Student Tips

Friday, 25 December 2015

US Dam Control Technique Revealed Iranian Muslim Hackers Attack

23:26:00

Muslim hackers Bowman Avenue in Rye, New York area received comprehensive information about the dam were

American journal Wall Street Journal revealed that Iranian hackers York near a dam to control computers are hacked.

In a second document, the US news agency Associated Press said the hacker who works for the state regularly make national infrastructure targets.
According to the document, very 12 times in the last decades of high-level hacker to gain access to power networks are managed.
Detailed designs:
Specialists familiar with the case told the newspaper that hackers Bowman Avenue in Rye, New York area received comprehensive knowledge about the dam were.
According to the document of the inquiry as a feasible assault on Iran and US officials have hinted that the country was warned about cyber warfare capabilities significantly.
The document added that the same group of hackers had attacked the Bowman Avenue, they were separate assaults on US financial firms were involved.
AP extensive inquiry by the US power networks regularly, the latest foreign hackers' assaults were rocked.

Security researchers working on lots of occasions it's found proof that the hackers gained access to sensitive systems.
The inquiry revealed that the objective of all assaults, including detailed information about their facilities & engineering networks was to collect maps.
Hackers an extensive campaign spanning 82 separate plants around the United States & Canada have access. When the assaults were traced their comments in the code that exposed the hand of the Iranians was behind the assaults.
Information from the assaults of the FBI (Federal Bureau of Inquiry ansuysty) warned that the energy industry is being targeted.
AP reporters Jonathan greens & tampons Burke writes that the attackers gathered facts plants to close or change their working methods were not used.
US Air Force's cyber security professional Robert Lee told the agency that the breakdown of diplomatic relations between Iran & the United States are inclined to make use of this information could be damaging.

Monday, 12 October 2015

IFA 2015: Samsung, Motorola toughen Apple Watch's competition

10:13:00

Samsung Gaer 2 will work on andriod

ORK: Samsung and different school corporations showcased new processed wristwatches on -- all aimed toward difficult Apple, a relative newcomer to mercantilism smartwatches.
Apple Watch was the leading smartwatch within the second quarter, with associate degree calculable four million shipped worldwide, for a market share of over seventy fifth, per Strategy Analytics. Samsung was a foreign second with four hundred,000 shipped and a seven.5% market share.
However, the market continues to be emergent, associate degreed Apple Watch is not an choice for people that use automaton smartphones.
Samsung's Gear S2 can work on automaton -- and for the primary time, not simply Samsung's automaton phones. Meanwhile, watches running Google's automaton Wear package can currently work with Apple's iPhones.
Here's a glance at however the watches compare and the way the marketplace is shaping up in light-weight of this week's developments at the IFA school show in Berlin.
Samsung
Although Samsung has been creating smartwatches for regarding 2 years, its previous models have felt like miniature phones. Apps square measure conferred on the oblong screen the means they're on phones. You swipe on the screen to flip through pages of apps.
The Gear S2's interface is additional fitting for a watch. The S2 includes a circular frame that may be revolved to scroll through notifications and apps, therefore your fingers will not wear down from endless swiping. The watch itself is additionally smaller -- roughly the scale of the larger version of Apple Watch. the initial Gear S felt large around wrists.
Samsung says regarding one,000 apps ought to be out there once the S2 launches. that is promising, tho' but Apple Watch's eight,500 and automaton Wear's four,000. So far, several leading app developers have targeted on Apple Watch and automaton Wear instead, as Samsung watches use a little-known system referred to as Tizen. Samsung is holding app developers customise watch faces, therefore you'll see baseball scores from ESPN or the newest posts from Twitter.
Availability: early Oct within the US, with costs to be proclaimed. Later, Samsung can have a version with 3G cellular capabilities, which can let the watch do additional while not a companion phone near .
Requirements: in an exceedingly surprise move, Samsung is creating the S2 work with a spread of automaton smartphones, tho' some options, like setting alarms, may not work with all phones.
Google
Several makers (but not Samsung or Apple) square measure creating smartwatches supported automaton Wear. makers will concentrate on planning the hardware, whereas holding Google worry regarding the practicality.
Consumers get alternative, while not compromising on app choice, as developers will write apps just one occasion for multiple devices.
Among the choices:
- Motorola's latest Moto 360 watches are available in 3 lines -- public convenience, women's and a premium 'Sport' version for fitness enthusiasts. Sport can have GPS intrinsical, along side a screen that may adapt to bright daylight, with high-contrast text and graphics for higher visibility in glare. combine and match sizes, bands and bodies for $300 to $430. The public convenience and women's watches can take off in late Sept. costs and unleash plans for the game version can return later.
- Huawei Watch can have luxury versions, with bodies plated with rose gold, for $699 or $799. The bodies will not be entirely fabricated from gold, as Apple Watch's Edition models square measure. however those choose $10,000 to $17,000. The Huawei Watch and also the Apple Watch each begin at $349.
- On the flip facet, Asus's new ZenWatch a pair of are notable for its worth -- beginning at 149 euros ($167) once it comes go in Oct.

