Way To Hackintosh

Hacking Facebook Account with just a text message

Admin Jixxi 4 facebook hacking, Hacking tools, How to hack Facebook (All Methods)

<div style="text-align: justify;">
Can you ever imagine that a single text message is enough to hack any Facebook 
account without user interaction or without using any other malicious stuff like 
Trojans, phishing, keylogger 
etc. ?</div>
<div style="text-align: justify;">
 </div>
<div style="text-align: justify;">
Today we are going to explain you that how a UK 
based Security Researcher, "fin1te" is able to hack any Facebook 
account within a minute by doing one SMS.</div>
<div style="text-align: justify;">
 </div>
<div style="text-align: justify;">
Because 90% of us are Facebook user too, so we 
know that there is an option of linking your mobile number with your account, 
which allows you to receive Facebook account updates via SMS directly to your 
mobile and also you can login into your account using that linked number rather 
than your email address or username.</div>
<div style="text-align: justify;">
According to hacker, the loophole was in phone number linking 
process, or in technical terms, at 
file /ajax/settings/mobile/confirm_phone.php</div>
<div style="text-align: justify;">
 </div>
<div style="text-align: justify;">
This particular webpage works in background 
when user submit his phone number and verification code, sent by Facebook to 
mobile. That submission form having two main parameters, one for 
verification code, and second is profile_id, which 
is the account to link the number to.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOYKUYaxuZKp9_Bm5j-kM_IgpurbvjY3FYFlQGgxONbCtLxtesayjNy3KcVdtlXmXqrv3ahdV-x_zG0jbf5nmcpnSOBhUkDLkdz6tcJD9TY0JzwNeAf9Dz0ttj6roI1PnKX6HqnZQZIfph/s1350/Hacking+Facebook+Account+with+just+a+text+message.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="146" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhOYKUYaxuZKp9_Bm5j-kM_IgpurbvjY3FYFlQGgxONbCtLxtesayjNy3KcVdtlXmXqrv3ahdV-x_zG0jbf5nmcpnSOBhUkDLkdz6tcJD9TY0JzwNeAf9Dz0ttj6roI1PnKX6HqnZQZIfph/s640/Hacking+Facebook+Account+with+just+a+text+message.png" width="640" /></a></div>
<div style="text-align: justify;">
<div style="text-align: justify;">
As attacker, follow these steps to execute 
hack: </div>
<div style="text-align: justify;">
<ol>
<li>Change value of profile_id to the 
Victim's profile_id value by tampering the parameters.</li>
<li>Send the letter F to 32665, which is Facebook’s SMS shortcode in the 
UK. You will receive an 8 character verification code back</li>
</ol>
 </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEfT1aTuLM_FId6amIYMuDnV08VUmc9PrnktpLpqdQY4TFd4cf32CunrYbDTBWzq5aG4g7tlJGyLfHzdhdL0o8vD4SXmjPp3z5_Km6AXrzg0r_WoQKbGpZMx5loV8vQK5xfNzXP3b8tASS/s1600/facebook-sms-3-1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiEfT1aTuLM_FId6amIYMuDnV08VUmc9PrnktpLpqdQY4TFd4cf32CunrYbDTBWzq5aG4g7tlJGyLfHzdhdL0o8vD4SXmjPp3z5_Km6AXrzg0r_WoQKbGpZMx5loV8vQK5xfNzXP3b8tASS/s1600/facebook-sms-3-1.png" /></a></div>
<div style="text-align: justify;">
 
