It can be use for convert someone's web page into different page without redirecting.
Some hackers used this to deface my friend's web site.
Let's say you have a web page as follow.
<html>
<head></head>
<body>
<h1>Test</h1>
</body></html>
Tuesday, November 17, 2020
Friday, June 14, 2019
Open-source intelligence (OSINT)
Note : Copied from Github (jivoi/awesome-osint) for future reference if the original source not available.
↑ General Search
The main search engines used by users.- Advangle
- Aol
- Ask
- Bing
- Better Search
- Dothop
- DuckDuckGo - an Internet search engine that emphasizes protecting searchers' privacy.
- Factbites
- Gigablast
- Goodsearch
- Google Search - Most popular search engine.
- Instya
- Impersonal.me
- iSEEK Education
- ixquick
- Lycos
- Parseek (Iran)
- Peeplo
- Search.com
- SurfCanyon
- Teoma
- Wolfram Alpha
- Yahoo! Search -
Thursday, June 13, 2019
Parrot and Kali linux tools
Anon surf
""""""""""
Anon surf setting up the environment for anonymous internet browsing and it all so setup tor network to user. it will stop all the vulnerable apps and services and start tor connection to the machine. Then entire connection will setup using annonsurf
anonsurf start
anonsurf stop
anonsurf myip - check ip
zulucrypt, sirikali
"""""""""""""""""""
both are veracrypt like tools.
Remote desktop viewer
"""""""""""""""""""""
get rdp ssh etc connections to linux and windows machines
qBittorrent
"""""""""""
Bit torrent tool
""""""""""
Anon surf setting up the environment for anonymous internet browsing and it all so setup tor network to user. it will stop all the vulnerable apps and services and start tor connection to the machine. Then entire connection will setup using annonsurf
anonsurf start
anonsurf stop
anonsurf myip - check ip
zulucrypt, sirikali
"""""""""""""""""""
both are veracrypt like tools.
Remote desktop viewer
"""""""""""""""""""""
get rdp ssh etc connections to linux and windows machines
qBittorrent
"""""""""""
Bit torrent tool
Saturday, March 30, 2019
What is shellcode
Simply shellcode is opcode in machine language.
This can be extract from low level languages such as assembly, c
Lets say there is a c file which do something called dosomething.c
gcc -o dosomething.o dosomething.c
When execute shellcode.o it will do something. We need to get machine code of this process.
This can be extract from low level languages such as assembly, c
Lets say there is a c file which do something called dosomething.c
gcc -o dosomething.o dosomething.c
When execute shellcode.o it will do something. We need to get machine code of this process.
C:\Users\Ali\Desktop>objdump -D shellcode.o
Now we can see machine code and asm instructions. Using this we can build the shellcode.
00000000 <.text>: 0: 31 c0 xor %eax,%eax 2: 50 push %eax 3: b8 41 41 41 64 mov $0x64414141,%eax 8: c1 e8 08 shr $0x8,%eax b: c1 e8 08 shr $0x8,%eax e: c1 e8 08 shr $0x8,%eax
Thursday, February 7, 2019
Password extractor from local machine
LaZagne project is python based tool to extract passwords from local machine. Good password extractor. For remote use psexec can be utilized.
Github project link - https://github.com/AlessandroZ/LaZagne
Github project link - https://github.com/AlessandroZ/LaZagne
Sunday, November 4, 2018
What your browser knows about you?
When considering privacy and security of our data it is important to know what details grab by our browsers in day to day life and how they collect those data and how we can mitigate or prevent from being revealed ourselves.
To get know what details a website can grab through your browser visit following sites.
https://panopticlick.eff.org ; This site reveals your screen size and colour depth, browser plugins, time zone, keyboard language type, system fonts, platform and other things.
https://clickclickclick.click ; It is super for getting weird. This site shows your mouse location, whether it is moved or not. Time you spent in the site.
http://webkay.robinlinus.com/ ; This site shows your location, operating system, browser version, plugins, cpu cores, gpu details, battery percentage, local and public ip, isp location, social medias logged in, gyroscope if it is a phone or tablet without any button click. there are some other tests also. You can test your network by clicking on a button, demo of click jacking scenario and auto fill phishing demo. These tests indicates how any site can extract details from your browser and make those for malicious things. Important thing is using it's page source you can learn to write javascripts which can extract details (you can use its JS functions).
To get know what details a website can grab through your browser visit following sites.
https://panopticlick.eff.org ; This site reveals your screen size and colour depth, browser plugins, time zone, keyboard language type, system fonts, platform and other things.
https://clickclickclick.click ; It is super for getting weird. This site shows your mouse location, whether it is moved or not. Time you spent in the site.
http://webkay.robinlinus.com/ ; This site shows your location, operating system, browser version, plugins, cpu cores, gpu details, battery percentage, local and public ip, isp location, social medias logged in, gyroscope if it is a phone or tablet without any button click. there are some other tests also. You can test your network by clicking on a button, demo of click jacking scenario and auto fill phishing demo. These tests indicates how any site can extract details from your browser and make those for malicious things. Important thing is using it's page source you can learn to write javascripts which can extract details (you can use its JS functions).
