iExplo1t

Website for Sale

2024-06-07T02:39:00.000-07:00

Migrate Plex Server - Ubuntu

2023-09-21T03:46:00.003-07:00

To migrate your Plex server to a new Ubuntu server, you can follow these steps:

1. Set up the new Ubuntu server:

Install Ubuntu on the new server and ensure that it is up to date with the latest updates and packages.

2. Install Plex Media Server:

On the new Ubuntu server, download and install the Plex Media Server package. You can obtain the latest version from the Plex website.

$ wget https://downloads.plex.tv/plex-media-server-new-version.deb
$ sudo dpkg -i plex-media-server-new-version.deb

Replace “new-version” with the actual version number you downloaded.

3. Stop the Plex Media Server service:

Use the following command to stop the Plex Media Server service:

$ sudo service plexmediaserver stop

4. Copy Plex data directory:

On the old Ubuntu server, locate the Plex Media Server data directory. The default directory is /var/lib/plexmediaserver/Library/Application Support/Plex Media Server/. Copy the entire directory to a temporary location.

$ sudo cp -R /var/lib/plexmediaserver/Library/Application\ Support/Plex\ Media\ Server/ /path/to/temp/location/

Replace /path/to/temp/location/ with the path to your temporary location.

5. Transfer data to the new server:

Copy the Plex Media Server data directory from the temporary location on the old server to the corresponding location on the new server.

$ scp -r /path/to/temp/location/Plex\ Media\ Server/ new-server-ip:/var/lib/plexmediaserver/Library/Application\ Support/

Replace new-server-ip with the IP address of the new server.

6. Set ownership and permissions:

On the new server, set the ownership and permissions for the copied Plex data directory.

$ sudo chown -R plex:plex /var/lib/plexmediaserver/Library/Application\ Support/Plex\ Media\ Server/
$ sudo chmod -R 755 /var/lib/plexmediaserver/Library/Application\ Support/Plex\ Media\ Server/

7. Start the Plex Media Server service:

Finally, start the Plex Media Server service on the new server.

$ sudo service plexmediaserver start

8. Verify and update settings:

Access the Plex web interface on the new server and ensure that all your media libraries, settings, and metadata are intact. Make any necessary updates or adjustments.

That’s it! Your Plex server should now be migrated to the new Ubuntu server. Remember to update any firewall or router settings, if necessary, to allow access to the new server.

Boot Ubuntu Server 22.04 LTS from USB SSD on Raspberry Pi 4

2023-09-21T03:35:00.002-07:00

This is a guide for configuring Raspberry Pi4 to boot Ubuntu from external USB SSD drive instead of SD card. SSD drives are much faster than SD cards, more reliable and now lower cost than SD cards for larger memory sizes.Instructions for Ubuntu server 22.04 LTS are provided. Note that earlier versions of Ubuntu are much more difficult to configure for using external SSDs so I recommend using this latest Ubuntu release.

Requirements

Hardware used in this guide

Raspberry Pi 4 with 8GB RAM
32GB micro SD card
Kingston A400 120GB SSD
StarTech SATA to USB adapter
Eluteng SATA to USB adapter
Adequate Power Supply due to additional SSD power consumption. (3.5A recommended)

Software used:

Windows 10 or Windows 11 PC however guide will be similar for MAC and Linux Users.
Raspberry Pi Imager (Balena Etcher is also a good tool for writing to SD cards)

NOTE: It turns out that there are a lot of SATA to USB adapters that do not work correctly when used to boot the Raspberry Pi. After many lost hours trying to get an incompatible cable to work I found this great resource on this topic with a database of know working cables.

James Chambers’ blog was also a great resource for writing other parts of this guide.

1. Upgrade bootloader firmware on Raspberry Pi 4

You need to make sure that the your Raspberry Pi 4 is running the latest bootloader firmware available. USB boot feature was enabled on the Pi 4 bootloader in the fall of 2020.

Use Raspberry Pi Imager V1.6 to install Raspberry Pi OS (lite version without desktop is best) on SD card
Copy empty text file called ssh.txt onto the system-boot partition of the SD card. Remove SD card from PC and insert into Raspberry Pi
SSH into Pi
Default user: pi
default password: raspberry
Make sure you have the latest kernal updates. This will take several minutes
sudo apt update && sudo apt full-upgrade -y
Restart Pi to apply updates
sudo reboot
SSH into Pi
Your Pi may currently be configured to use critical or stable bootloader releases. Normally I configure it to use the stable releases. Open file and change the FIRMWARE_RELEASE_STATUS entry to stable.
sudo nano /etc/default/rpi-eeprom-update
Check bootloader firmware version
sudo rpi-eeprom-update

If bootloader is out of date you will see something like this:

BCM2711 detected
Dedicated VL805 EEPROM detected
*** UPDATE AVAILABLE ***
BOOTLOADER: update available
CURRENT: Thu 16 Apr 17:11:26 UTC 2020 (1587057086)
 LATEST: Thu  3 Sep 12:11:43 UTC 2020 (1599135103)
 FW DIR: /lib/firmware/raspberrypi/bootloader/stable
VL805: update available
CURRENT: 000137ad
 LATEST: 000138a1

If bootloader is up to date you will see something like this:

pi@raspberrypi:~ $ sudo rpi-eeprom-update
BCM2711 detected
Dedicated VL805 EEPROM detected
BOOTLOADER: up-to-date
CURRENT: Thu  3 Sep 12:11:43 UTC 2020 (1599135103)
 LATEST: Thu  3 Sep 12:11:43 UTC 2020 (1599135103)
 FW DIR: /lib/firmware/raspberrypi/bootloader/critical
VL805: up-to-date
CURRENT: 000138a1
 LATEST: 000138a1

Update bootloader if it is out of date
sudo rpi-eeprom-update -a
Restart Pi to apply updates
sudo reboot
Check to see if update was applied
sudo rpi-eeprom-update

2. Select Boot Device Preference

The default boot setting on our Pi is likely to boot off of SDcard only. We are going to change this so it cycles between trying to boot from SDcard first and then from external USB drive if SD card boot fails.

SSH into the Pi OS installation that you used to upgrade the bootloader in step 1.

run raspi-config utility
sudo raspi-config
Select option 6 Advanced Options
Select option A6 Boot Order
Select option B1 USB Boot
You should get pop up window that says “USB device is default boot device”
select ok
select finish and select Yes when asked if you would like to reboot now.
the Pi should reboot like normal. Start SSH session to confirm
shutdown Pi
sudo shutdown now

3. Install Ubuntu Server 22.04 LTS on USB 3.0 SSD

USB booting Ubuntu Server 22.04 LTS is very simple now with the latest Pi bootloader.

Connect SSD to PC via SATA->USB cable
Download Ubuntu Server 22.04 LTS 64bit
https://ubuntu.com/download/raspberry-pi
Use Raspberry Pi Imager V1.6 or Balena Etcher to write Ubuntu Server 22.04 LTS on the external SSD.
Be very careful when selecting the drive number that you choose the correct external drive and not your internal computer hardrive!
Connect the SSD to the USB3 port(blue) on the Pi4.
Make sure SDcard used previously to update the bootloader has been remove
Power up the Pi. If everything is good the USB boot should work.
SSH into Pi to confirm boot
Default user: ubuntu
default password: ubuntu

Advantages Disadvantages of using Proxy vs VPN vs TOR vs TOR and VPN together.

2022-04-17T04:56:00.005-07:00

What makes you truly anonymous and leaves next to no trace on the internet? In this post, I will discuss the advantages and disadvantages of Proxy vs VPN vs TOR vs TOR and VPN together.

