
      height: 2em;
    }
  }
</style>

After adding the above codes refresh the blogger page.
Now go to Themes >> Customise >> Edit HTML.

Step 4:

Press Ctrl + F and find the below code and remove it from the Edit HTML section.
Note: Below code is three times in the Edit HTML section so find it & remove it all.

Extras

<b:include name='quickedit'/>

Demo

How To Add Syntax Highlighting To Code Snippets/Code Box In Blogger Blogs or Websites

2020-11-11T21:03:00.001+05:30

How To Add Syntax Highlighting To Code Snippets/Code Box In Blogger Blogs or Websites

In this article, we gonna talk about how to adding syntax highlighting in our blogger blogs.
I got a few requests on how to highlight the syntax of code snippets/code box in a blog like I have.
See an example of my code snippets/code box below,

<script>/*<![CDATA[*/ var lazyadsense = false;
  window.addEventListener("scroll", function(){
    if ((document.documentElement.scrollTop != 0 && lazyadsense === false) || (document.body.scrollTop != 0 && lazyadsense === false)) {
      (function() {
        var ad = document.createElement('script');
        ad.async = true;
        ad.src = 'https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js';
        var sc = document.getElementsByTagName('head')[0];
        sc.parentNode.insertBefore(ad, sc);
      }
      )();
      lazyadsense = true;
    }
  }
  ,true) /*]]>*/
</script>

Many people initially think you have to manually color the elements or manually escape the characters, but it's much more simple than that, so I'll cover everything necessary to embed snippets in your own blog or website in this article.

You can do this using a JavaScript library to automatically highlight your code.
There are two main options here - Highlight.js and Prism.js.
Google Prettify is a third option.

I'll focus on Prism.js here, as it's what I use for this site, but I've used all the above at some point and they're all very similar.
They give you options on what languages and themes you plan to use, so you'll just check the relevant ones and get the download.
All the Prism files are also available as a CDN, so if you don't wish to download anything, you can do it that way.

How To Install PrismJS:

Add CSS Code Before </head> or </head>

<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/themes/prism-okaidia.min.css" integrity="sha512-mIs9kKbaw6JZFfSuo+MovjU+Ntggfoj8RwAmJbVXQ5mkAX5LlgETQEweFPI18humSPHymTb5iikEOKWF7I8ncQ==" crossorigin="anonymous" />

Add Javascript Code Above </body> or </body>

<script src="https://cdnjs.cloudflare.com/ajax/libs/prism/1.22.0/prism.min.js" integrity="sha512-9+422Bs3A87UkWfp+qV80Nfv9arhbCXKY1rxrF2seorI36mIIstMiuBfyKLF1yH1nnzQkEWq2xrzT4XU3Z+vrA==" crossorigin="anonymous">
</script>

How To Use PrismJS:

<pre><code class="language-###"> <!-- CODE GOES HERE --> </code></pre>

Here change ### with your code language and for know about language name use below PrismJS official website.

Example:

<pre><code class="language-css"> <!-- CODE GOES HERE --> </code></pre>

Full Example With Code:

<pre><code class="language-js"><script>
jQuery(document).ready(function($) {
$("#feed-input").focus(function(){
$(this).parent().addClass("thing");
$("#search-btn").addClass("thing");
}).blur(function(){
$(this).parent().removeClass("thing").delay(1000);
$("#search-btn").removeClass("thing").delay(1000);
})
}); 
</script></code></pre>

In the above example, the code is in an encoded format/some of the symbols & tags escaped so that browser doesn't try to parse the code in our blog and shows as we wish without any errors.
You can use my HTML Encoder/Decoder Tool for encoding your code.

HTML Encode & Decode Tool

Source Code Beautifier

How to Speed Up Blog Loading by Installing DNS Prefetch

2020-11-10T09:21:00.001+05:30

How to Speed Up Blog Loading by Installing DNS Prefetch

Having a fast loading blog is a dream for every blogger and visitors to the blog.
There are various ways to optimize the blog to speed up loading the blog/website, one of which is how to speed up loading the blog by installing a DNS Prefetch. Actually, this method can also solve Reduce DNS Lookups on YSlow GTmetrix.
DNS Prefetch / Domain Name System Prefetching is one way to speed up the loading of certain domains and of course it will impact the speed of our blog.

How does DNS Prefetch work?

DNS Prefetch will give commands to the browser to complete rendering the Domain name as quickly as possible, then for a few moments the browser will bind it and when visitors scroll the blog page, the browser will automatically display the blog page faster because of the external link with the DNS Prefetch tag is deemed completed loading.

For example, you install google fonts, then the tag used is

<link href='//fonts.googleapis.com' rel='dns-prefetch'/>

After I gave the example above, maybe you already have a little idea of how this DNS Prefetch works.
Now continue how to install the DNS Prefetch.