Saturday, October 13, 2018
Miss concepts of TOR and How to use TOR
The Onion Router or the well known TOR is the most popular platform for being anonymous by freed from clearnet. For years it had well recognition for anonymity, but lately there was some bad news regarding the security of the TOR network, revealing TOR users and some of security breaches. Some of these has been exposed, but some of them are in a blackhole inside this network. As a result there is a trend to use a VPN with TOR browser. There are lots of guides to configure TOR with a VPN. Some of these solutions has raised because of the miss concepts. Therefore before getting into correct or wrong of these news and solutions, it must have to take a look into what happens inside TOR.
Friday, July 20, 2018
VPN setup for kali
VPN is a essential part in using kali. Here is a simple setup of vpn for kali.
- Go to https://www.vpnbook.com/freevpn and download ovpn config files to kali.
- Place them in an accessible place.
- Install ovpn
Tuesday, February 20, 2018
Link shortner for bypass phishing detection bitly
Recently there was a huge video link scam based on facebook users for hack their fb accounts. It is a phishing attack which is prompting for user name and password for fb login.
Message actually comes as a video which claims that victim was there. As its comes from user's friend and he/she was in the video most of victims open the link with the panic situation. Then it will goes to fb login page which user needs to put there user name and password. Finally the hacker will take the control of victim's fb account. Then hacker will send the same message to victim's friends also.
Important thing in here it has used bitly for short and mask phishing site's url.as it is shorten fb phishing site detection could be bypassed by the hacker. Therefore bitly.com is a good site for short your phishing site's link and bypass the phishing site detection
Message actually comes as a video which claims that victim was there. As its comes from user's friend and he/she was in the video most of victims open the link with the panic situation. Then it will goes to fb login page which user needs to put there user name and password. Finally the hacker will take the control of victim's fb account. Then hacker will send the same message to victim's friends also.
Important thing in here it has used bitly for short and mask phishing site's url.as it is shorten fb phishing site detection could be bypassed by the hacker. Therefore bitly.com is a good site for short your phishing site's link and bypass the phishing site detection
Friday, February 16, 2018
Wiper malware steps
- Steal credentials from browser and system.
- Spread to other systems using psexec and WMI tools.
- First delete all shadow copies of files and windows backup catalogs.
- Turn off recovery mode.
- Delete system logs.
This will cover tracks and making difficult to recover
Sunday, November 5, 2017
Facebook search people by number
Facebook has a good database of phone numbers of people who has been signed up. Any person who is going to create an FB account should have a phone number. Facebook allows to search people through this number. Normally if you typed phone number on the find friend bar on facebook it normally search for the person with that number. But it wont works sometimes. Following is a trick for getting around this.
http://m.facebook.com/search/?query=123456789
Here is the magic link for check a person from his number. In this link instead of 123456789 put the phone number with area code.
http://m.facebook.com/search/?query=123456789
Here is the magic link for check a person from his number. In this link instead of 123456789 put the phone number with area code.
Thursday, October 5, 2017
9 books for ethical hackers
The Code Book: The Science of Secrecy from Ancient Egypt to Quantum Cryptography [Kindle Edition]
Ghost in the Wires: My Adventures as the World’s Most Wanted Hacker [Kindle Edition]
Rtfm: Red Team Field Manual
CISSP All-in-One Exam Guide, 6th Edition
Wednesday, August 2, 2017
Softether VPN
VPN or Virtual Private Networks are leading technology in networking for purposes from connecting to office PC in home to connecting two or more WANs for secure communication. Companies and organizations use VPNs for secure their communication while some computer users use VPNs for easy to connect to a remote networks. Hackers use VPNs for get annonymous. So VPNs are used for different purposes in different ways.
Tuesday, June 20, 2017
Windows cmd tools and PS tools
There are lots of hacks we can do using Microsoft windows command line tools. If you are an administrator of a network these tools are very helpfull. There's a ineteresting site to learn most of these tools with examples.
https://ss64.com/nt/
This site provides lots of windows nt command line tools and show how to use them with examples.
PS tools is a very important tool pack from microsoft. Here is an abstract of PSexec tool in PS tools.
https://ss64.com/nt/
This site provides lots of windows nt command line tools and show how to use them with examples.
PS tools is a very important tool pack from microsoft. Here is an abstract of PSexec tool in PS tools.
Monday, June 5, 2017
Web Proxy for youtube
https://www.proxysite.com
This web proxy is better for watch youtube videos smoothly if your administrator has blocked youtube and other social media sites.
This web proxy is better for watch youtube videos smoothly if your administrator has blocked youtube and other social media sites.
Thursday, June 1, 2017
How apt get get in to work behind a proxy server
apt-get is the command in debian based linux systems for package installation, update, upgrade and number of software package related function. But if you are behind a proxy server it will be tough issue to get update your linux system (or install relavant packages). For this you have to edit a config file in /etc/apt/apt.conf
sudo nano /etc/apt/apt.conf
and add these to this file.