The

Internet is a huge and gravely important part of our life these days. It is not anymore so simple “I will find your IP address (and DoS you)” and thus anonymity has become more complex as surveillance became more probing than ever. As more and more things are connected to the ‘Web’, you can potentially expose more info, exploit more, protect more, or plunder more than ever. It is very important to be able to monitor and surveillance effectively and at the same time, it is very important to be able to bypass surveillance and monitoring. Why that’s an entirely different philosophical discussion and I will simply leave that to the user's imagination. Understanding Proxy vs VPN vs TOR vs TOR and VPN together is important as these are the main methods used for anonymity.

If you are wondering how you can browse the web anonymously, you will be happy to know that there are numerous different methods guaranteeing that nobody is ever going to track you down and threaten you digitally. However, not all of these methods are equally effective and qualitative and this is what has led us to this article.

In this article, I will discuss the pros and cons of using methods like:

Proxy,
VPN
TOR and
TOR and VPN together.

This article will benefit you greatly if you are a mafia Whistle-blower or a dissident living under a regime in which it would be very dangerous to be caught performing a certain activity (such as writing political blogs) and such.

What is a Proxy?

A proxy directs your traffic via another computer instead of your own. While there are public and private proxy servers, only private proxies, usually paid, provide any type of stability or reliability.

SOCKS vs HTTP Proxy
A SOCKS server is a general purpose proxy server that establishes a TCP connection to another server on behalf of a client, then routes all the traffic back and forth between the client and the server. It works for any kind of network protocol on any port. SOCKS Version 5 adds additional support for security and UDP. The SOCKS server does not interpret the network traffic between client and server in any way, and is often used because clients are behind a firewall and are not permitted to establish TCP connections to servers outside the firewall unless they do it through the SOCKS server. Most web browsers for example can be configured to talk to a web server via a SOCKS server. Because the client must first make a connection to the SOCKS server and tell it the host it wants to connect to, the client must be “SOCKS enabled.” On Windows, it is possible to “shim” the TCP stack so that all client software is SOCKS enabled. A free SOCKS shim is available from Hummingbird at http://www.hummingbird.com/products/nc/socks/index.html.
An HTTP proxy is similar, and may be used for the same purpose when clients are behind a firewall and are prevented from making outgoing TCP connections to servers outside the firewall. However, unlike the SOCKS server, an HTTP proxy does understand and interpret the network traffic that passes between the client and downstream server, namely the HTTP protocol. Because of this the HTTP proxy can ONLY be used to handle HTTP traffic, but it can be very smart about how it does it. In particular, it can recognize often repeated requests and cache the replies to improve performance. Many ISPs use HTTP proxies regardless of how the browser is configured because they simply route all traffic on port 80 through the proxy server.

Proxy advantages

Proxies are like a Web Filter. The proxy settings are applied to your internet browser whether you’re using MSIE, Chrome, Safari, Firefox, etc.
When browsing the internet through a proxy server, all benefits with that server are used, for example, (Security, Speed, and Geographic Location).
The proxy will only secure traffic via the internet browser using the proxy server settings.

Proxy disadvantages

The primary proxy protocols in use today are SOCKS and HTTP/HTTPS. SOCKS and HTTP proxies provide no encryption, whereas HTTPS proxies offer the same level of encryption as any SSL website.
Proxies were not designed to protect all of your Internet traffic, usually only the browser.
Many proxies pass the user’s original IP address to the destination site, making them unsuitable for security or privacy conscious users.
Proxies must be configured separately for each application (email, browser, third-party apps) and some applications may not support them.

What is a VPN?

A Virtual Private Network is a network connection that enables you to create a secure connection to another location, thereby allowing you to appear as if you were in another place. Your computer creates an encrypted virtual tunnel to the VPN server and all of your browsing appears as if it is coming from the VPN server. All of the Internet traffic goes through this encrypted tunnel, keeping your data from being exposed to eavesdroppers between your computer and the VPN server.

Unlike a Proxy, a VPN service provider(Virtual Private Network) encrypts all of your traffic, replacing your ISP and routing ALL traffic through the VPN server, including all programs and applications. This also will use all benefits of the VPN server such as (Speed, Geopgraphic Location, and Security).
The VPN can be easily connected or disconnected with the click of a button.

VPN advantages

Fast – generally speaking you will see very little slowdown to your raw internet connection speeds when using a VPN service
Location spoofing is very easy – most VPN providers offer servers in many locations worldwide. Because connections are fast, VPN is ideal for streaming geo-restricted media content
Ideal for P2P filesharing – while many providers prohibit it, many are set up with filesharing in mind

VPN disadvantages

It is imperative that you choose a quality VPN service that does not store data or communications logs. In the event that a government agency demands the VPN provider to reveal logs, users would be exposed. Furthermore, it is important that the VPN service implements proper load balancing and server randomization so that users always connect to a different VPN server.

The VPN provider can see your internet activity – and in many countries is required by law to keep records of it, which may be handed over to the authorities or to copyright lawyers.
VPNs are also vulnerable to server raids by the police, in an effort to obtain the information they may contain. This is why it is vital to choose a provider who keeps no logs (and is in a position to keep this promise). Of course, even when a VPN provider promises to keep no logs, you must trust them to keep their word …
Costs money (although typically under $10 a month, or less if you buy in bulk)

What is Tor?

Tor is free software for enabling anonymous communication. The name is an acronym derived from the original software project name The Onion Router. Tor directs Internet traffic through a free, worldwide, volunteer network consisting of more than six thousand relays to conceal a user’s location and usage from anyone conducting network surveillance or traffic analysis. Using Tor makes it more difficult for Internet activity to be traced back to the user: this includes “visits to Web sites, online posts, instant messages, and other communication forms”. Tor’s use is intended to protect the personal privacy of users, as well as their freedom and ability to conduct confidential communication by keeping their Internet activities from being monitored.

Onion routing is implemented by encryption in the application layer of a communication protocol stack, nested like the layers of an onion. Tor encrypts the data, including the destination IP address, multiple times and sends it through a virtual circuit comprising successive, randomly selected Tor relays. Each relay decrypts a layer of encryption to reveal only the next relay in the circuit in order to pass the remaining encrypted data on to it. The final relay decrypts the innermost layer of encryption and sends the original data to its destination without revealing, or even knowing, the source IP address. Because the routing of the communication is partly concealed at every hop in the Tor circuit, this method eliminates any single point at which the communicating peers can be determined through network surveillance that relies upon knowing its source and destination. It is a decentralized system that allows users to connect through a network of relays rather than making a direct connection. The benefit of this method is that your IP address is hidden from the sites you visit by bouncing your connection from server to server at random, in essence, losing the trail.

Tor advantages

No-one can trace you to external IPs visited
Distributed network – almost impossible to shut down or attack in a meaningful way
Free

Tor disadvantages

While your data is encrypted along each of the relay nodes, the final connection point at the last relay in the chain can be compromised if the requested site does not use SSL. Tor has a known drawback of substantially slowing down your browsing because of the numerous hops your data is relayed through. For those concerned with the prying eyes of the government, Tor was created in conjunction with the U.S. Navy and is still used by many government agencies. Because Tor has been widely used by political dissidents, journalists, and even criminals, many governments are watchful of Tor users. This could potentially lead to you being earmarked as a criminal type and having all of your online activity monitored.

Very slow – because your data is randomly bounced through a number of nodes, each of which could be anywhere in the world, using Tor can be painfully slow.
Not suitable for P2P filesharing – while there is no way to stop you from using BitTorrent over Tor (and people do it) it is a) very slow, and b) very bad form as it slows down the entire network for every other user, for some of whom access to the internet via Tor may be of critical and possibly life threatening importance.
While it can, at a pinch, be used for location spoofing, Tor is a very fiddly and inefficient way to go about it. In addition to this, the slowness of Tor means that using the service to stream geo-restricted media services is unfeasible.