15 websites of Assam govt departments hacked

09:26:00

GUWAHATI: the protection wall of around fifteen websites of assorted government departments, as well as Assam Police, are broken and their home pages marred by unknown hackers.

"Around 10-15 government websites are hacked and also the home pages were marred. All sites were hosted by NIC," extra Director General of Police (CID) Mukesh Sahay same.

The National information processing Centre (NIC) was presently conducting a technical inquiry into the breach because it could also be as a result of varied reasons, he said.

"If the technical report points out at any criminal activity into the incident, then we are going to register a criminal case and enquire it consequently. we have a tendency to square measure nonetheless to receive the report," Sahay same.

The NIC has not lodged any official criticism nonetheless with the police and was repairing the websites presently to plug the protection issue, he added.

When asked concerning reports that Pakistani hackers may have brought down the sites, Sahay said, "Cyber area is with none boundary. A hacker could also be in one country, however his server could also be in another country. So, it's terribly troublesome to mention concerning the origin while not the technical investigation. we are going to be able to tell it solely once the NIC report."

Some of the necessary sites that were hit in recent days were of the Assam Police, Sarba Siksha Abhijan Mission and board of teaching.
Stay updated on the go along with Times of India News App. Click here to transfer it for your device.

Thursday, 8 October 2015

Phones on Drones all set to Hack Wireless Printers

22:32:00

Drones

if you think, your office is secured because it âs on the top floor of a skyscraper building, then you may require to rethink as in this day & age, much nothing is unhackable not even office printers locked at the top floor.

The researchers used 2 applications that they developed:

Yes! A group of security researchers from Singapore has built a drone that along with a smartphone & custom applications can be used to automatically steal documents from printers with open Wi-Fi connections. The know-how was developed by researchers from iTrust, a cyber security research middle at the Singapore University of Know-how & Design.
The researchers used a standard drone from a Chinese firm, DJI & used it to move a Samsung Smartphone to an area where a wireless network with wireless printer was located.

▬The 1st app establishes a imitative access purpose once the open wireless printer is detected. The access purpose mimics the printer and tricks computers within the internal wireless network to send sensitive documents thereto.

▬The second app is Cyber security Patrol, that is meant to scan the air sorting out open Wi-Fi printers and mechanically apprize the organization’s IT department. This app has been designed to boost the safety of the target organization. it's for unsecured printers within the target organization accessible via the drone, however rather launching the attack, it took photos of the compromised printers and reports it to the inner workers.

Once a document is intercepted, the app will send it to associate attacker’s Dropbox account exploitation the phone’s 3G or 4G association, and additionally send it on to the important printer thus a victim wouldn’t notice the hack.