How to Install DNS Prefetch to Speed Up Blog Loading

First, open the Themes menu >> Edit HTML.
Then look for the code <b:skin> or <head>, but if I'm looking for a code <b:skin>.
Copy the code below and Paste it above the code <b:skin> or before the code <b:skin>.

<link href='//ajax.googleapis.com' rel='dns-prefetch'/>
<link href='//www.google-analytics.com' rel='dns-prefetch'/>
<link href='//googleads.g.doubleclick.net' rel='dns-prefetch'/>
<link href='//www.googletagservices.com' rel='dns-prefetch'/>
<link href='//pagead2.googlesyndication.com' rel='dns-prefetch'/>
<link href='//maxcdn.bootstrapcdn.com' rel='dns-prefetch'/>
<link href='//adservice.google.ca' rel='dns-prefetch'/>
<link href='//adservice.google.com' rel='dns-prefetch'/>
<link href='//resources.blogblog.com' rel='dns-prefetch'/>
<link href='//fonts.googleapis.com' rel='dns-prefetch'/>
<link href='//1.bp.blogspot.com' rel='dns-prefetch'/>
<link href='//2.bp.blogspot.com' rel='dns-prefetch'/>
<link href='//3.bp.blogspot.com' rel='dns-prefetch'/>
<link href='//4.bp.blogspot.com' rel='dns-prefetch'/>
<link href='//disqus.com' rel='dns-prefetch'/>
<link href='//c.disquscdn.com' rel='dns-prefetch'/>
<link href='//github.com' rel='dns-prefetch'/>
<link href='//cdn.staticaly.com' rel='dns-prefetch'/>
<link href='//cdn.statically.io' rel='dns-prefetch'/>
<link href='//fontawesome.com' rel='dns-prefetch'/>
<link href='//www.sharethis.com' rel='dns-prefetch'/>
<link href='//cdn.jsdelivr.net' rel='dns-prefetch'/>
<link href='//rawcdn.githack.com' rel='dns-prefetch'/>
<link href='//images.dmca.com' rel='dns-prefetch'/>

If there are external links to other sources on your blog, please do a DNS Prefetch with the following format and add it to the DNS prefetch list above.

<link href='//url-external' rel='dns-prefetch'/>

Now, Save Theme.

See the results, later there will be changes to the blog loading speed so that it will be even faster. I have applied this method myself to the TechFire blog. So, don't hesitate to give it a try.

How to Disable Text Selection in Blogger Blogs Using Javascript & CSS

2020-11-09T09:05:00.000+05:30

How to Disable Text Selection in Blogger Blogs Using Javascript & CSS

Hello, friends in this article we are going to learn about how we can disable text selection in blogger.
Here I've two methods for that one is using CSS codes and the second is using JavaScript codes.

I recommended using method one (using CSS codes) because this is not much affecting on your blog posts speed but javascript codes slow down your page load speed and also note that if blog reader disables javascript in their browser then they can easily select the text and copy it but in case of CSS remain safe.

How to Disable Text Selection in Blogger Using CSS:

First, go to your blogger and open it.
Then go to Themes >> Edit HTML option.
Here press CTRL + F and find ]]></b:skin>
Just before this ]]></b:skin> code copy and paste the codes provided below.

The codes below are allowing readers to copy the important codes on a blog while disallowing them to copy all the text. The codes below are important for those bloggers who are having a tutorial niche like this blog.

.post blockquote{-moz-user-select: text;-webkit-user-select: text;-ms-user-select: text;user-select: text;}
.post code {-webkit-user-select:text;-moz-user-select:text;-ms-user-select:text;user-select:text;}
body {-webkit-user-select: none; -moz-user-select: -moz-none; -ms-user-select: none; user-select: none;}

Note: If it’s not necessary for you to allow your audience to copy some of your text you may put only the codes below. (Means Disable whole posts text selections including codes and blockquotes etc then use the below code and paste it there)

body {-webkit-user-select: none; -moz-user-select: -moz-none; -ms-user-select: none; user-select: none;}

How to Disable Text Selection Using JavaScript:

This easy then CSS codes implementation because of adding javascript but as I earlier said this is easily bypassed by post readers.
Go to your blogger dashboard.
Click on the layout option and add a gadget and select HTML/JavaScript.
Now copy the below code and paste it there and save it.

Note: The codes given below will automatically disable text selection including the Blockquotes and Codes.

<script type=”text/javascript”>
//form tags to omit in NS6+:
var omitformtags=[“input”, “textarea”, “select”]
omitformtags=omitformtags.join(“|”)
function disableselect(e){
if (omitformtags.indexOf(e.target.tagName.toLowerCase())==-1)
return false
}
function reEnable(){
return true
}
if (typeof document.onselectstart!=”undefined”)
document.onselectstart=new Function (“return false”)
else{
document.onmousedown=disableselect
document.onmouseup=reEnable
}
</script>

Email Spoofing | Advanced Social Engineering For Phishing Attack

2020-11-08T07:23:00.000+05:30

Email Spoofing | Advanced Social Engineering For Phishing Attack

Hello Friends,
In this topic, we will learn about email spoofing.
Email spoofing is a part of social engineering tricks to doing advanced phishing attacks.
These types of tricks can hack humans and also their accounts.
For this trick, we use a simple PHP script that has mail func().
You can customize it as your choice but here we run it as a simple attack.