Tor and VPN together

The two can be used in conjunction with one another for an added layer of security, however this will dramatically slow down service due to Tor’s method of randomly sending the connection through many servers throughout the world. However, it is imperative to use a VPN so your data is encrypted in that a VPN is used to keep data secure. A VPN provider that does not keep logs is equally important.

The great advantage of Tor is that you do not need to trust anyone – your internet use is completely anonymised. However it is very slow, and largely as a consequence of this, it is not suitable for many of the most popular activities people want to use VPN for, such as filesharing and streaming geo-restricted media content.

As long as a trustworthy no logs VPN provider is used, then VPN is a very secure, consumer oriented privacy solution that provides much greater performance and flexibility than Tor can offer.

It should be noted that with either method users will suffer the combined speed hit of using both services together. There’s two variations of it:

Tor through VPN

In this configuration you connect first to your VPN server, and then to the Tor network, before accessing the internet:

Your computer -> VPN -> Tor -> internet

This is what happens when you use the Tor Browser (less safe) or Whonix (more safe) while connected to a VPN server, and means that your apparent IP on the internet is that of the Tor exit node.

Tor through VPN advantages

Your ISP will not know that you are using Tor (although they will know that you are using VPN)
If your traffic is being monitored by a malicious Tor exit node then it less likely that your VPN provider will keep logs than your ISP. It therefore provides an additional level of privacy, but not anonymity.

Tor through VPN disadvantages

A malicious Tor exit node will still be able to monitor your internet activity and trace it back to your VPN provider. Good VPN providers promise to keep no logs of users’ activities, and use shared IP addresses. If these promises are kept then this will provide a very effective second layer of protection, but it does rely entirely on trusting your VPN provider (as does regular VPN use).
Tor exit nodes are often blocked.

So basically, this configuration hides Tor use from your ISP, and if using a trustworthy logless VPN service can provide a meaningful extra layer of security. Unfortunately there is no way of ever guaranteeing that a VPN provider is 100 per cent trustworthy, and even the best of them can be compelled by a subpoena or court order to start real-time logging of an individual’s actions (although this would require that law enforcement is actively seeking that individual).

Journalist and whistleblowers who are only concerned about law enforcement in their own country, and are not facing an adversary with an international reach, should find this setup very effective if using an overseas VPN provider, but should remember that some governments are not above taking extra-legal measures to obtain the information they want.

VPN through Tor

This involves connecting first to Tor, and then through a VPN server to the internet:

Your computer -> encrypt with VPN -> Tor -> VPN -> internet

This setup requires you to configure your VPN client to work with Tor, and the only VPN providers we know of to support this are the excellent AirVPN and BolehVPN. Your apparent IP on the internet is that of the VPN server.

VPN through Tor advantages

Because you connect to the VPN server through Tor, the VPN provider cannot ‘see’ your real IP address – only that of the Tor exit node. When combined with an anonymous payment method (such as properly mixed Bitcoins) made anonymously over Tor, this means the VPN provider has no way of identifying you, even if it did keep logs.
Protection from malicious Tor exit nodes, as data is encrypted by the VPN client before entering (and exiting) the Tor network (although the data is encrypted, your ISP will be able to see that it is heading towards a Tor node).
Bypasses any blocks on Tor exit nodes.
Allows you to choose server location (great for geo-spoofing).

VPN through Tor disadvantages

None really, apart from the speed hit, and that setup can be a little more complex.
Slightly more vulnerable to global end-to-end timing attack.
To access Tor hidden services you need to run the Tor browser. This introduces yet another layer of obfuscation, but will slow the connection down even further.

As you can see, this is by far the better configuration. With care, you can maintain true anonymity while benefiting from the extra layer of protection afforded by using VPN (with the side-benefit of not suffering from blocked Tor exit nodes.)

Conclusion

In conclusion, a proxy server is completely browser based, and is not as compatible with certain web pages that use non-browser technology. However, a VPN will work with ALL internet based services, but will offer less choice on which applications will get run through your ISP, as with the VPN, everything is routed through that server when connected.

Having all that in mind, if you are a mafia Whistle-blower, or a dissident living under regime in which it would be very dangerous to be caught performing certain activity (such as writing political blogs), then VPN through Tor is the ultimate safest solution as at that point you are almost certainly going via solid encryption and will help you browse the web absolutely anonymously. Yes, Even it means you need to spend a few coins more, the result you get will be stellar and it is worth it!

Just remember that there is no such thing as a 100% guarantee of anonymity, whichever route you take. There are always, at least potentially, loopholes in any security arrangement, and individuals often give their true identifies away through patterns of behaviors such browsing pattern, super cookies, unguarded comments made while on-line, or any other number of simple and not-so-simple mistakes. But as far as I’ve researched, there’s no match for VPN through Tor at this point. I personally use PrivateInternetAccess for VPN service as they are yet to be proven otherwise. Instruction for setting up PIA can be found here.

Do you think otherwise? Let us know via comment section.

affcat

2019-07-02T07:17:00.001-07:00

Notes

affcat outputs the contents of an image file to stdout. Image files that are not raw but are recognized by AFF will be output in raw format. Missing pages will not be padded, but the fact that they are missing will be noted on STDERR.

Part of Afflib

Help Text

afcat version 3.7.1
usage: afcat [options] infile [... more infiles]
options:
    -s name --- Just output segment name
    -p ###  --- just output data page number ###
    -S ###  --- Just output data sector ### (assumes 512-byte sectors). Sector #0 is first
    -q      --- quiet; don't print to STDERR if a page is skipped
    -n      --- noisy; tell when pages are skipped.
    -l      --- List all of the segment names
    -L      --- List segment names, lengths, and args
    -d      --- debug. Print the page numbers to stderr as data goes to stdout
    -b      --- Output BADFALG for bad blocks (default is NULLs)
    -v      --- Just print the version number and exit.
    -r offset:count --- seek to offset and output count characters in each file; may be repeated

Example Usage

Note: there is some confustion about the file name. If you look at the help text it is referred to as afcat. However in both the github library and kali, the file name is affcat.

Below stolen from: opensourceforu

Afcat is a command-line utility that prints the various contents of an AFF image file. Basic usage is afcat <options> <AFF file name>. Some of the useful options are:

-p <nnn> — Output data of page number <nnn>.
-S <nnn> — Output data of sector <nnn> (sector size 512 bytes).
-l — Output all segment names.
-L — Output all segment names, arg and segment length.

Example: Invoking Afcat on the AFF file /tmp/image.aff with the -L option prints an output as shown below

Lan Turtle Review

2016-12-21T04:09:00.001-08:00

I was lucky enough to get my hands on a LAN Turtle, the tiny Linux based computer disguised as a USB ethernet adapter.

Specs

Atheros AR9331 SoC at 400 MHz MIPS
16 MB Onboard Flash
64 MB DDR2 RAM
10/100 Ethernet Port
USB Ethernet Port – Realtek RTL8152
Indicator LED (Green Power, Amber Status)
Button (inside case for Factory Reset / Firmware Recovery)
Dimensions: 95 x 23 x 31 mm

What is it?

The whole idea of the Lan Turtle is to be an innocuous pentest dropbox. That being said this isn’t the device which you would run your entire suite of tools on. The idea is to just simply use the Turtle to pivot into an internal network.

The main way in which you connect to the device to manage and configure it is via SSH. The main interface is a Ncurses style text-based menu system. This makes the device extremely simple to use. Within in a few clicks you can have reverse SSH set up on this thing and go and throw it into a target network. If there is more customization you wish to do, or make some more advanced configurations to the device, you can simply exit this menu system and have full root SSH access.