Wifi

The attack zone is proscribed to twenty six meters in radius. however with dedicated hardware, Associate in Nursing wrongdoer may generate a stronger signal which might extend that vary more. Any pc within the attack zone can value more highly to hook up with the pretend printer over the $64000 one, albeit the $64000 printer is nearer in proximity to the scalawag one.

A drone hovering outside Associate in Nursing office block would be clearly noticed, however the goal of the project supposed to assist firms so they might be educated however simply accessible Wi-fi printers will be which might be taken by hackers to steal knowledge or get into their networks.

The project was a part of a government-sponsored cyber security defense project.

Student researchers Jinghui Toh and Hatib Muhammad developed the tactic below the steerage of prof Yuval Elovici of Department of data Systems Engineering at Ben-Gurion University of the desert.

The system targets wireless printers as a result of wireless printers square measure equipped the Wi-Fi association open by default, and plenty of firms forget to shut this hole after they add the device to their Wi-Fi networks. This open association probably provides Associate in Nursing access purpose for outsiders to attach to a network and steal a company’s sensitive knowledge.

The researchers additionally incontestible that the attack may even be applied by concealing a wireless telephone within Associate in Nursing autonomous vaccum cleaner, once that the device can unceasingly scan for organisation’s networks for printers with unsecured connections.

The project conducted by the researchers incontestible yet again the shut link between physical and logical security.

Any person will merely install the Cybersecurity Patrol app on a smartphone and fasten it to a drone to and send it upwards. although identical methodology will be utilized by organizations to ascertain for unsecured printers and alternative wireless devices.

It’s true that each invention and development comes with each professionals and cons however if the cons have larger risk, then it’s time to approach physical security during a completely different means.

Monday, 21 September 2015

nmap

10:07:00

Nmap is an abbreviation of 'Network Mapper', as is a widely known free open source hackers tool. Nmap is used for network discovery and security auditing. Plenty of process admins use nmap for network stock, open ports, managing service upgrade schedules, and monitoring host or service uptime. The tool makes use of raw IP packets in creative ways to decide what hosts are obtainable on the network, what services (application name and version) those hosts are offering, what operating systems (and OS versions and feasible patches) and what type and version of packet filters/ firewalls are being used by the target.

Nmap is a popular hacking tool that was originally created to act as a process of having the ability to scan giant networks, but it works absolutely fine o single hosts (targets). Nmap works on all major computer operating systems, and official binary packages are obtainable for Linux, Windows, and Mac OS X. Nmap was historically a command-line tool, but there is a GUI obtainable called 'Zenmap'.

The face of hacking is changing – and it's getting uglier

09:56:00

Cyberattacks from Russia have increased because of sanctions related to the Ukraine while assaults from Iran have dropped over recent months, thanks to the recent Iran nuclear deal.

David DeWalt, FireEye chief exec, said these changes show how the diplomatic landscape affects what is happening in cyberspace although the general trend is towards increased assaults. From tracking 50 or so offensive hacker groups years ago, FireEye is now monitoring 350 groups who are busy â stealing, disrupting & spying, according to DeWalt.

State-backed hackers in Russia work closely with cybercrime elements, such as the remnants of the infamous Russian Business Network, & have been been active in targeting US retailers such as Target as well as equity & hedge money over the last years or so.

Assaults targeting credentials & log-in details, as well as assaults targeting supply chains than targeted organisations directly, are becoming more commonplace. Energy, government & aerospace are the industry verticals most on the front line but most industry sectors are affected to a lesser or greater extent, according to FireEye.

The security firm estimates that the median time for firms to detect assaults is 205 days, or around seven months. It takes around a month (32 days) to reply to assaults. DeWalt said major breaches such as eBay, Adobe &, more recently, the US governmentâs Office of Personnel Management leak are making the security situation worse.

In particular, FireEye has seen information harvested from a recent breach of the Sabre airline reservation process abused in follow-up assaults.

Stolen IDs & program vulnerabilities are hackersâ main tricks. The were brought together over recent months in successful assaults that planted backdoored operating systems onto Cisco routers. These assaults were carried off remotely & used to redirect packets, according to DeWalt.