</div>
<div style="text-align: justify;">
</div>
<div style="text-align: justify;">
3.Enter that code in the box or as confirmation_code parameter 
value and Submit the form.</div>
<div style="text-align: justify;">
 </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggQzkWXJ6i7BfXymVcwArOX_aPXBQDatXu601m-QZNXU-lkbmmn8NUvtFjVzQHRB3ap2Vs__dc7GMJcRunVFIaCH5la-q0izWRA6KCr5sAXvilnNJfFGeJ2ddYihBvUgb49bEYICCrLtq7/s1136/facebook-sms-4.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEggQzkWXJ6i7BfXymVcwArOX_aPXBQDatXu601m-QZNXU-lkbmmn8NUvtFjVzQHRB3ap2Vs__dc7GMJcRunVFIaCH5la-q0izWRA6KCr5sAXvilnNJfFGeJ2ddYihBvUgb49bEYICCrLtq7/s1600/facebook-sms-4.jpg" /></a></div>
<div style="text-align: justify;">
 
<div id="aim23465796534476246168">
<div dir="ltr" style="text-align: left;">
<div style="text-align: justify;">
<div>
<div class="separator" style="clear: both; text-align: justify;">
Facebook will 
accept that confirmation code and attacker's mobile number will be linked to 
victim's Facebook profile.</div>
<div class="separator" style="clear: both; text-align: justify;">
 </div>
</div>
<div>
In next step hacker just need to go to Forgot password option and initiate 
the password reset request against of victim's account.</div>
<div>
 </div>
<div>
Attacker now can get password recovery code to his own mobile number which 
is linked to victim's account using above steps. Enter the code and Reset the 
password!</div>
<div>
 </div>
<div>
Facebook no longer accepting the profile_id parameter from the user end 
after receiving the bug report from the hacker.</div>
<div>
 </div>
<div>
In return, Facebook paying $20,000 to fin1te as <a href="http://www.google.com/cse?cx=017931741230951650006%3Apksj3nwgyw4&q=Bug+Bounty&ie=ISO-8859-1&sa=Search&siteurl=thehackernews.com%2F&ref=&ss=31772j1005907376j5#gsc.tab=0&gsc.q=Bug%20Bounty&gsc.page=1" rel="nofollow">Bug Bounty</a>.</div>
</div>
</div>
</div>
</div>
</div>
</div>

Hacking Facebook Account with just a text message

Can you ever imagine that a single text message is enough to hack any Facebook account without user interaction or without using any oth...

Windows 8.1 ISO File available for Download

Admin Jixxi OS, Windows8.1

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="text-align: center;">
 </div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv_9KhXbSTBMRkjjsM-oWhPhsUgwuQ0SS_13yDJEuAjVYBjyZQspaxHOmWov3AtRiuleam2Fi-YD97nuIAaCFz5zIKfQs6FVPaZKuug9_UH48ilAFNStkUoKnvlw3EI3jENUsrBGHFPrFU/s640/windows-8.1.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="352" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv_9KhXbSTBMRkjjsM-oWhPhsUgwuQ0SS_13yDJEuAjVYBjyZQspaxHOmWov3AtRiuleam2Fi-YD97nuIAaCFz5zIKfQs6FVPaZKuug9_UH48ilAFNStkUoKnvlw3EI3jENUsrBGHFPrFU/s640/windows-8.1.jpg" width="640" /></a></div>
 
 
Microsoft have launched
 its new version of Windows i.e. Windows 8.1 Preview successfully. 
Windows 8 has not been so successful as compare to Windows 7, so lets 
see how users will rate to Windows 8.1 Preview. 
Yesterday, As I have wrote that users who are having Windows 8 can 
upgrade to Windows 8.1 Preview from the Windows store and that also for 
free, just because the ISO file were not available for download yet. 
But now finally Windows 8.1 Preview ISO file have been available for 
download from the Microsoft official site. As said Windows 8.1 Preview 
will be available in multi-language hence there it is. Here I am giving 
the Download link of English version only so for other please <a href="http://windows.microsoft.com/en-us/windows-8/preview-download" target="_blank">visit here</a>. << 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZ4TfcUHN56WU419WXX7dR0cBPJtxggDRmpxaoJ6GKef31oGe4wO6ol4SNPu1VCLV61oksFpFzDG-yg5-U1vx915hpgVrYp3oj0DsYrb2juT5694RZHFU3vGGdzenOKFKDnBwU4mMMIFtq/s300/Windows-8-logo-300x300.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhZ4TfcUHN56WU419WXX7dR0cBPJtxggDRmpxaoJ6GKef31oGe4wO6ol4SNPu1VCLV61oksFpFzDG-yg5-U1vx915hpgVrYp3oj0DsYrb2juT5694RZHFU3vGGdzenOKFKDnBwU4mMMIFtq/s300/Windows-8-logo-300x300.jpg" /></a></div>
<div style="text-align: center;">
 </div>
ISO files 
Product Key: NTTX3-RV7VB-T7X7F-WQYYY-9Y92F 
Important: Windows 8.1 Preview isn't currently supported on some tablets and PCs with newer 32-bit Atom processors. 
LanguageLink to downloadSHA-1 hash value 
<div style="text-align: center;">
</div>
 