In order to install packages you need to connect an ethernet cable to the device. The entire package system is based off an HTTP connection to lanturtle.com. This mimics a full package manager, and again, makes the device extremely simple to deploy and use.

Packages

The number of packages or ‘modules’ for the Lan Turtle seems to be ever expanding. The ‘Quick Creds’ module gained some notoriety as Mubix was able to set this thing up to steal SMB creds when plugged into a target machine. A number of other familiar modules are seen above, aswell as SSHFS which was probably my favourite module. SSHFS is as Linux tool which allows you to mount a remote directory over SSH. In the case of the LAN Turtle this meant I could have logs from the device sent via SSH in real-time to a VPS.

Is it worth the cash?

I’d say the LAN Turtle is priced very competitively. Especially considering this thing definitely stands up against the likes of Pwnie Express. (VERY EXPENSIVE). It’s a very small price to pay for a device which is super cool. That being said, the specs on the device are not fantastic. This is clearly purpose built as a way into an internal network. Those specs are completely fine for that. However, in some cases (especially on a real pentest) its not viable to have your attacks going via a VPN into the internal network and it would be far easier to have the tools running directly on the device. A Raspberry Pi 3, which has significantly more horsepower, would probably be a better choice for this. This being said, by going down the homebrew route you do miss out on a lot of ready made offensive security scripts.

If you wanna get your own LAN Turtle, head over to https://lanturtle.com/ (NOT A SPONSOR)

The 10 Worst Spammers in the World

2016-11-30T08:18:00.001-08:00

The Spamhaus Project is an international organisation, based in both London and Geneva, founded in 1998 by Steve Linford to track email spammers and spam-related activity. The name spamhaus, a pseudo-German expression, was coined by Linford to refer to an Internet service provider, or other firm, which spams or knowingly provides service to spammers. Amongst other things, Spamhaus listed the 10 Worst Spammers in the World and they update the list frequently.

The Spamhaus Project is responsible for compiling several widely used anti-spam lists. Many internet service providers and email servers use the lists to reduce the amount of spam that reaches their users. In 2006, the Spamhaus services protected 650 million email users, including the European Parliament, US Army, the White House and Microsoft, from billions of spam emails a day.

Spamhaus is also notorious for blacklisting IPs, Domains without much consultation or notices. A good example is when they blacklisted Google Docs IPs. They also blacklisted CyberBunker which is quite renowned for providing BulletProof Hosting and inadvertently blacklisted many legit clients causing the first of large scale DDoS attack in recent memory. [Source: Wiki]

Up to 80% of spam targeted at internet users around the world is generated by a hard-core group of around 100 known persistent spam gangs whose names, aliases and operations are documented in Spamhaus’ Register Of Known Spam Operations (ROKSO) database.

This TOP 10 chart of ROKSO-listed spammers is based on Spamhaus views of the highest threat, least repentant, most persistent, and generally the worst of the career spammers causing the most damage on the internet currently.

As of 23 November 2016 the world’s worst spammers and spam gangs are:

Canadian Pharmacy – Ukraine
A long time running pharmacy spam operation. They send tens of millions of spams per day using botnet techniques. Probably based in Eastern Europe, Ukraine/Russia. Host spammed web sites on botnets and on bulletproof Chinese web hosting.

Dante Jimenez / Aiming Invest – United States
Spamwarez, lists, “bulletproof” hosting in the finest South Florida tradition. Working with worst cybercriminal botnet spammers. Now mostly involved in massive botnet spamming with hosting on hacked servers and Eastern European hosters.

Yair Shalev / Kobeni Solutions – United States
High volume snowshoe spammer from Florida, (former?) partner-in-spam of ROKSO spammer Darrin Wohl. Son-in-law of ROKSO-listed spammer Dan Abramovich. Sued for fraud by the US FTC in 2014.

Michael Boehm and Associates – United States
Snowshoe spam organization that uses large numbers of inexpensive, automated VPS hosting IPs and domains in whatever TLD is currently cheapest to send high volumes of spam to extremely dirty, scraped lists. Operates under many business and individual names.

Michael Lindsay – United States
Lindsay’s iMedia Networks is a full-fledged spam-hosting operation serving bulletproof hosting at high premiums to well known ROKSO-listed spammers. His customers spam via botnet zombies with spam payloads hosted offshore, tunneled back to his servers. He and the gang have been hijacking (stealing) IP address space from companies for years to spam from. Illegal in the USA.

Yambo Financials – Ukraine
Tied into distribution and billing for child, animal, and incest-porn, pirated software, and pharmaceuticals. Run their own merchant services (credit-card “collection” sites) set up as a fake “bank.”

Peter Severa / Peter Levashov – Russian Federation
A spammer who writes and sells virus-spamming spamware and botnet access. Is probably involved in the writing and releasing of viruses & trojans. One of the longest operating criminal spam-lords on the internet. Works with many other Eastern Euro and US based botnet spammers. Was a partner of American spammer Alan Ralsky.

Michael Persaud – United States
Long time snowshoe type spammer, recently raided by FBI.

Alvin Slocombe / Cyber World Internet Services – United States
Bulletproof spam host operating Cyber World Internet Services / e-Insites, and currently spamming using a variety of aliases such as Brand 4 Marketing, Ad Media Plus, Site Traffic Network, RCM Delivery, and eBox.

Jagger Babuin / BHSI – Canada
Romanian spammer now living in Vancouver BC. Also known as the “Dr Oz” spammer.

Source:

Register Of Known Spam Operations (ROKSO) database
Spamhaus Blocklist (SBL) database.
Spamhaus statistics (original post link – updated regularly)

Detailed records on each spammer or spam gang listed can be viewed by clicking on the names.

I always thought that most of the large spammers are from Africa or Eastern European region (no offense guys – clearly mainline-media portrays it that way). Looking at this list and their location was more of a revelation. Anywho, in case you are lots of emails with links that looks legit (but you think they might contain malwares), then you can use reputed providers online site review tools listed in this page.

Shortest Spam Run Ever – Domaincop.org Domain Abuse Notice Spam

2016-11-30T08:16:00.001-08:00

Woke up this morning and found two emails from domaincorp.org in my Inbox stating my domains are being used for spamming and spreading malwares recently. Subject line contained “Domain Abuse Notice” which looked serious.

I mean WOHA! I do write about ‘stuff’ but doesn’t mean I send out emails to anyone. I don’t even respond to my emails half the time cause I don’t really need another SEO expert, another advertiser, another promoter or a globally acclaimed graphics designer to design ‘tings’!

But then again, you read about all these reports that explains how malware and virus’s are served via Advertisement etc. So I decided to carefully examine the email and it’s contents in an attempt to find out more information. Before I even opened the actual email, I checked it’s header and Domain Whois. I always do this, specially Whois because you are unlikely to receive an abuse notice email from any domain that was registered few weeks back. Most abuse notice emails are served by large organizations and domains that has been around for years and built enough reputation for everyone to take them seriously.

Whois information

I checked their whois from https://who.is/whois/domaincop.org

Nice, Registered On 2016-11-22, Updated On 2016-11-22 and today is 2016-11-23. I mean duh, it’s still 22nd of November is some parts of the world. They also has PrivacyGuard enabled which means you cannot see the real owners name or details like darodar.com referrer spam.