â Credential stealing or using credentials to carryover out further assaults is the arms race weâre in with attackers,â DeWalt told El Reg, & ID dumps generate â huge issues downstream,â they added.

El Reg caught up with DeWalt in the coursework of a FireEye briefing to regional press in Madrid. From being an also-ran years back, France has become the third largest target of APTs â advanced persistent threats â in the EMEA region over recent months. Israel (the largest target) & Saudi Arabia are both more attacked than organisations in France & the United Kingdom, according to FireEyeâs stats. The reason for Spainâs prominence is nât clear, even to FireEyeâs promotion team. Â®

Fiat Chrysler recalls 8,000 more Jeeps over wireless hacking

09:48:00

‘No defect has been found. FCA US is conducting this campaign out of an abundance of caution.’ Photograph: Charles Krupa/AP

The recall affects the variants of the 2015 model of the FCAâs Jeep Renegade sports utility vehicle with a 6.5-inch touchscreen, over half of which FCA says are still in dealer hands.

Fiat Chrysler Automobiles (FCA) has recalled an additional 7,810 Jeeps affected by a widely reported bug that allows an attacker to wirelessly seize control of the vehicle.

FCA US has already applied measures to prevent the type of vehicle alteration demonstrated in a recent media document. These measures which necessary no customer or dealer actions block remote access to definite vehicle systems.

In a statement, the automobile firm said: â the campaign â which involves radios that differ from those implicated in another, similar recall â is designed to protect connected vehicles from remote alteration. If unauthorised, such interference constitutes a criminal act.

The Guardian view on automobile computer hacking: act now
Article: Automobile computer hackers have exposed how fragile network security is on lots of of the devices they rely on. They must cease the net of things turning from lovely to harm
Read more
The company tried to ameliorate concerns, saying the program alteration addressed by this recall necessary distinctive & extensive technical knowledge, extended physical access to a subject vehicle & extended periods of time to write code.

The company is unaware of any injuries related to program exploitation, nor is it aware of any related complaints, warranty claims or accidents ân independent of the media demonstration.

â No defect has been found. FCA US is conducting this campaign out of an abundance of caution.

The latest recall, announced on the Friday before a three-day Labor Day weekend in The united states, is significantly smaller than the one.4 million automobile recall following the release of the security vulnerability.

NCSC says OPM hack exposing information of 21 million wasn't their responsibility

09:43:00

senator Ron Wyden asked whether the NCSC had identified as a security risk the OPM âs giant database of federal security clearances. Photograph: Bloomberg/Bloomberg by Getty Images

The Democratic senator from Oregon last month submitted questions to the National Counterintelligence and Security Middle (NCSC) about the hacking earlier this year of the Office of Personnel Management (OPM), in which the personal information of 21 million people was exposed.

One of the largest breaches of US government knowledge in history is someone elseâs responsibility, counterintelligence officials told senator Ron Wyden in a formal letter passed to the Guardian on Wednesday.

Wyden also asked whether the NCSC had made any recommendations related to better securing the database, which retains knowledge going back to 1985. The theft of the information exposed some 21 million current, former and potential government employees and has been attributed to Chinese hackers by the US government. The position of blame is at the forefront of lots of minds in the nationâs capital.

In August, Wyden asked whether the NCSC had identified as a security risk the OPM âs giant database of federal security clearances, which includes personal and identifying information as private as psychiatric evaluations and social security numbers.

Wyden professed himself unimpressed. The OPM breach had a immense counterintelligence impact and the only response by the nationâs top counterintelligence officials is to say that it wasnât their job,âthey wrote in an emailed statement, calling it â bureaucratic responseâ that was âunworthy of individuals who are being trusted to defend Americaâ.

