Softether VPN

VPN or Virtual Private Networks are leading technology in networking for purposes from connecting to office PC in home to connecting two or more WANs for secure communication. Companies and organizations use VPNs for secure their communication while some computer users use VPNs for easy to connect to a remote networks. Hackers use VPNs for get annonymous. So VPNs are used for different purposes in different ways.

Windows cmd tools and PS tools

There are lots of hacks we can do using Microsoft windows command line tools. If you are an administrator of a network these tools are very helpfull. There's a ineteresting site to learn most of these tools with examples.

https://ss64.com/nt/

This site provides lots of windows nt command line tools and show how to use them with examples.
PS tools is a very important tool pack from microsoft. Here is an abstract of PSexec tool in PS tools.

Web Proxy for youtube

https://www.proxysite.com

This web proxy is better for watch youtube videos smoothly if your administrator has blocked youtube and other social media sites.

How apt get get in to work behind a proxy server

apt-get is the command in debian based linux systems for package installation, update, upgrade and number of software package related function. But if you are behind a proxy server it will be tough issue to get update your linux system (or install relavant packages). For this you have to edit a config file in /etc/apt/apt.conf

sudo nano /etc/apt/apt.conf

and add these to this file.

Acquire::socks::proxy "socks://<username>:<password>@<proxy>:<port>/";
Acquire::http::proxy "http://<username>:<password>@<proxy>:<port>/";
Acquire::ftp::proxy "ftp://<username>:<password>@<proxy>:<port>/";
Acquire::https::proxy "https://<username>:<password>@<proxy>:<port>/";


Save the file and run apt-get again

Infected with RANSOMEWARE ?

Ransomwares are bad headache for these days in all industries such as hospitals, hotels, schools and any of organization because of its destructive nature. It is a very big threat for government organizations also. Most ransomware attackers are targeting organizations, companies or places which runs critical operation that cannot be have a delay with their service because then they can achieve their goal (make their ransom) easier.

Crack ZIP file's password using KALI

Using fcrackzip tool we can crack zip files password in kali.
Use the following command to crack zip file

 fcrackzip -b -c 'aA1!' -l 1-10 -u  file_name.zip


fcrackzip is the tool

b - use Brute forcing
c - character set (a - lower case, A-upper case, 1 - Numbers, ! - symbols.)
l - length of the password for bruteforce

Install and configure sftp server on Ubuntu Server

Install VSFTPD 

sudo apt-get install vsftpd

Configuring VSFTPD.

open /etc/vftpd.conf file

Uncomment the following lines ;

write_enable=YES
local_umask=022 
chroot_local_user=YES  

Add the following line at the end of the file.

allow_writeable_chroot=YES


Now restart vsftpd.
Create a user for ftp and prevent use bash shell

sudo useradd -m john -s /usr/sbin/nologin
 sudo passwd john

Now open /etc/shells  file and add the following to the end of the file.

/usr/sbin/nologin

You can now connect using ftp to the server. But this is not protected. Any one can intercept with your traffic. You should use SSH FTP to secure the connection.

Install Open-SSH





sudo apt-get install openssh-server

Configure ssh to use in ftp.

For secure reason we should add a specific group for sshftp sessions. And add authorized users to that account.

sudo groupadd ftpgroup

sudo groupadd ftpuser


Configure ssh config file. 



Open /etc/ssh/sshd_config file,

Find the  Subsystem sftp .... line and edit it as follows
Subsystem sftp internal-sftp

And add the following to the end
Match group ftpgroup

For comprehensive understanding about sshd_config file type the following in terminal.
man sshd_conifg