First, you have to need a free or paid web hosting service to host the PHP script there and also change the permission of that PHP script.
Make it read, Write, and Executable for a run without error.
In Linux, we can say it like chmod 777 emailspoofing.php.
Upload the script to the hosting server and run it.
If there is a mistake in your customization then it gives an error otherwise it runs easily.

Victim Email Address- It's your target, Email To
Spoofed Email Address- Email Address Which We Want To Show Victim.
And There Is A Message In HTML, You Can Edit It, If You Have Knowledge Of HTML Otherwise You Can Use Visual HTML Editors For That.

<html>
  <head>
    <title>Email Spoofing Tutorial
    </title> 
  </head>
  <body>
    <?php
$to = "yourvictim@subdomain.com"; 
$subject = "Email Spoofing";
$message = "<h3><span style=\"color: #008000\">Email Spoofing Demo</span> By <span style=\"color: #FF0000\">MTECHFIRE</span></h3>";
$message .= "<p>If You Like This Video Then DON'T Forget To Subscribe and Share With Friends.</p>"; 
$message .= "<p>In This Type Of Emails Generated By Hackers For Capturing Credentials Of Someone.</p>";
$message .= "<p>You Can Add Images, Phishing Links and More In This Email.</p>";
$message .= "<h4>Thank You!</h4>";
$header = "From:abc@somedomain.com \r\n"; 
$header .= "Cc:efgh@somedomain.com \r\n"; 
$header .= "MIME-Version: 1.0\r\n"; 
$header .= "Content-type: text/html\r\n"; 
$retval = mail ($to,$subject,$message,$header);
if( $retval == true ) {
echo "Message sent successfully..."; 
}else {
echo "Message could not be sent..."; 
}
?>
  </body>
</html>

Let's See Some Output Of Email Spoofing (Screenshots Of Mobile, After Sending Email It Look Like This)

Video Tutorial:

Hopefully, You would like this information, If you have any problems regarding this information then you must tell us on the contact page.

Image Optimization In Blogger Using CDN Statically To Speed Up Your Blog Loading

2020-11-07T15:24:00.002+05:30

Image Optimization In Blogger Using CDN Statically To Speed Up Your Blog Loading

In this article, we are going to talk about how to speed up blog loading speed by using CDN Statically in blogger.
After reading the post title you have some questions about what is statically.io, CDN & Image Optimization, so Let's remove your doubt and make it clear.

What is CDN & Statically.to?

A content delivery network (CDN) refers to a geographically distributed group of servers that work together to provide fast delivery of Internet content.
A CDN allows for the quick transfer of assets needed for loading Internet content including HTML pages, javascript files, stylesheets, images, and videos. The popularity of CDN services continues to grow, and today the majority of web traffic is served through CDNs, including traffic from major sites like Facebook, Netflix, and Amazon
Statically offers optimization and CDN for open-source static assets.

What is Image Optimization?

I don't go into brief details about Image Optimization, but in simple words, Image Optimization means to image your images/Photos quality which you use in your blogger's blog posts.

Let's give you a short idea of optimization is that,
compress image size, Remove meta information from images, Maintain aspect ratio of images, Use a proper naming convention for image name (Like using hyphen sign for instead of space and giving post related image name, etc), Image alt text in images, etc.

We don't discuss the above topics right now, for that I will make a separate post, but here we are going to see about CDN statically which is very useful for speed up your blog's loading by doing image optimization.

For bloggers who are always busy with tutorial posts, How-to posts, tech-guide posts, they always feel uncomfortable with the screenshot image inserted in their post which is too heavy to load their blog also other heavy images.
But now you don't need to worry about high-size images, now you can optimize them with the help of CDN Statically.
With CDN Statically, images that should be very heavy to load on a blog, now they load very quickly without using any applications.

How to apply this method on a blog?

The method is very easy, if you upload an image via blogger, usually you will get an image URL that is more or less like the following.

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEib9VXLyRZw7kqPRCQCL-HrHsez764KIIlhi4UOVAsMiznW9CjUOltR10oWsM2powIse4DKGmkfK4E6EQIPGsYHIjZddavYdgvqfozUsguX3MU2KlDw-VELx0C4Cvy-u67ztjfoU85d6q1_/s1600/cdn-staticaly.png

You just change https:// with https://cdn.staticaly.io/img/ so it becomes like the following.

https://cdn.staticaly.io/img/2.bp.blogspot.com/-pB5sVdkn88o/W6rkzskMGYI/AAAAAAAAEC8/sGWln4I5jhc1GL-p1JXYXus-hc8xUVIZwCLcBGAs/s1600/cdn-staticaly.png

The above method is manually so you have to change the image URL in every post's images.
But I have an automatic method for making your work easy by using javascript.
Implementing below javascript code just above the code </body>

<script>
  //<![CDATA[
  var images = document.getElementsByTagName('img');
  for (var i = 0; i < images.length; i++) {
    images[i].src = images[i].src.replace(/.*?:\/\//g ,
    "https://cdn.statically.io/img/");
  };
  //]]>
</script>

By using the above script, it will make all images on the blog statically automatically. so, choose any method whether you want to use the manual or automatic method.