English 64-bit (x64)  <a href="http://go.microsoft.com/fwlink/?LinkId=302161" target="_blank">Download</a> (3.3 GB) 0xD76AD96773615E8C504F63564AF749469CFCCD57 
 
English 32-bit (x86) <a href="http://go.microsoft.com/fwlink/?LinkId=302162" target="_blank">Download</a> (2.5 GB) 0x8BED436F0959E7120A44BF7C29FF0AA962BDEFC9 </div>

Windows 8.1 ISO File available for Download

Microsoft have launched its new version of Windows i.e. Windows 8.1 Preview successfully. Windows 8 has not been so successful as c...

Facebook Introduced Hash tag Features

Admin Jixxi 0 facebook, news

<div dir="ltr" style="text-align: left;" trbidi="on">
 
 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHT5SHzpsRDLJhwORd2Ue_LGfaZh4L54pAEpM0KJY-y6bQ6uFfqDI_nK-5ep3ZexpDbI_d4A9fzInBfqxPWJeuDfIS8W9NoN2FTtq7Ip8cIF4IsI2qnFnSVrglOTba1XeDfT7gqysCCMz2/s1600/Facebook+Introduced+Hash+tag+Features+%28way2h%29.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgHT5SHzpsRDLJhwORd2Ue_LGfaZh4L54pAEpM0KJY-y6bQ6uFfqDI_nK-5ep3ZexpDbI_d4A9fzInBfqxPWJeuDfIS8W9NoN2FTtq7Ip8cIF4IsI2qnFnSVrglOTba1XeDfT7gqysCCMz2/s1600/Facebook+Introduced+Hash+tag+Features+%28way2h%29.jpg" /></a></div>
 
Hope every one is aware of hash tag (#), that is popularly used to tag the people or page or other item on twitter. 
As we all know that Facebook regularly introduce new things for its 
users, and there was news also going on that Facebook will also roll 
out the hash tag function, so here is the day came. 
Facebook finally adopted the Hashtag function on its site. Hashtags will be both clickable and searchable on Facebook. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTna4C-KxNTTY0KDHoqbyvBqPYqYHOi8kIHqK291V6YfPF62GAbKEsSVmlxjrW9WysguA07gGUtTHWO4lpJz_KAav7lQc3kSBuJHkDBIQ4qjSh7u2pnMR3CZXfT8-rTTScmBIOJ8i7Gv37/s1600/Facebook-Launches-Searchable-Hashtags+%28way2h%29.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTna4C-KxNTTY0KDHoqbyvBqPYqYHOi8kIHqK291V6YfPF62GAbKEsSVmlxjrW9WysguA07gGUtTHWO4lpJz_KAav7lQc3kSBuJHkDBIQ4qjSh7u2pnMR3CZXfT8-rTTScmBIOJ8i7Gv37/s1600/Facebook-Launches-Searchable-Hashtags+%28way2h%29.png" /></a></div>
 
This news was officially published on the Facebook official <a href="http://newsroom.fb.com/News/633/Public-Conversations-on-Facebook">blog post</a>.
 This will help you to tag other context, page or others post indicating
 that it is the part of the large discussion. It’s also possible to 
search for a specific hashtag from the search bar, to click on hashtags 
that originate on other services 
The social network will still let you control the audience of the posts, including those with hashtags. 
 </div>

Facebook Introduced Hash tag Features

Hope every one is aware of hash tag (#), that is popularly used to tag the people or page or other item on twitter. As we all know th...