Acquire::socks::proxy "socks://<username>:<password>@<proxy>:<port>/";
Acquire::http::proxy "http://<username>:<password>@<proxy>:<port>/";
Acquire::ftp::proxy "ftp://<username>:<password>@<proxy>:<port>/";
Acquire::https::proxy "https://<username>:<password>@<proxy>:<port>/";
Save the file and run apt-get again
sudo nano /etc/apt/apt.conf
and add these to this file.
Acquire::socks::proxy "socks://<username>:<password>@<proxy>:<port>/";
Acquire::http::proxy "http://<username>:<password>@<proxy>:<port>/";
Acquire::ftp::proxy "ftp://<username>:<password>@<proxy>:<port>/";
Acquire::https::proxy "https://<username>:<password>@<proxy>:<port>/";
Save the file and run apt-get again
Friday, April 7, 2017
Infected with RANSOMEWARE ?
Ransomwares are bad headache for these days in all industries such as hospitals, hotels, schools and any of organization because of its destructive nature. It is a very big threat for government organizations also. Most ransomware attackers are targeting organizations, companies or places which runs critical operation that cannot be have a delay with their service because then they can achieve their goal (make their ransom) easier.
Wednesday, October 19, 2016
Crack ZIP file's password using KALI
Using fcrackzip tool we can crack zip files password in kali.
Use the following command to crack zip file
fcrackzip -b -c 'aA1!' -l 1-10 -u file_name.zip
fcrackzip is the tool
b - use Brute forcing
c - character set (a - lower case, A-upper case, 1 - Numbers, ! - symbols.)
l - length of the password for bruteforce
Use the following command to crack zip file
fcrackzip -b -c 'aA1!' -l 1-10 -u file_name.zip
fcrackzip is the tool
b - use Brute forcing
c - character set (a - lower case, A-upper case, 1 - Numbers, ! - symbols.)
l - length of the password for bruteforce
Thursday, August 25, 2016
Install and configure sftp server on Ubuntu Server
Install VSFTPD
sudo apt-get install vsftpd
Configuring VSFTPD.
open /etc/vftpd.conf file
Uncomment the following lines ;
write_enable=YES
local_umask=022
chroot_local_user=YES
Add the following line at the end of the file.
allow_writeable_chroot=YES
Now restart vsftpd.
Create a user for ftp and prevent use bash shell
sudo useradd -m john -s /usr/sbin/nologin
sudo passwd john
Now open /etc/shells file and add the following to the end of the file.
/usr/sbin/nologin
Install Open-SSH
sudo apt-get install openssh-server
Configure ssh to use in ftp.
For secure reason we should add a specific group for sshftp sessions. And add authorized users to that account.
sudo groupadd ftpgroup
sudo groupadd ftpuser
Configure ssh config file.
Open /etc/ssh/sshd_config file,
Find the Subsystem sftp .... line and edit it as follows
Subsystem sftp internal-sftp
And add the following to the end
Match group ftpgroup
For comprehensive understanding about sshd_config file type the following in terminal.
man sshd_conifg
sudo apt-get install vsftpd
Configuring VSFTPD.
open /etc/vftpd.conf file
Uncomment the following lines ;
write_enable=YES
local_umask=022
chroot_local_user=YES
Add the following line at the end of the file.
allow_writeable_chroot=YES
Now restart vsftpd.
Create a user for ftp and prevent use bash shell
sudo useradd -m john -s /usr/sbin/nologin
sudo passwd john
Now open /etc/shells file and add the following to the end of the file.
/usr/sbin/nologin
Install Open-SSH
sudo apt-get install openssh-server
Configure ssh to use in ftp.
For secure reason we should add a specific group for sshftp sessions. And add authorized users to that account.
sudo groupadd ftpgroup
sudo groupadd ftpuser
Configure ssh config file.
Open /etc/ssh/sshd_config file,
Find the Subsystem sftp .... line and edit it as follows
Subsystem sftp internal-sftp
And add the following to the end
Match group ftpgroup
For comprehensive understanding about sshd_config file type the following in terminal.
man sshd_conifg
Thursday, July 28, 2016
Must have apps for Hackers' mobile phones
Recently there is a post on flashpoint-intel.com about the Jihad's technologies used for their anonymity and other purposes in Mobiles. Here I will classify that article more details can be find at the above link.
When we go through that article we can see Jihads has very focused on mobile security with android. We will go by each category that they have used.
Secure Browsers.
Our mostly faithful browser is TOR. Jihads also using TOR browser for their internet surf but they are using additional layer of security also instead of the layer built-in TOR. Because now NSA has intervene with TOR.
Instead of TOR they are using Opera Browser also. The reason for this selection is because the new Opera provide free VPN service along with the browser. So they can mask their IP while browsing.
When we go through that article we can see Jihads has very focused on mobile security with android. We will go by each category that they have used.
Secure Browsers.
Our mostly faithful browser is TOR. Jihads also using TOR browser for their internet surf but they are using additional layer of security also instead of the layer built-in TOR. Because now NSA has intervene with TOR.
Instead of TOR they are using Opera Browser also. The reason for this selection is because the new Opera provide free VPN service along with the browser. So they can mask their IP while browsing.
Subscribe to:
Posts (Atom)