Inspect URL and it’s content

The next obvious thing was to check the URL that was sent to me to view the abuse my domains has inflicted. erm, do I use a browser? Perhaps not, I decided to use cURL.

root@kali:~# curl -kv http://www.domaincop.org/<removed>
* Could not resolve host: www.domaincop.org
* Closing connection 0
curl: (6) Could not resolve host: www.domaincop.org

hang on, the domain seems to have no DNS response. Let’s double-check that with dig command

root@kali:~# dig www.domaincop.org

; <<>> DiG 9.10.3-P4-Debian <<>> www.domaincop.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 64018
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.domaincop.org.        IN    A

;; AUTHORITY SECTION:
org.            704    IN    SOA    a0.org.afilias-nst.info. noc.afilias-nst.info. 2012251969 1800 900 604800 86400

;; Query time: 1 msec
;; SERVER: x.x.x.x#53(x.x.x.x)
;; WHEN: Wed Nov 23 10:42:53 AEDT 2016
;; MSG SIZE  rcvd: 109

dig returned NXDOMAIN response which means the domain doesn’t exists. It seems either they’ve disabled their domain and/or Cloudflarebanned/removed them. In any case, there is no way to inspect that URL for me now. ‘sad panda’

Sample email

Here’s one of emails I received from “Imogen Murray” <imogen_murray@domaincop.org>; (the other email was from “Isaac Wright” <isaac-wright@domaincop.org>; ) with exactly same content:

Dear Domain Owner,

Our system has detected that your domain:<removed>.com is being used for spamming and spreading malware recently.

You can download the detailed abuse report of your domain along with date/time of incidents.
Click Here<link-removed>

We have also provided detailed instruction on how to delist your domain from our blacklisting.

Please download the report immediately and take proper action within 24 hours otherwise your domain will be suspended permanently.

There is also possibility of legal action depend on severity and persistence of your abuse case.

Three Simple Steps:

1. Download your abuse report.

2. Check your domain abuse incidents along with date and time.

3. Take few simple steps for prevention and to avoid domain suspension.

Click Here to Download your Report<link-removed>

Please look into it and contact us.

Best Regards,

Domain Abuse Admin

DomainCop Inc.

Tel.: (139) 722-66-56

Conclusion

Not sure what this email was about, but in case you ever get these type of emails, here’s what you always do:

Check Domain Whois
Check the URL without actually going into it (cURL it)
Use online scanners to check the links
Check dig/nslookup info
Search in Google
If you must visit the URL, do it from a command line tool or from a VM.

In short, you are unlikely to get such emails from multiple senders from a domain that was setup yesterday, got banned today and has people around the world talking about it being a scam. Another way is to check spammy links is by using reputed providers online site review tools. Here’s a list of them:

Real Time Scanners:

Comodo Web Inspector: Examines the URL in real-time
Joe Sandbox URL Analyzer: Examines the URL in real time
Is It Hacked: Performs several of its own checks of the URL in real time and consults some blacklists
IsItPhishing: Assesses the specified URL in real-time
Sucuri SiteCheck: Scans the URL for malware in real time and looks it up in several blacklists
Zscaler Zulu URL Risk Analyzer: Examines the URL using real-time and historical techniques

Historical Reputation data:

AVG Website Safety Reports: Provides historical reputation data about the site
Blue Coat WebPulse Site Review: Looks up the website in BlueCoat’s database
BrightCloud URL/IP Lookup: Presents historical reputation data about the website
Cisco SenderBase: Presents historical reputation data about the website
Cymon: Presents data from various threat intel feeds
Deepviz: Offers historical threat intel data about IPs, domains, etc.
FortiGuard lookup: Displays the URL’s history and category
IBM X-Force Exchange: Provides historical data about IPs, URLs, etc.
Intel/McAfee: : Presents historical reputation data about the website
KnownSec: Presents historical reputation data about the website; Chinese language only
PhishTank: Looks up the URL in its database of known phishing websites
Malware Domain List: Looks up recently-reported malicious websites
MalwareURL: Looks up the URL in its historical list of malicious websites
McAfee Site Advisor: Presents historical reputation data about the website
MxToolbox: Queries multiple reputational sources for information about the IP or domain
Norton Safe Web: Presents historical reputation data about the website
Open Threat Exchange: Presents diverse threat intelligence data from AlienVault
PassiveTotal: Presents passive DNS and other threat intelligence data
Quttera ThreatSign: Scans the specified URL for the presence of malware
Reputation Authority: Shows reputational data on specified domain or IP address
Trend Micro: Presents historical reputation data about the website
Unmask Parasites: Looks up the URL in the Google Safe Browsing database
URL Blacklist: Looks up the URL in its database of suspicious sites
URL Query: Looks up the URL in its database of suspicious sites and examines the site’s content
URLVoid and IPVoid: Looks up the URL or IP in several blacklisting services
VirusTotal: Looks up the URL in several databases of malicious sites
vURL: Retrieves and displays the source code of the page; looks up its status in several blocklists
ThreatMiner: Presents diverse threat intelligence data

These are industry leaders for checking and categorizing Domains/URL’s and marking them accordingly. For new domains, use the Live scanners; for older domains, use the historical reputation scanners. In any case, stay safe and happy browsing.

How to Fix Detect and Mount CD-ROM [Kali Linux 2016.2]

2016-11-14T13:24:00.001-08:00

Kali linux 2.0 is a Penetration testing Distro from Kali Team. Earlier I had posted two articles on how to install Kali (Sana) using both GUI (Live-CD) and Traditional method. But later I tried to install Kali through USB and I received this error during the installation process. "Your Installation CD-ROM couldn’t be mounted. This is probably means that the CD-ROM was not in the drive. If so you can insert and try it again." I googled and found that it is a known bug and can be resolve easily.

This post will let you know how to solve this "Detect and Mount CD-ROM" issue. Follow the below given instructions,

type in terminal: 

mount -t vfat /dev/sdb1 /cdrom
exit

I hope this solves your problem. Enjoy Sana!

How To Setup Honeypot in Kali Linux

2016-05-28T07:40:00.000-07:00

The Pentbox is a safety kit containing various tools for streamlining PenTest conducting a job easily. It is programmed in Ruby and oriented to GNU / Linux, with support for Windows, MacOS and every systems where Ruby is installed. In this small article we will explain how to set up a honeypot in Kali Linux. If you don’t know what is a honeypot, “a honeypot is a computer security mechanism set to detect, deflect, or, in some manner, counteract attempts at unauthorized use of information systems.”

Download Pentbox:

Simply type in the following command in your terminal to download pentbox-1.8.

root@iExplo1t:~# wget http://downloads.sourceforge.net/project/pentbox18realised/pentbox-1.8.tar.gz

Uncompress pentbox files

Decompressing the file with the following command:

root@iExplo1t:~# tar -zxvf pentbox-1.8.tar.gz

Run pentbox ruby script

Change directory into pentbox folder

root@iExplo1t:~# cd pentbox-1.8/
root@iExplo1t:~/pentbox-1.8# ls

Run pentbox using the following command

root@iExplo1t:~# ./pentbox.rb

Setup a honeypot

Use option 2 (Network Tools) and then option 3 (Honeypot).

Finally for first test, choose option 1 (Fast Auto Configuration)

This opens up a honeypot in port 80. Simply open browser and browse to http://192.168.150.128 (where 192.168.150.128 is your IP Address. You should see an Access denied error.

and in the terminal you should see “HONEYPOT ACTIVATED ON PORT 80” followed by “INTRUSION ATTEMPT DETECTED”.
.

Now, if you do the same steps but this time select Option 2 (Manual Configuration), you should see more extra options

Do the same steps but select port 22 this time (SSH Port). Then do a port forwarding in your home router to forward port external port 22 to this machines’ port 22. Alternatively, set it up in a VPS in your cloud server.

You’d be amazed how many bots out there scanning port SSH continuously. You know what you do then? You try to hack them back for the lulz!