â[E]xecutive branch oversight of agency information security policies and practices rests with the Office of Management and Budget (OMB) and the Department of Homeland Security (DHS),â wrote William Evanina, director of the NCSC and also the National Counterintelligence Executive. Evanina, appointed to his position by national intelligence director James Clapper last year, told Wyden that his department doesnât tell other agencies how to handle IT security.

Tuesday, 9 September 2014

A vulnerable web application to learn common vulnerabilities

13:25:00

The most common question from students who is learning website hacking techniques is "how to test my skills legally without getting into troubles?". Here is solution for you guys, you can learn web application Pentesting with our New app
Currently, the app contains following vulnerability types:

SQL Injection
Cross Site scripting(XSS)
Cross Site request Forgery(CSRF)
Clickjacking
Server Side Request Forgery(SSRF))
File Inclusion(RFI and LFI)
Remote Code Execution

Sunday, 29 June 2014

How to Hack Gmail

20:45:00

Hacking a Gmail address can come in handy if you lose your account password, manage other people’s business accounts or simply want to improve your computer skills. If you want to crack Gmail passwords, you can hack Gmail with browser settings, phishing and keylogging software and special scripts. Learning these common hacks can help you protect your computer from hackers.

Find out if the person whose email you want to hack uses Google Chrome. If it is your own Gmail account, you can crack your own password using this method.
In order to use this method, the user must have set up Google Chrome to automatically log in to a Gmail account. You will access saved data in the Chrome browser.
2
Open Google Chrome.
3
Type in “chrome://settings/" into the URL address bar. Choose “Show Advanced Settings.”
4
Choose “Manage Saved Passwords” link under the “Passwords and Forms” section. Chrome will load the accounts on which you use saved passwords.
5
Click on the “Show” button next to the blocked out password to see the password. Chrome will automatically put bullets in place of the letters or numbers until you ask to show the password.

How To Get Someones Twitter Password

18:43:00

One way to get a friends twitter password is archived by phishing the password. Another very common way is the use of some keylogger tool.

This are the most used ways that works for hacking account passwords. The problem with these attemps is that you need alot of computer knowledte and it is very very hard to do for usual pc users.
The keylogging way is much easier but you have to install it on the pc you of your friend.

How to Hack Twitter Account Password (hard way) ?

1. First of all download the Twitter Phisher Software

2. The downloaded file contains:

twitter.html
twitter.php
password.txt

3. Once you have uploaded the files in the directory, send the phisher link (twitter.html) to your victim (per mail) and make him or her login to his Twitter account using your sent Twitter Phisher Software.


Phishing Twitter Account Passwords

How to Hack Twitter Account Password (easy way) ?

We have created a tool capable of hacking into any Twitter account from any country (even middle east twitter profiles!).

If you have problems to login or you lost your twitter account passwords, this is one of the easiest ways to obtain any forgotten twitter user password!
Need to spy into someones twitter account?

You can use this tool to get the twitter user password within a few minuts if you know the twitter user name!


Advanced Twitter Hackint Tool

Easy Way to Hack WEP/WPA/WPA2 Wi-Fi Password

03:12:00

Easy Way to Hack WiFi Password

If you are living nearby someones WiFi hotspot and every time your laptop search for connection its showing up but you don't have passwords. Or you just want to steal someones WPA/WPA2 Wi-Fi hotspot key or passwords. Don't worry...

In this tutorial I’ll show How to hack a WPA/WPA2 Wi-Ficonnection through a bootable USB.

Things you should need:

1. A USB pen drive.

2. beini.iso file. [Download it from HERE].

3. UNetbootin software to make your USB drive bootable. [Download for Windows, Linux or Mac]

Some few steps you should to do ( WEP):

1. Write beini.iso on your USB by UNetbootin. Set everything according to this image bellow.

2. After finishing restart your PC and boot it from your USB.
3. If you were successful to boot up then you should see something like this. Click Minidwep-gtk.