FREE AIRTEL INTERNET

minix 1 Airtel hack (only for india)

<div dir="ltr" style="text-align: left;" trbidi="on">
**FREE AIRTEL INTERNET** ApN : internet Proxy IP : 80.239.243.210 port:80 aitel zambia#ceo ***Opera:Androi 
<div class="msg">
d and JAva*** Front Query : 203.115.112.5/ boostspeed.php/00000a/http/ Real Host : 203.115.112.5:80 Here is the list of proxy server address. use it and enjoy. 94.125.27.20:8080 93.91.200.146:8080 81.18.116.66:8080 79.125.28.242:3128 72.52.96.9:80 72.52.96.11:80 69.13.229.214:3128 68.96.75.146:9090 64.87.46.57:3128 64.23.156.82:8080 62.142.57.72:8080 61.79.87.93:3128 61.6.163.30:8080 61.244.235.34:3128 61.156.25.222:8080 58.215.78.157:808 58.17.71.121:8080 41.190.16.17:8080 222.77.69.210:3128 217.197.121.188:8080 216.27.81.163:8080 216.185.4.200:8080 213.192.246.133:80 213.192.246.133:80 213.192.246.130:80 213.192.246.130:80 213.151.33.58:3128 213.151.033.058:3128 213.109.130.80:54321 212.158.160.96:80 212.118.224.151:80 212.118.224.151:80 212.118.224.150:80 212.118.224.150:80 212.118.224.148:80 211.138.124.232:80 211.138.124.232:80 211.138.124.217:80 211.138.124.213:80 211.138.124.212:80 211.138.124.209:80 211.138.124.200:80 211.138.124.199:80 211.138.124.199:80 211.138.124.180:80 211.138.124.179:80 211.138.124.178:80 211.138.124.174:80 211.138.124.173:80 211.138.124.170:80 211.138.124.169:80 211.138.124.167:80 210.212.55.194:3128 210.187.51.43:8080 210.125.51.41:80 210.107.100.251:8080 209.203.19.2:8080 208.92.249.118:80 208.115.60.146:8080 208.100.40.46:80 208.100.40.46:80 208.100.40.43:80 208.100.40.42:80 207.135.129.5:8080 207.135.129.5:8080 206.196.111.110:80 205.213.195.70:8080 203.139.145.2:3128 202.201.34.101:3128 202.169.226.208:8080 202.162.192.232:8080 202.149.25.43:8080 202.143.146.205:8080 202.115.12.162:808 201.76.211.246:8080 201.20.18.165:3128 200.57.88.164:80 200.36.104.230:8080 200.36.104.230:8080 200.101.82.4:8088 199.3.183.242:8088 196.30.6.186:80 196.29.161.85:8080 196.29.161.84:8080 196.29.161.84:80 196.29.161.82:80 196.29.161.81:80 190.202.124.18:3128 190.141.4.5:8080 190.128.169.122:3128 190.120.10.71:3128 189.72.251.166:8080 189.61.196.10:3128 189.45.245.126:3128 189.17.118.10:3128 189.114.58.242:3128 189.11.211.237:3128 188.59.252.190:80 188.165.205.62:80 187.87.203.209:3128 187.45.232.176:8080 187.45.232.176:8000 187.45.213.100:3128 187.115.162.6:3128 187.115.162.6:3128 184.73.50.88:8118 184.73.131.27:80 184.73.120.223:80 184.73.114.189:8080 184.73.114.189:3128 184.72.9.242:8080 184.72.9.242:8000 184.72.9.242:80 184.72.9.242:443 184.72.9.242:3128 184.106.242.128:80 175.106.17.229:8080 174.143.202.39:80 174.143.168.38:8081 174.142.40.86:3128 174.142.40.84:3128 173.203.78.165:8080 173.203.78.165:3128 168.216.38.209:8080 164.78.252.24:80 164.78.252.24:80 164.078.252.110:80 164.078.252.025:80 125.95.189.82:8080 125.21.227.206:80 122.228.202.236:3128 122.184.133.210:8080 122.183.136.59:80 121.30.255.38:8080 120.50.57.234:3128 119.167.219.78:80 119.167.219.078:80 119.110.97.28:3128 119.110.97.28:3128 118.98.212.242:3128 118.98.160.99:80 118.98.160.99:3128 118.97.224.2:8080 118.97.224.2:8080 118.97.224.2:80 118.97.224.2:3128 118.97.169.173:8080 118.69.127.34:3128 117.40.29.89:80 111.1.32.93:80 111.1.32.92:80 111.1.32.91:80 111.1.32.8:80 111.1.32.7:80 111.1.32.72:80 111.1.32.71:80 111.1.32.69:80 111.1.32.61:80 111.1.32.59:80 111.1.32.4:80 111.1.32.47:80 111.1.32.45:80 111.1.32.44:80 111.1.32.19:80 111.1.32.15:80 110.164.66.98:3128 087.224.133.108:8080 082.206.129.160:3128 061.079.087.093:3128 058.056.108.114:80</div>
</div>