How To Add Stylish Sitemap Page In Blogger

2020-11-06T18:22:00.001+05:30

How To Add Stylish Sitemap Page In Blogger

Hello, friends in this tutorial we talk about how we can add a stylish sitemap page in blogger in very easy steps.
A sitemap is a very important part of SEO because the search engines read your website sitemap and also index those pages and grow up your ranking, so let's do it.

Method 1: How To Create A Blogger Sitemap Page That Automatically Shows Recent Posts On Top With Bulleted List

First of all, open your blogger dashboard and go to the pages section.
Here create a new page with the name "Sitemap".
Now edit this page using the HTML section (Don't use compose area).
Copy the below code and paste it into the HTML section and save your page. (Remove all extra codes already present in HTML section then paste below codes)
You're done this code will automatically add recently added posts.

<script type="text/javascript"> var numposts = 500;
  var standardstyling = true;
  function showrecentposts(json) {
    for (var i = 0; i < numposts; i++) {
      var entry = json.feed.entry[i];
      var posttitle = entry.title.$t;
      var posturl;
      if (i == json.feed.entry.length) break;
      for (var k = 0; k < entry.link.length; k++) {
        if (entry.link[k].rel == 'alternate') {
          posturl = entry.link[k].href;
          break;
        }
      }
      posttitle = posttitle.link(posturl);
      if (standardstyling) document.write('<li>');
      document.write(posttitle);
    }
    if (standardstyling) document.write('</li>');
  }
</script> 
<br />
<ul> 
  <script src="https://yourblog.blogspot.com/feeds/posts/default?orderby=published&alt=json-in-script&callback=showrecentposts&max-results=999">
  </script>
</ul>

In this code, you have to put your blog link
ex: yourblog.blogspot.com -----> techfirex.blogspot.com

Let's see the second method,

Method 2: How To Create A Blogger HTML Sitemap Page Sorted By Posts Labels, In Alphabetical Order And Attribute “New” To Those Post Freshly Published