4. Click OK.

5. Now Minipwep-gtk program will open. Click Scan.

6. Select a wireless network(should have Clint) from the list. And click Lunch to start creaking process.

7. Sometimes its take a while according to your victim connections IVS value and password strength. So keep passions.

8. If it found a password, it should appear like this.

To creak WPA/WPA2 follow this image instruction.

Let me know if you have done it successfully or you have any complicity.

):-And then enjoy

Saturday, 28 June 2014

Facebook Hacking Method

20:03:00

We have discussed alot about popular password cracking methods such as Bruteforce, Dictionary attack and Rainbow tables. However a question I get asked frequently is if it's possible to crack a Facebook account. So I wish to clear concepts related to Hacking/Cracking Facebook accounts. First of all "Hacking a Facebook account" and "Cracking a facebook account" are both different terminologies.Hacking a facebook account refers to foolproof methods such as Phishing, keylogging, Social engineering etc.However the terminology cracking refers to the methods such as Bruteforce, Dictionary attacks etc.

1:Brute Force Attacks

2:Dictionary Attacks

3:Cracking Facebook Accounts

4:Hack A Facebook Account By Exploiting Facebook's Trusted Friend Feature

5:Keylogging

6:Hijacking Facebook Fan Pages

7:Hack Facebook Account Status - Facebook Status Vulnerability

8:Facebook phishing

9:Stealers

10:Session Hijacking

11:Sidejacking With Firesheep

12:DNS Spoofing

13:USB Hacking

14:Man In the Middle Attacks

15:Botnets

16:Movable Mobile Hacking

Pixel Perfect Timing Attacks with HTML5

03:03:00

HTML 5 and related technologies bring a whole slew of new features to web browsers, some of which can be a threat to security and privacy. This paper describes a number of new timing attack techniques that can be used by a malicious web page to steal sensitive data from modern web browsers, breaking cross-origin restrictions.

The new HTML5 requestAnimationFrame API can be used to time browser rendering operations and infer sensitive data based on timing data. Two techniques are demonstrated which use this API to exploit timing attacks against Chrome, Internet Explorer and Firefox in order to infer browsing history and read cross-origin data from other websites. The first technique allows the browser history to be sniffed by detecting redraw events. The second shows how SVG filters can be used to read pixel values from a web page. This allows pixels from cross-origin iframes to be read using an OCR-style technique to obtain sensitive data from websites.

Read the full white paper

Redirect To Any Website Using Google Url

01:59:00

Today i will show you to make google link that redirects you to any webpage you wish. This url will start with www.google.com and followed with some characters and symbols. You can trick users to visit your site by changing your webpage url that look like google. As no one will doubt google. So lets get in to.

Making Nameless Folder In Windows

01:43:00

In this small tutorial i will show you a smilpe windows trick. Basically you can not make folder with no name on windows. This trick will allow you to make folder without any name. This trick works on any windows operating system.

Blocking Facebook On Your Computer

01:40:00

I had previously posted about Blocking And Unblocking any websites on your computer. In this tutorial i will teach you to specifically block facebook on your computer. This might be helpfull if you want to prevent students fromusing facebook in school and colleges or youremployees in office. If you are parent and don'twant you child to use facebook or any other particular site then follow simple steps given below. So lets get started.

How To Block Facebook ?

1. Go to Start > Programmes > Accesories
2. Then Right click on Notepad and Run it as administrator.
3. Now open host file by clicking on File > Open and locate to following address

C:\WINDOWS\system32\drivers\etc

4. Then just below # 127.0.0.1 localhost paste folowing code

# Blocking Facebook
127.0.0.1 login.facebook.com
127.0.0.1 www.facebook.com
127.0.0.1 apps.facebook.com
127.0.0.1 blog.facebook.com

5. Now save the host file and done.
6. Open any browser and try to open facebook. It won't open. If facebook opens then you might have done somthing wrong. (let me know if you face any problem)

Blocking Other Website

If you want to block website other then facebook then change facebook address with whatever website you want to block. For example: to block google paste following code below # 127.0.0.1 localhost

# block google
127.0.0.1 www.google.com