FREE AIRTEL INTERNET

**FREE AIRTEL INTERNET** ApN : internet Proxy IP : 80.239.243.210 port:80 aitel zambia#ceo ***Opera:Androi d and JAva*** Front Q...

Truecaller hack How to Unlist Your Number from TrueCaller

Admin Jixxi 0 Android, Tricks, Truecaller

<div dir="ltr" style="text-align: left;" trbidi="on">
<div style="background-color: white; color: #333333; font-family: 'PT Serif', Georgia, serif; font-size: 16px; line-height: 24px; margin-bottom: 1em; margin-top: 1em;">
TrueCaller is a mobile app and online service that serves as a very 
large phonebook for reverse phone number lookups. It’s helping you let 
know the names of unknown callers.</div>
<div style="background-color: white; color: #333333; font-family: 'PT Serif', Georgia, serif; font-size: 16px; line-height: 24px; margin-bottom: 1em; margin-top: 1em;">
How does it work? 
TrueCaller claims to source the 
caller information present in their database partly from public 
directories, and partly from “crowdsourced” data.</div>
<div style="background-color: white; color: #333333; font-family: 'PT Serif', Georgia, serif; font-size: 16px; line-height: 24px; margin-bottom: 1em; margin-top: 1em;">
It looks like they scan and upload the entire phonebook to their 
servers. So if you install their app, it will make a note of all your 
contacts and upload them to the server.</div>
<div style="background-color: white; color: #333333; font-family: 'PT Serif', Georgia, serif; font-size: 16px; line-height: 24px; margin-bottom: 1em; margin-top: 1em;">
Removing your Number</div>
<div style="background-color: white; color: #333333; font-family: 'PT Serif', Georgia, serif; font-size: 16px; line-height: 24px; margin-bottom: 1em; margin-top: 1em;">
1. Goto <a href="http://www.truecaller.com/unlist/" style="-webkit-tap-highlight-color: rgba(0, 102, 255, 0.498039); color: #183082; position: relative; text-decoration: none;">http://www.truecaller.com/unlist/</a> 
2. Choose your country and enter the phone number in the relevant fields 
3. Type the captcha 
4. Press “Unlist”</div>
<div style="background-color: white; color: #333333; font-family: 'PT Serif', Georgia, serif; font-size: 16px; line-height: 24px; margin-bottom: 1em; margin-top: 1em;">
Then they say the number was unlisted permanently and it takes 24 hours for the changes to happen.</div>
</div>

Truecaller hack How to Unlist Your Number from TrueCaller

TrueCaller is a mobile app and online service that serves as a very large phonebook for reverse phone number lookups. It’s helping you le...