<script type='text/javascript'>
  var postTitle = new Array();
  var postUrl = new Array();
  var postPublished = new Array();
  var postDate = new Array();
  var postLabels = new Array();
  var postRecent = new Array();
  var sortBy = "titleasc";
  var numberfeed = 0;
  function bloggersitemap(a) {
    function b() {
      if ("entry" in a.feed) {
        var d = a.feed.entry.length;
        numberfeed = d;
        ii = 0;
        for (var h = 0; h < d; h++) {
          var n = a.feed.entry[h];
          var e = n.title.$t;
          var m = n.published.$t.substring(0, 10);
          var j;
          for (var g = 0; g < n.link.length; g++) {
            if (n.link[g].rel == "alternate") {
              j = n.link[g].href;
              break
            }
          }
          var o = "";
          for (var g = 0; g < n.link.length; g++) {
            if (n.link[g].rel == "enclosure") {
              o = n.link[g].href;
              break
            }
          }
          var c = "";
          if ("category" in n) {
            for (var g = 0; g < n.category.length; g++) {
              c = n.category[g].term;
              var f = c.lastIndexOf(";");
              if (f != -1) {
                c = c.substring(0, f)
              }
              postLabels[ii] = c;
              postTitle[ii] = e;
              postDate[ii] = m;
              postUrl[ii] = j;
              postPublished[ii] = o;
              if (h < 10) {
                postRecent[ii] = true
              }
              else {
                postRecent[ii] = false
              }
              ii = ii + 1
            }
          }
        }
      }
    }
    b();
    sortBy = "titledesc";
    sortPosts(sortBy);
    sortlabel();
    displayToc();
  }
  function sortPosts(d) {
    function c(e, g) {
      var f = postTitle[e];
      postTitle[e] = postTitle[g];
      postTitle[g] = f;
      var f = postDate[e];
      postDate[e] = postDate[g];
      postDate[g] = f;
      var f = postUrl[e];
      postUrl[e] = postUrl[g];
      postUrl[g] = f;
      var f = postLabels[e];
      postLabels[e] = postLabels[g];
      postLabels[g] = f;
      var f = postPublished[e];
      postPublished[e] = postPublished[g];
      postPublished[g] = f;
      var f = postRecent[e];
      postRecent[e] = postRecent[g];
      postRecent[g] = f
    }
    for (var b = 0; b < postTitle.length - 1; b++) {
      for (var a = b + 1; a < postTitle.length; a++) {
        if (d == "titleasc") {
          if (postTitle[b] > postTitle[a]) {
            c(b, a)
          }
        }
        if (d == "titledesc") {
          if (postTitle[b] < postTitle[a]) {
            c(b, a)
          }
        }
        if (d == "dateoldest") {
          if (postDate[b] > postDate[a]) {
            c(b, a)
          }
        }
        if (d == "datenewest") {
          if (postDate[b] < postDate[a]) {
            c(b, a)
          }
        }
        if (d == "orderlabel") {
          if (postLabels[b] > postLabels[a]) {
            c(b, a)
          }
        }
      }
    }
  }
  function sortlabel() {
    sortBy = "orderlabel";
    sortPosts(sortBy);
    var a = 0;
    var b = 0;
    while (b < postTitle.length) {
      temp1 = postLabels[b];
      firsti = a;
      do {
        a = a + 1
      }
      while (postLabels[a] == temp1);
      b = a;
      sortPosts2(firsti, a);
      if (b > postTitle.length) {
        break
      }
    }
  }
  function sortPosts2(d, c) {
    function e(f, h) {
      var g = postTitle[f];
      postTitle[f] = postTitle[h];
      postTitle[h] = g;
      var g = postDate[f];
      postDate[f] = postDate[h];
      postDate[h] = g;
      var g = postUrl[f];
      postUrl[f] = postUrl[h];
      postUrl[h] = g;
      var g = postLabels[f];
      postLabels[f] = postLabels[h];
      postLabels[h] = g;
      var g = postPublished[f];
      postPublished[f] = postPublished[h];
      postPublished[h] = g;
      var g = postRecent[f];
      postRecent[f] = postRecent[h];
      postRecent[h] = g
    }
    for (var b = d; b < c - 1; b++) {
      for (var a = b + 1; a < c; a++) {
        if (postTitle[b] > postTitle[a]) {
          e(b, a)
        }
      }
    }
  }
  function displayToc() {
    var a = 0;
    var b = 0;
    while (b < postTitle.length) {
      temp1 = postLabels[b];
      document.write("");
      document.write('<div class="post-archive"><h4>' + temp1 + '</h4><div class="ct-columns">');
      firsti = a;
      do {
        document.write("<p>");
        document.write('<a " href="' + postUrl[a] + '">' + postTitle[a] + "");
        if (postRecent[a] == true) {
          document.write(' - <strong><span>New!</span></strong>')
        }
        document.write("</a></p>");
        a = a + 1
      }
      while (postLabels[a] == temp1);
      b = a;
      document.write("</div></div>");
      sortPosts2(firsti, a);
      if (b > postTitle.length) {
        break
      }
    }
  }
</script>
<script src="http://www.yourblog.blogspot.com/feeds/posts/summary?alt=json-in-script&max-results=9999&callback=bloggersitemap" type="text/javascript">
</script>

Here at the end of the code, you find that yourblog.blogspot.com, replace it with your blog website URL and save it & publish.

See first method sitemap demo here (Which I use in my blog): SiteMap
Thank you.
If you have any suggestions and query then feel free to comment below I will reply as soon as possible.

Best YouTube, Instagram, Facebook, and Many More Videos Downloading App

2020-11-05T08:05:00.001+05:30

Best YouTube, Instagram, Facebook, and Many More Videos Downloading App

In this article, I am going to talk about an app that I personally use for downloading youtube videos & audios, But it also supports Instagram, Facebook, and over 50+ sites for downloading videos easily.
This app is not in Playstore but the app is made in India and you can download it on Mac, Windows, and Android.

Why do I recommend this app to you?
The answer is very simple and straight forward,
First of all, I want to say that there are many peoples don't know about this type of apps also this app is free but it contains some ads but it not annoying you and secondly, this app has good features which are listed below you can read it and if you like it then download & use it.

Let's Talk About App Features:

Download videos from over 50+ sites.

Videoder currently lets you download videos from sites like youtube, Instagram, Facebook, Hotstar, Voot, VK and new ones are being added every week as per our user's request.

Download 4K videos.

Because it's better to see things clearer. Stream or download 4K videos with Videoder and play them on your Ultra HD devices.

Batch Downloading.

Make a collection of songs and videos while exploring and set them to download in just one go. This is the power of multiple downloading features. Download hundreds of songs with just a click.

Up to 10X Faster Downloading.

Videoder uses multiple network connections to accelerate the downloading speed. You can set the number of connections according to your network quality to gain maximum speed.

Cover art and audio tag editor.

Organize your entire music library. Set cover art, add mp3 tags, and give life to your music collection.

Smart link detection tool.

One of the best features in Videoder is our smart link detection tool. When you copy a link of any video, music, or media file Videoder detects the link and shows a popup to download.

Unlimited themes.