Here’s a video of setting up honeypot if video is your thing:

Panama Papers data leak exposes Worlds largest global corruption

2016-04-04T09:29:00.002-07:00

The Panama Papers are a set of 11.5 million confidential documents created by the Panamanian corporate service provider Mossack Fonseca that provide detailed information on more than 214,000 offshore companies, including the identities of shareholders and directors. The acting heads of state of five countries, namely Argentina, Iceland, Saudi Arabia, Ukraine and United Arab Emirates are identified in the documents, as are government officials, close relatives and close associates of various heads of government of over 40 other countries, including China, Brazil, France, India, Malaysia, Mexico, Pakistan, Russia, South Africa, South Korea, United Kingdom and Syria.

Over 11.5 Million Leaked Files including 2.6 Terabytes of Data

Comprising 11.5 million documents created since the 1970s, the 2.6-terabyte set was given to the German newspaper Süddeutsche Zeitung in 2015 and subsequently to the Washington-based International Consortium of Investigative Journalists (ICIJ). The papers were distributed to and analyzed by about 400 journalists at 107 media organizations in more than 80 countries. The first news reports based on the set, along with 149 of the documents themselves, were published on April 3, 2016. Among other planned disclosures, the full list of companies is to be released in early May.

Mossack Fonseca is a Panamanian law firm and corporate service provider founded in 1977 by Jürgen Mossack and Ramón Fonseca. The company’s services include incorporating companies in offshore jurisdictions, administering offshore firms and providing wealth management services. The company has more than 500 employees in more than 40 offices around the world. The firm has acted on behalf of more than 300,000 companies, most of which are registered in the UK or are British-administered tax havens.

The firm works with the world’s biggest financial institutions, such as Deutsche Bank, HSBC, Société Générale, Credit Suisse, UBS and Commerzbank.[5] Before the Panama Papers leak, Mossack Fonseca was described by the Economist as a “tight-lipped” industry leader in offshore finance.[7] An article on the Australian Broadcasting Corporation website explains:

Using complex shell company structures and trust accounts Mossack Fonseca services allow its clients to operate behind an often impenetrable wall of secrecy. Mossack Fonseca’s success relies on a global network of accountants and prestigious banks that hire the law firm to manage the finances of their wealthy clients. Banks are the big drivers behind the creation of hard-to-trace companies in tax havens.

Much of the firm’s work is perfectly legal and benign. But for the first time the leak takes us inside its inner workings, providing rare insight into an operation which offers shady operators plenty of room to manoeuvre.

The massive security breach shows how a global industry of law firms and big banks sells financial secrecy to politicians, fraudsters and drug traffickers as well as billionaires, celebrities and sports stars.

The exposé of Panama-based Mossack Fonseca has been made possible by an unprecedented leak of more than 11 million documents to German investigative newspaper Süddeutsche Zeitung.

The leak came from an anonymous source and was then shared with the International Consortium of Investigative Journalists (ICIJ) which organized an investigation by news organizations around the world.

The cache of documents includes emails, banking details and client records dating back 40 years and reveals the inner workings of a law firm famed for its secrecy.

The leak reveals the offshore holdings of 12 current and former world leaders including Iceland’s Prime Minister Sigmundur David Gunnlaugsson, as well as relatives of Syria’s President Bashar al-Assad, friends of Russian President Vladimir Putin and members of China’s Communist Party elite.
More than 1,000 Australian links to companies have been found in the data leak including the passports of hundreds of Australian citizens connected to companies as directors, shareholders and beneficial owners.
Over 500 Indians Figure on the List.
Twenty-nine Forbes-listed billionaires are also named in the leak.

Here’s some list of names that came up using Mossack Fonseca:

Heads of state and government

Current

Mauricio Macri, President of Argentina
Sigmundur Davíð Gunnlaugsson, Prime Minister of Iceland
Salman, King of Saudi Arabia
Khalifa bin Zayed Al Nahyan, President of the United Arab Emirates and Emir of Abu Dhabi
Petro Poroshenko, President of Ukraine

Former

Bidzina Ivanishvili, Prime Minister of Georgia
Ayad Allawi, Acting Prime Minister of Iraq
Ali Abu al-Ragheb, Prime Minister of Jordan
Hamad bin Khalifa Al Thani, Emir of Qatar
Hamad bin Jassim bin Jaber Al Thani, Prime Minister of Qatar
Ahmed al-Mirghani, President of Sudan
Pavlo Lazarenko, Prime Minister of Ukraine

However, the list doesn’t have USA even as a selection. Many are calling it Western sponsored leak as Mossack Fonseca leak doesn’t have any Western Corporations or Western Billionaires who you would think as the primary clients. USA being the largest and most powerful also has the highest number of Billionaires and corporations. Large media outlets already mentioned that “much of the leaked material will remain private.”

The leak is being managed by “International Consortium of Investigative Journalists”, which is funded and organized mostly the USA’s Center for Public Integrity. Recent ICIJ funders include

Adessium Foundation
Open Society Foundations
The Sigrid Rausing Trust
Fritt Ord Foundation
Pulitzer Center on Crisis Reporting
The Ford Foundation
The David and Lucile Packard Foundation
Pew Charitable Trusts and Waterloo Foundation

Sources:

http://panamapapers.sueddeutsche.de/en/
https://en.wikipedia.org/wiki/Panama_Papers
https://en.wikipedia.org/wiki/List_of_people_named_in_the_Panama_Papers
https://www.icij.org/about

A very detailed guide on how to setup VPN on Kali Linux - Kali Sana 2.x

2016-01-06T11:16:00.002-08:00

A very detailed guide on how to setup ‪#‎VPN‬ on ‪#‎KaliLinux‬ and ‪#‎Ubuntu‬. Works for ‪#‎Debian‬, ‪#‎LinuxMint‬ and other variants.

choose on the following depending on your location:

PIA Regional Gateways

United States (US VPN)
us-midwest.privateinternetaccess.com
us-east.privateinternetaccess.com
us-west.privateinternetaccess.com
us-texas.privateinternetaccess.com
us-california.privateinternetaccess.com
us-florida.privateinternetaccess.com

Canada (CA VPN)
ca.privateinternetaccess.com
ca-toronto.privateinternetaccess.com

United Kingdom (UK VPN)
uk-london.privateinternetaccess.com
uk-southampton.privateinternetaccess.com

Switzerland (Swiss VPN)
swiss.privateinternetaccess.com

Netherlands (NL VPN)
nl.privateinternetaccess.com

Sweden (SE VPN)
sweden.privateinternetaccess.com

France (FR VPN)
france.privateinternetaccess.com

Germany (DE VPN)
germany.privateinternetaccess.com

Romania (RO VPN)
ro.privateinternetaccess.com

Hong Kong (HK VPN)
hk.privateinternetaccess.com

Australia (Australia VPN)
aus.privateinternetaccess.com

Japan (Japan VPN)
japan.privateinternetaccess.com

Conclusion

VPN is good, VPN is secure, VPN allows you to bypass proxies, Firewall, monitoring and content filtering. But there’s always that drama when you’re using VPN, it sometime is slow and sometime is not that secure you’d think. But for countries like Iran, Pakistan, Egypt, China, North Korea etc. where content filtering is done in National Level maybe it’s a way to get the voice out. I am not going to discuss legality here, so I will leave that to you.

Did I make any mistakes? Let me know. You can also tell me about your setup in comments section and I will be happy to include them in this guide or a new one.

Enjoy your PrivateInternetAccess VPN. Thanks again for reading my lengthy posts! Please share and RT.

What’s New in Kali Linux 2.0? Kali Sana

2015-11-13T01:52:00.000-08:00

Hi all

Today, I'll show you what’s new in Kali Linux 2.0 ?

On Wednesday, Offensive security team released their latest version of Kali Linux which is the Kali Linux 2.0. This iteration of Kali Linux was presented at both the cons Def con 23 and Black hats 2015. The OS was available for the masses on August 11th.