Types of Attacks on Web Servers

Admin Jixxi 0 EXPLANATION, Types of Attacks on Web Servers, Website Hacking Tools Collection

<div dir="ltr" style="text-align: left;" trbidi="on">
<h3 class="post-title entry-title" itemprop="name">
Types of Attacks on Web Servers
</h3>
<div class="post-header">

</div>
Some of the more popular attack methods are described below. 
 
FTP Bounce Attack 
 
FTP (File Transfer Protocol) is used to transfer documents and data 
anonymously from local machine to the server and vice versa. All 
administrators of FTP servers should understand how this attack works. 
The FTP bounce attack is used to slip past application-based firewalls. 
 
In a bounce attack, the hacker uploads a file to the FTP server and 
then requests this file be sent to an internal server. The file can 
contain malicious software or a simple script that occupies the internal
 server and uses up all the memory and CPU resources. 
 
To avoid these attacks, the FTP daemon on the Web servers should be 
updated regularly. The site FTP should me monitored regularly to check 
whether any unknown file is transferred to the Web server. Firewalls 
also help by filtering content and commands. Some firewalls block 
certain file extensions, a technique that can help block the upload of 
malicious software. 
 
Port Scanning Attack 
 
A port scan is when someone is using software tosystematically scan the
 entry points on other person’s machine. There arelegitimate uses for 
this software in managing a network. 
 
Mosthackers enter another’s computer to leave unidentifiable harassing 
messages,capture passwords or change the set-up configuration. The 
defense for this isthrough, consistent network monitoring. There are 
free tools that monitor forport scans and related activity. 
 
Ping Flooding Attack 
 
Pinging involves one computer sending a signal to anothercomputer 
expecting a response back. Responsible use of pinging 
providesinformation on the availability of a particular service. Ping 
Flooding is theextreme of sending thousands or millions of pings per 
second. Ping Flooding cancripple a system or even shut down an entire 
site. 
 
APing Flooding Attack floods the victim’s network or machine with IP 
Pingpackets. At least 18 operating systems are vulnerable to this 
attack, but themajority can be patched. There are also numerous routers 
 and printers that arevulnerable. Patches cannot currently be applied 
throughout a global networkeasily. 
 
Smurf Attack 
 
A Smurf Attack is modification of the "ping attack"and instead of 
sending pings directly to the attacked system, they are sent to 
abroadcast address with the victim’s return address. A range of IP 
addressesfrom the intermediate system will send pings to the victim, 
bombarding thevictim machine or system with hundreds or thousands of 
pings. 
 
One solution is to prevent the Web server from being usedas a 
broadcast. Routers must be configured to deny IP-Directed broadcasts 
fromother networks into the network. Another helpful measure is to 
configure therouter to block IP spoofing from the network to be saved. 
Routers configured assuch will block any packets that donor originate in
 the Network.To be effective this must be done to all routers on the 
network. 
 
SYN Flooding Attack 
 
This attack exploits vulnerability in the TCP/IPcommunications 
protocol. This attack keeps the victim machine responding back toa 
non-existent system. The victim is sent packets and asked to response to
 asystem or machine with an incorrect IP address. As it responds, it is
 floodedwith the requests. The requests wait for a response until the 
packets begin totime out and are dropped. During the waiting period, the
 victim system isconsumed by the request and cannot respond to 
legitimate requests. 
 
When a normal TCP connection starts, a destination hostreceives a SYN 
(synchronize/start) packet from a source host and sends back aSYN ACK 
(synchronize acknowledge) response. The destination host must the 
hearan acknowledgement, or ACK packet, of the SYN ACK before the 
connection isestablished. This is referred as the "TCP three-way 
handshake”. 
 