Customize Videoder according to your choice. Use any preset theme or choose a color from the palette. Make Videoder your own.

Download Youtube playlists in a go.

With Videoder you can download youtube playlists with a single tap. You can select all videos or you can drag and select as many as you want and download them at once.

Inbuilt browser with Adblocker.

In the app, the browser makes it super easy to download videos from various sites, as it detects the video or media file and shows you a download popup. It also helps you to browse the web without interruptions.

Quick download tool.

Saves your time. A very handy tool when you have to download but you are in a rush. No more waiting for the links to load. Just two simple steps and the download is done.

Night mode.

Because we care for you. Night mode makes it easier for you to use the app at the night. Night mode is super recommended for AMOLED screens.

Click Below To Download

Download

How To Edit PDF Online Instantly Without Any Softwares (Compress, Merge, Split, PPT to PDF, DOC to PDF any many more)

2020-11-04T20:01:00.000+05:30

How To Edit PDF Online Instantly Without Any Softwares (Compress, Merge, Split, PPT to PDF, DOC to PDF any many more)

In this article, we are going to talk about PDF editing.
After reading this post you can edit PDF online without any software and you can do this on a laptop as well as on android phones with very few clicks.
For that, I have one best website which I also most often use personally.
This is the best website for PDF editing and also has many features that are below listed.
I write this post because many people do not know about this type of website and they will download apps for simple types of tasks.
Nowadays the web apps becoming powerful so you can use many features online without any software directly using your browser(Chrome).

Compress PDF

Reduce the size of your PDF without losing quality

Compress PDF

PDF Converter

Convert Word, PowerPoint, and Excel files to and from PDF

PDF Converter

PPT to PDF

Convert PowerPoint presentations to PDF documents

PPT to PDF

PDF to PPT

Convert PDFs to editable PowerPoint presentations

PDF to PPT

JPG to PDF

Transform JPG, PNG, BMP, GIF, and TIFF images to PDF

JPG to PDF

PDF to JPG

Extract images from your PDF or save each page as a separate image

PDF to JPG

Excel to PDF

Convert Excel spreadsheets to PDF documents

Excel to PDF

PDF to Excel

Convert PDFs to editable Excel spreadsheets

PDF to Excel

Edit PDF

Add text, shapes, images, and freehand annotations to your PDF

Edit PDF

PDF Reader

Display, print, and share PDFs online

PDF Reader

Number Pages

Insert page numbers in PDF with ease

Number Pages

Delete PDF Pages

Remove one or multiple pages from your PDF

Delete PDF Pages

Rotate PDF

Rotate one or all pages in your PDF

Rotate PDF

Word to PDF

Convert Word documents to PDF files

Word to PDF

PDF to Word

Convert PDFs to editable Word documents

PDF to Word

Merge PDF

Combine multiple PDFs into one unified document

Merge PDF

Split PDF

Extract pages from your PDF or save each page as a separate PDF

Split PDF

eSign PDF

Create your signature, sign your PDF, and request people to sign

eSign PDF

Unlock PDF

Remove password, encryption, and permission from your PDF

Unlock PDF

Protect PDF

Add a password and encrypt your PDF file

Protect PDF

Recover Permanently Deleted Files Using Foremost

2020-11-03T16:00:00.001+05:30

Recover Permanently Deleted Files Using Foremost

In this article we are going to learn digital forensic using our Kali Linux.

Today we are going to recover permanently deleted or lost files using foremost forensic tool even it can recover files from formatted media drives.

Foremost is a very useful open source forensic utility that is able to recover deleted files using the technique called data carving.
This utility was originally developed by the united states air force office of special investigations and is able to recover several file types like videos, office files, images, zip and more.
Foremost is a forensic program to recover lost files based on their headers, footers, and internal data structures.
It's also support for specific file types can be added by the user via the configuration file.
The program can also work on partition images produced by DD or similar tools.
This tool is very effective for forensic use like recover any data from a criminal's pendrive.
Since foremost is already present in all the major linux distributions repositories so installing it is a very easy task.
All we have to do is to use our favorite distribution package manager on debian and ubuntu we can use apt.

Installing Foremost Tool In Kali Linux:

root@kali:~# sudo apt install foremost

Usage of Foremost Tool:

Now it's time to recover our permanently deleted data.
If we need to recover permanently deleted data from a pen drive we need to know the pen drive's disk path.

Finding Pendrive Disk Path:

root@kali:~# sudo fdisk -l

Here you have to find your pendrive
It's look like /dev/sdb
And It's partitions like /dev/sdbX (X is number and its varies)
here let's assume that our pendrive location is /dev/sdb and the main partition of our pendrive is /dev/sdb1.
This /dev/sdb1 is the memory storage partition we can copy this path or just remember this.

Normal/Easy Usage of Foremost:

The most basic way to use foremost is by providing a source to scan for deleted files.
It can be either a partition or an image file like those generated with DD.
Let's see an example we want to scan the /dev/sdb1 partition.