Kali Linux 2.0 has 3 different versions for your computer namely mini, light and regular. The difference between them is the size of the ISO the mini is 29 MB, light is 0.8 GB where as the regular one is 3.1 GB.

The GUI of the OS is far better than the previous iterations.
This GUI makes it a lot easier to use Kali on touch devices like smartphones, tablets and touch computer.The entire OS looks a little like Android + Macintosh. The colors used are bright and make the OS look a little too elegant for a hacking OS. I guess the old Linux like look dies with Kali 1.1.

The operating system is based on Debian Jessie which has the Kernel version 4.0. Apart form the latest versions of Metasploit 4.1 - Hydra 8.1 - Burp 1.6 and SET
* Gnome 3.14
* Maltego 3.6.1
* Nmap 4.69B4 -
* Aircrack 1.2RC2 -
* BeEF 4.6.1
* Recon 4.6.0 -
* JTR 1.8.0.6 Jumbo
* ZAP 2.4.0
* PixieWPS 1.0
* BDF 3.0.5
* Redesigned user interface for a streamlined work experience
* Restructured menus and tool categories
* improved hardware and wireless driver coverage
* supported Desktop Environments (gnome, kde, xfce, mate, e17, lxde, i3wm)
* Kali Linux is Now a Rolling Distribution
* New software update alert added
* Added support to GNOME 3
* custom support for multi-level menus, true terminal transparency & gnome shell extensions
* Kali Linux 2.0 included ARM Images & NetHunter 2.0
* Updated VMware and VirtualBox Images
* You can upgrade Kali 1.x to Kali 2.0
* Support metasploit-framework package
* Deprecated Metasploit Community / Pro package

All these tools are classified and categorized and can be accessed by clicking on the show applications icon. GNU radio companion and a few SDR tools are also added which means you can forget the apt-get install kali-linux-sdr command on your newly installed Kali Linux.
We downloaded the VMware image and found that the system used to lag a little when you run it with high processor demanding applications like Internet download manager which might be due to the highly demanding GUI.
Kali Linux 2.x Download link: https://www.kali.org/downloads

How to Install Photoshop in Kali Linux 2.x (Kali Sana)

2015-11-12T14:05:00.000-08:00

The Linux community has been calling out to Adobe for years to get a port of their flagship software. It turns out, this will probably never happen (for many reasons - come conspiratorial in nature). So, how are Linux users to get their Photoshop on? Well, one option is GIMP. Now, I am also a graphic designer and use GIMP for everything I do. But I know there are things that are a real challenge in GIMP that Photoshop users can do in their sleep. And as my clientele continues to grow, I must expand my skills with the help of Photoshop. We all know I'm not about to step way back in time and start using Windows again. So, my choice is either to buy a Mac or install Adobe Photoshop with the help of WINE.

If you don't have the full version, download it from the download page.

How To Install and Configure Veil Framework on Kali Linux

2015-09-25T12:45:00.000-07:00

This post will show you how to install Veil framework on Kali Linux!
What is Veil Framework?
Veil-Evasion is a tool used to generate payloads that bypass antivirus solutions.

What do you need?
A Computer
Kali Linux - Kali.org
Veil-Evasion - https://github.com/Veil-Framework/Veil-Evasion
Commands:
git clone https://github.com/Veil-Framework/Veil-Evasion

cd Veil-Evasion/
ls
cd setup/
ls
./setup.sh
cd Veil-Evasion/
python Veil-Evasion.py

Create Kali Bootable Installer USB Drive in Windows 10 (Kali Bootable Non-Persistence USB Drive)

2015-09-24T10:10:00.001-07:00

This post will show how to create Kali Bootable Installer USB Drive in Windows 10 (Kali Bootable Non-Persistence USB Drive). This is the fastest method, for getting up and running with Kali Linux is to run it “live” from a USB drive.

Advantages of using Kali Live USB Drive – Non-Persistence

It’s non-destructive — it makes no changes to the host system’s hard drive or installed OS, and to go back to normal operations, you simply remove the “Kali Live” USB drive and restart the system.
It’s portable — you can carry Kali Linux in your pocket and have it running in minutes on an available system.
It’s secured – you can destroy the disk and there is no way to link anything back to that USB as the physical medium is destroyed.
Best of all – You can boot any supported computers using it thus bypass OS security.

Disadvantages of using Kali Live USB Drive – Non-Persistence

It’s once off – You can not update/upgrade distro.
You can not save config.

Requirements

A verified copy of the appropriate ISO image of the latest Kali build image for the system you’ll be running it on. i.e. note i386 or x64 or armel or armhf versions.
You need to download an Official Kali Linux ISO image from here: Click Here
A copy of Win32 Disk Imager utility. Download from here: Click Here
A USB thumb drive, 4GB or larger.

Note: Safely eject the USB drive from the Windows machine. Now you can use this USB device to boot into Kali Linux on any supported machine.

You need to select/change BIOS setup to select USB as the first boot device.

Select Live (686-pae) or Live (amd64) or similar based on the ISO you’ve selected and off you go.

Check download speed from Linux Terminal

2015-09-23T04:13:00.000-07:00

In this article you'll find how to test Internet speed from the Linux terminal, using speedtest_cli - a simple command-line client written in Python for measuring Internet bandwidth.

I'll show how to simply check download/upload Internet speed

First you need to install python-pip package

apt-get install python-pip

Next you install speedtest-cli via pip.

pip install speedtest-cli

and finally you just simply run speedtest-cli command in your terminal

speedtest-cli

How to Make a Bootable Kali Linux USB Flash Drive/Pendrive

2015-09-14T10:53:00.000-07:00

Quick and easy tutorial for beginners on how to make a bootable Kali Linux USB Flash drive. This drive can be used to install Kali Linux or to run Kali live from the USB drive without affecting the operating system that's already installed on the computer.

Kali Linux 2.0 - How to Change or Reset ROOT Password in Kali Sana or pretty much any Linux distributions

2015-09-08T08:53:00.003-07:00

Forgetting root password is an hassle. We try to be vigilant with our security and set a complex root password. We also try not to login using directly into root account (in most production boxes) and use sudoinstead. So it’s not very unlikely to loose your root password and depending on how you’ve setup your access, you just might not be able to reset it using sudo passwd root/someusername. Following post shows you how to reset root password in Kali Linux or pretty much any Linux distributions.

How to Install Kali Linux 2.x on VirutalBox - Kali Sana

2015-08-23T10:46:00.000-07:00

VirtualBox is a powerful x86 and AMD64/Intel64 virtualization product for enterprise as well as home use. Not only is VirtualBox an extremely feature rich, high performance product for enterprise customers, it is also the only professional solution that is freely available as Open Source Software under the terms of the GNU General Public License

Upgrade Kali Linux 1.x To Kali Linux 2.x Without Errors - Kali Sana

2015-08-21T07:17:00.000-07:00

You can download official ISO file of Kali 2.0 from Kali Linux website and install it as you install previous versions of kali but if you do not want to lose your installed programs and data then you can upgrade your old kali Linux 1.x to Kali Linux Sana.
When you do this upgrade it is possible that you may get some errors and do not able to upgrade it fully. This video will show you how to upgrade to kali Linux Sana without any errors.
Here is the Repositories that I use to upgrade

leafpad /etc/apt/sources.list

# Regular repositories
deb http://http.kali.org/kali sana main non-free contrib
deb http://security.kali.org/kali-security sana/updates main contrib non-free
# Source repositories
deb-src http://http.kali.org/kali sana main non-free contrib
deb-src http://security.kali.org/kali-security sana/updates main contrib non-free

apt-get update
apt-get dist-upgrade

If you guys like this tutorial please subscribe to My Channel :)