Decreasingthe time-out waiting period for the three way handshake can 
help to reduce therisk of SYN flooding attacks, as will increasing the 
size of the connectionqueue (the SYN ACK queue). Applying service packs
 to upgrade older operatingsystems is also a good countermeasure. More 
recent operating systems areresistant to these attacks. 
 
IPFragmentation/Overlapping Fragment Attack 
 
To facilitate IP transmission over comparatively congestednetworks. IP 
packets can be reduced in size or broken into smaller packets. Bymaking
 the packets very small, routers and intrusion detection systems 
cannotidentify the packets contents and will let them pass through 
without anyexamination. When a packet is reassembled at the other end, 
it overflows thebuffer. The machine will hang, reboot or may exhibit no 
 effect at all. 
 
Inan Overlapping Fragment Attack, the reassembled packet starts in the 
middle ofanother packet. As the operating system receives these invalid
 packets, itallocates memory to hold them. This eventually uses all the
 memory resources andcauses the machine to reboot or hang. 
 
IPSequence Prediction Attack 
 
Usingthe SYN Flood method, a hacker can establish connection with a 
victim machineand obtain the IP packet sequence number in an IP Sequence
 Prediction Attack.With this number, the hacker can control the victim 
 machine and fool it intobelieving it’s communicating with another 
network machines. The victim machinewill provide requested services. 
Most operating systems now randomize theirsequence numbers to reduce the
 possibility of prediction. 
 
DNSCache Poisoning 
 
DNS provides distributed host information used for mappingdomain names 
and IP addresses. To improve productivity, the DNS server cachesthe 
most recent data for quick retrieval. This cache can be attacked and 
theinformation spoofed to redirect a network connection or block access
 to the Web sites),a devious tactic called DNS cache poisoning. 
 
The best defense against problems such as DNS cachepoisoning is to run 
the latest version of the DNS software for the operatingsystem in use. 
New versions track pending and serialize them to help preventspoofing. 
 
SNMP Attack 
 
Most network devices support SNMP because it is active bydefault. An 
SNMP Attack can result in the network being mapped, and traffic canbe 
monitored and redirected. 
 
The best defense against this attack is upgrading toSNMP3, which 
encrypts passwords and messages. SinceSNMP resides on almost all network
 devices, routers, hubs, switches, Servers andprinters, the task of 
upgrading is huge. Some vendors now offer an SNMP Managementtool that 
includes upgrade distribution for global networks. 
 
UDP Flood Attack 
 
AUDP Flood Attacks links two unsuspecting systems. By Spoofing, the UDP
 floodhooks up one system’s UDP service (which for testing purposes 
generates aseries of characters for each packet it receives) with 
another system’s UDPecho service (which echoes any character it receives
 in an attempt to testnetwork programs). As a result a non-stop flood 
of useless data passes betweentwo systems. 
 
Send Mail Attack 
 
In this attack, hundreds of thousands ofmessages are sent in a short 
period of time; a normal load might only be 100 or1000 messages per 
hour. Attacks against Send Mail might not make the front page,but 
downtime on major websites will. 
 
For companies whose reputation dependson the reliability and accuracy 
of their Web-Based transactions, a DoS attackcan be a major 
embarrassment and a serious threat to business. 
 
Conclusion 
 
Frequent denial-of-service attacks and achange in strategy by 
"Black-Hat Hackers" are prompting enterprises todemand technology that 
proactively blocks malicious traffic. 
 
Tools and services that reflectapproaches to combat such DoS attacks 
have been introduced with time. These arenormally upgrades to what was 
produced before. No solution is ever said to be anultimate solution to 
defend DoS attacks. Despite the new technology coming everyday, the 
attacks are likely to continue.  </div>

Types of Attacks on Web Servers

Types of Attacks on Web Servers Some of the more popular attack methods are described below. FTP Bounce Attack FTP (File Transfer...