Note: before we begin a very important thing to remember is to never store retrieved data on the same partition we are retrieving the data from to avoid overriding delete files still present on the block device.
Now the command we would run is

root@kali:~# sudo foremost -i /dev/sdb1

Here i means input device(path)

By default the program creates a directory called output inside $HOME/username directory and a subdirectory for each supported file type we are attempting to retrieve is created.
Each directory will hold the corresponding file type obtained from the data carving process when foremost completes its job empty directories are removed.
Only the ones containing files are left on the file system.
This lets us immediately know what type of files were successfully retrieved.
The audit.txt file contains information about the actions performed by the program.

By default the program tries to retrieve all the supported file types, to restrict our search we can use the 't' option and provide a list of the file types we want to retrieve separated by a comma.
In our case we restrict the search only to png,zip and jpg files
So type this command,

root@kali:~# sudo foremost -v -q -t png,zip,jpg -i /dev/sdbX -o $HOME/Desktop/recovered_files

In above command we use,
-t flag to specify file types, if we did not use this foremost will recover all known file types
-v for verbose mode this mode will display all the process in screen
-q (queue) for quick mode
-i is for input devices, in our case our input device is our pen drive and the path is /dev/sdb1
-o to set the output directory that means where we want to keep our recovered files, here we choose the recovered folder in our desktop.

This process will take time because it will analyze the entire disk small size disks can be recovered very quickly it also takes time if we are recovering much data or we are not in quick mode.
If the deleted files are overwritten by other files then we may get trouble to recover those deleted files and made we get corrupted files after the recovery process.
We check our recovered folder in desktop here we have successfully recovered our deleted data in our pen drive.
Not only in digital forensic, we can use this free tool to recover data for our personal uses like we can recover data from our camera memory card or any other flash drives.
We will get many paid tools for this job but when we have a very powerful free tool then why do we pay for recovery tools.

Foremost Tool Help Command:

root@kali:~# foremost -h
foremost version 1.5.7 by Jesse Kornblum, Kris Kendall, and Nick Mikus.
$ foremost [-v|-V|-h|-T|-Q|-q|-a|-w-d] [-t <type>] [-s <blocks>] [-k <size>]
[-b <size>] [-c <file>] [-o <dir>] [-i <file]

-V - display copyright information and exit
-t - specify file type. (-t jpeg,pdf ...)
-d - turn on indirect block detection (for UNIX file-systems)
-i - specify input file (default is stdin)
-a - Write all headers, perform no error detection (corrupted files)
-w - Only write the audit file, do not write any detected files to the disk
-o - set output directory (defaults to output)
-c - set configuration file to use (defaults to foremost.conf)
-q - enables quick mode. Search are performed on 512 byte boundaries.
-Q - enables quiet mode. Suppress output messages.
-v - verbose mode. Logs all messages to screen

Foremost Usage Example From Kali Linux Tools Website:

Search for a selection of file types (-t doc,jpg,pdf,xls) in the given image file (-i image.dd):

root@kali:~# foremost -t doc,jpg,pdf,xls -i image.dd
Processing: image.dd
|*|
root@kali:~# ls output/
audit.txt jpg pdf

Andrax PenetrationTesting Framework Automatic & Manual Installation

2020-11-02T10:07:00.000+05:30

What is ANDRAX?
ANDRAX is a penetration testing platform developed specifically for Android smartphones, ANDRAX has the ability to run natively on Android so it behaves like a common Linux distribution, But more powerful than a common distribution!
The development of ANDRAX began on 08/09/2016 (DD/MM/YYYY) only for people in Brazil
ANDRAX has been fully redefined and reloaded on 05/10/2018 (DD/MM/YYYY) open to the international public.
ANDRAX enable to all Android device with root access enabled and a good unlocked rom become a weapon for advanced Penetration Testing.
ANDRAX is developed by Weidsom Nascimento of The Cracker Technology - Advanced Pentest

M.A.R.I.N.A
M.A.R.I.N.A Is the first 100% dedicated AI for Penetration Testing and exclusively developed to ANDRAX!
Classify, determine, learn, attack and defend!
Don't be evil but be a CRACKER!

Features:
Portable
Designed to be installed on any Android smartphone, full support from version 5.0 to higher.
Open Source
With open development it is possible to have the support of anyone, this increases the security and efficiency of the system!
Optimized
ANDRAX has been fully developed with a focus on execution with minimal hardware resources.
No emulation
ANDRAX is not an emulation, ANDRAX is an evolution!
More than 900 tools
ANDRAX promotes the use of more than 900 advanced tools for Hacking, Cracking and Penetration Testing.
Over 1000 attacks
Work with real Offensive Security abusing more than 1000 types of attacks with ANDRAX.