Dual Boot Kali Linux 2.x with Windows 10/8/7/XP – Kali Sana

2015-08-19T10:32:00.001-07:00

This article is a step-by-step guide on how to dual-boot Windows and Kali Linux on a single HARD DISK DRIVE (HDD). Kali Linux is what used to be BackTrack Linux, a distribution designed for penetration testing and security professionals. It ships with about 300 penetration testing and hacking applications installed.
While BackTrack is based on Ubuntu, Kali Linux is based on Debian, and uses the complete Debian Installer. As a result, the installation process is different from that of BackTrack, which uses Ubuntu’s graphical installation program.
Install Kali Linux: The best option to select on Kali Linux’s boot menu is Graphical Install. It gives you a point-and-click installation process. Install works just as well, but the interface is ncurses-based.1) For installing Kali Linux, the following partitions will be created: /, /home, and Swap. In that order. The /home partition is optional. At the disk partitioning methods step of the installation process, you get a bunch of options. Because none of the guided options will create a separate /boot partition, creating the partitions will have to be done manually. So select “Manual” and click Continue.2) You can see the existing Windows partitions, both of which are primary partitions. The free space, reclaimed from Windows in the previous step is what will be used for creating the partitions for Kali Linux. To start creating the partitions, select the free space and click Continue.
3) Create a new partition. Continue.
This shows the total amount of disk space available for Kali Linux. The /boot partition will be created first, so you need to specify the amount of disk space for it ....... watch this video, you'll understand.

Don't forget to Like our PAGE!
http://www.facebook.com/iExplo1t

Dual Boot Kali Linux 2.x with Windows 8/10... par iExplo1t

How to Fix Armitage in Kali Linux 2.x (Kali Sana)

2015-08-14T12:16:00.003-07:00

‎Armitage‬ solve the problem opening. download : CLICK HERE

root@kali:~# /etc/init.d/postgresql start
root@kali:~# msfdb init

How to Install Kali Linux 2.x on VMware – Kali Sana

2015-08-14T10:30:00.000-07:00

Complete Guide On How To Install Kali Linux In VMware Player

This tutorial will walk you through the difficult process of installing Kali Linux in VMware, a free virtual machine manager that can be downloaded from www.vmware.com.
This tutorial assumes that you have some basic knowledge of your computer (amount of RAM, number of processors, etc.) and that you’re using VMware as a virtual machine manager.

Download VMware : CLICK HERE
Download Kali Sana : CLICK HERE

Review Kali Linux 2.0 – Kali Sana

2015-08-14T09:24:00.002-07:00

Kali 1.1.0a – 13th March, 2015 – No fanfare release fixing kernel ABI inconsistencies in the installers.
Kali 1.1.0 – 9th Febuary, 2015 – First dot release in 2 years. New kernel, new tools and updates.
Kali 1.0.9a – 6th October, 2014 – Security BugFix Release covering shellshock and Debian apt vulnerabilities.
Kali 1.0.9 – 25th August, 2014 – BugFix Release including installer and a set of tool updates and package fixes.
Kali 1.0.8 – 22nd July, 2014 – EFI Support for our “full” ISOs and a set of tool updates and package fixes.
Kali 1.0.7 – 27th May, 2014 – Kernel 3.14, tool updates, package fixes, Kali Live Encrypted USB Persistence.
Kali 1.0.6 – 9th January, 2014 – Kernel 3.12, cryptsetup nuke option, Amazon AMI, ARM build Scripts.
Kali 1.0.5 – 5th September, 2013 – Bugfix rollup. LVM Encrypted installs, Software Defined Radio (SDR) tools.
Kali 1.0.4 – 25th July, 2013 – Bugfix rollup. Penetration testing tool additions and updates.
Kali 1.0.3 – 26th April, 2013 – Bugfix rollup. New accessibility features. Added live Desktop installer.
Kali 1.0.2 – 27th March, 2013 – Minor Bugfix Release and update roll-up.
Kali 1.0.1 – 14th March, 2013 – Minor Bugfix Release.
Kali 1.0.0 – 13th March, 2013 – Initial release.

Kali Sana (Kali Linux 2.0) added the following features:

Kali Linux 2.0 (Kali Sana) is now a rolling release, which means more frequent updates.
The core set tools in Kali will be weekly updated.
Kali UI will now use full Gnome Desktop instead of gnome-fallback, i.e. more eye-candy for you.
Restructured menus and tool categories.
Ruby 2.0 will be supported natively which will make Metasploit will load much much faster.
Added all new cutting-edge wireless penetration tools and more. Watch out neighbors, it will never be safe anymore.
Added desktop notifications, so that you don’t miss anything.
Added screencasting so that you can record desktop and upload to YouTube/Vimeo etc.

iExplo1t

Website for Sale

Migrate Plex Server - Ubuntu

1. Set up the new Ubuntu server:

2. Install Plex Media Server:

3. Stop the Plex Media Server service:

4. Copy Plex data directory:

5. Transfer data to the new server:

6. Set ownership and permissions:

7. Start the Plex Media Server service:

8. Verify and update settings:

Boot Ubuntu Server 22.04 LTS from USB SSD on Raspberry Pi 4

Requirements

1. Upgrade bootloader firmware on Raspberry Pi 4

2. Select Boot Device Preference

3. Install Ubuntu Server 22.04 LTS on USB 3.0 SSD

Advantages Disadvantages of using Proxy vs VPN vs TOR vs TOR and VPN together.

What is a Proxy?

SOCKS vs HTTP Proxy

Proxy advantages

Proxy disadvantages

What is a VPN?

VPN advantages

VPN disadvantages

What is Tor?

Tor advantages

Tor disadvantages

Tor and VPN together

Tor through VPN

Tor through VPN advantages

Tor through VPN disadvantages

VPN through Tor

VPN through Tor advantages

VPN through Tor disadvantages

Conclusion

affcat

Notes

Help Text

Example Usage

Links

Lan Turtle Review

The 10 Worst Spammers in the World

Source:

Shortest Spam Run Ever – Domaincop.org Domain Abuse Notice Spam

Whois information

Inspect URL and it’s content

Sample email

Conclusion

Real Time Scanners:

Historical Reputation data:

How to Fix Detect and Mount CD-ROM [Kali Linux 2016.2]

How To Setup Honeypot in Kali Linux

Download Pentbox:

Uncompress pentbox files

Run pentbox ruby script

Setup a honeypot

Panama Papers data leak exposes Worlds largest global corruption

Heads of state and government

Current

Former

Sources:

A very detailed guide on how to setup VPN on Kali Linux - Kali Sana 2.x

PIA Regional Gateways

Conclusion

What’s New in Kali Linux 2.0? Kali Sana

How to Install Photoshop in Kali Linux 2.x (Kali Sana)

How To Install and Configure Veil Framework on Kali Linux

Create Kali Bootable Installer USB Drive in Windows 10 (Kali Bootable Non-Persistence USB Drive)

Advantages of using Kali Live USB Drive – Non-Persistence

Disadvantages of using Kali Live USB Drive – Non-Persistence

Requirements

Check download speed from Linux Terminal

How to Make a Bootable Kali Linux USB Flash Drive/Pendrive

Kali Linux 2.0 - How to Change or Reset ROOT Password in Kali Sana or pretty much any Linux distributions

How to Install Kali Linux 2.x on VirutalBox - Kali Sana

Upgrade Kali Linux 1.x To Kali Linux 2.x Without Errors - Kali Sana

Dual Boot Kali Linux 2.x with Windows 10/8/7/XP – Kali Sana

How to Fix Armitage in Kali Linux 2.x (Kali Sana)

How to Install Kali Linux 2.x on VMware – Kali Sana

Complete Guide On How To Install Kali Linux In VMware Player