ANDRAX Install
Requirements:
ROOT with supersu
4.0GB of free memory
Unlocked Kernel (* SAMSUNG users: In order to start ANDRAX properly, you might need to recompile the Kernel or use a ROM such as Lineage OS)
Android 5.0+

Automatic Installation:

Go to ANDRAX official website and download andrax app.(Andrax App Download)

ANDRAX has an automatic installer that downloads and configures the entire environment (download page). You should see root access request, so just grant the permissions.
If you don’t have a busy box installed, ANDRAX will install it for you. After busy box is installed and configured, you should see message, click OK to start downloading the core. After download is finished, it will automatically install the entire core.
Installation process may take a few minutes. Just wait it to reboot and everything will be set up.

Manual Installation:
Click “Manual Install” in the top of menu. (browser will download .tar.xz file)
Now go to downloaded file and rename it to andrax.tar.xz and also move it to your internal storage.
Download and install termux app from playstore and run below commands. (Termux App)

su
cd /
cd sdcard
ls
busybox tar -xvJf andrax.tar.xz -C /data/data/com.thecrackertechnology.andrax/ANDRAX/

su : This command ask for root permission so allow it.
ls : After running this command you will find andrax.tar.xz file, if file is there then you are going in right way.
Installation takes around 15 minutes so be patience (time also depend on android phone's speed)
Now close andrax app and reopen it and you're installation is done.

Installation Video:

Thanks For Watching!!!

TECHFIRE

A Pentester's Guide to Practical Shell Scripting

From Command Line to Weapon: A Pentester's Guide to Practical Shell Scripting

The Anatomy of a Security Script: Core Concepts in Practice

1. The Shebang and Execution: Your Operational Foundation

2. Variables: Your Operational Parameters

3. Command Substitution: Capturing Intelligence

4. Positional Parameters ($1, $2, $@): Building Reusable Tools

Control Flow: Making Decisions in the Field

if...then...else Statements

for and while Loops: Automation in Action

Text Manipulation: The Hacker's Scalpel

Putting It All Together: A Simple, Practical Recon Script

The Blue Team Perspective: Scripting for Defense

A Comprehensive Guide to Apache Web Server Configuration

1. What is the Apache Web Server?

2. Getting and Installing Apache

3. Starting Apache

4. Securing Apache

File Permissions and Ownership

Apache and Firewalls

Apache and SELinux (Security Enhanced Linux)

5. Understanding Apache Configuration Files

6. Understanding Default Apache Settings

7. Adding a Virtual Host to Apache

8. Allowing Users to Publish Web Content

9. Securing Your Web Traffic with SSL/TLS (HTTPS)

10. How SSL is Configured (and Testing the Default)

11. Creating Your Own SSL Key and Self-Signed Certificate

12. Generating a Certificate Signing Request (CSR)

13. Troubleshooting Your Web Server

SciLab Practicals

Ordinary Differential Equation Example 1

Ordinary Differential Equation Example 2

Linear Equation

Least Square Method

Eigen Value Example 1

Eigen Vector Example 1

Eigen Value Example 2

Eigen Vector Example 2

Eigen Value Example 3

Eigen Vector Example 3

Curve Fitting Method

Bisection Method

Download the Source Code:

List of New Page Conditional Tags on Blogger

Home Page Conditional Tags

Page Post / Article Conditional Tag

Static Page Conditional Tags

Label Page Conditional Tags

Archive Page Conditional Tags

Search Page Conditional Tags

Error Page Conditional Tag

Page Preview / Article Preview Conditional Tags

Conditional Tag For Mobile Devices (Smartphone / Tablet)

Conditional Tags with Negative Traits

Combines 2 conditional tags in 1 <b: if>

Let's Customize

How to Speed ​​Up Blog Loading By Adding Expires Headers

How to Speed ​​Up Blog Loading By Adding Expires Headers

Expires Headers:

How To Install Burpsuite Professionals In Kali Linux For Free With Licence

How To Install Burpsuite Professionals In Kali Linux For Free With Licence

Download Burpsuite Pro:

Installing Java In Kali Linux:

Active & Configure Burpsuite Pro:

How To Setup DVWA (Damn Vulnerable Web Application) On Kali Linux

How To Setup DVWA (Damn Vulnerable Web Application) On Kali Linux

Download & Configure DVWA:

Create MySQL Database & User:

Configure PHP:

Open Browser:

Kali on the Windows Subsystem for Linux

Install the Windows Subsystem for Linux:

Download the 'Kali Linux' Application:

Launch Kali for the First Time:

Add Windows Defender Exclusion:

Install Penetration Testing Tools:

How to Create Fedora Live Persistent USB

Requirements For Making Live USB With Persistence:

4. Positional Parameters (`$1`, `$2`, `$@`): Building Reusable Tools

`if...then...else` Statements

`for` and `while` Loops: Automation in Action

How to Speed Up Blog Loading By Adding Expires Headers

How to Speed Up Blog Loading By Adding Expires Headers

How to Speed Up Blog Loading by Installing DNS Prefetch

How to Speed Up Blog Loading by Installing DNS Prefetch