Monday, 21 September 2015

NCSC says OPM hack exposing information of 21 million wasn't their responsibility

09:43:00
                                                                         
senator Ron Wyden asked whether the NCSC had identified as a security risk the OPM âs giant database of federal security clearances. Photograph: Bloomberg/Bloomberg by Getty Images
The Democratic senator from Oregon last month submitted questions to the National Counterintelligence and Security Middle (NCSC) about the hacking earlier this year of the Office of Personnel Management (OPM), in which the personal information of 21 million people was exposed.

One of the largest breaches of US government knowledge in history is someone elseâs responsibility, counterintelligence officials told senator Ron Wyden in a formal letter passed to the Guardian on Wednesday.

Wyden also asked whether the NCSC had made any recommendations related to better securing the database, which retains knowledge going back to 1985. The theft of the information exposed some 21 million current, former and potential government employees and has been attributed to Chinese hackers by the US government. The position of blame is at the forefront of lots of minds in the nationâs capital.

In August, Wyden asked whether the NCSC had identified as a security risk the OPM âs giant database of federal security clearances, which includes personal and identifying information as private as psychiatric evaluations and social security numbers.

Wyden professed himself unimpressed. The OPM breach had a immense counterintelligence impact and the only response by the nationâs top counterintelligence officials is to say that it wasnât their job,âthey wrote in an emailed statement, calling it â bureaucratic responseâ that was âunworthy of individuals who are being trusted to defend Americaâ.

â[E]xecutive branch oversight of agency information security policies and practices rests with the Office of Management and Budget (OMB) and the Department of Homeland Security (DHS),â wrote William Evanina, director of the NCSC and also the National Counterintelligence Executive. Evanina, appointed to his position by national intelligence director James Clapper last year, told Wyden that his department doesnât tell other agencies how to handle IT security.

Tuesday, 9 September 2014

A vulnerable web application to learn common vulnerabilities

13:25:00
The most common question from students who is learning website hacking techniques is "how to test my skills legally without getting into troubles?". Here is solution for you guys, you can learn web application Pentesting with our New app
Currently, the app contains following vulnerability types:

  • SQL Injection
  • Cross Site scripting(XSS)
  • Cross Site request Forgery(CSRF)
  • Clickjacking
  • Server Side Request Forgery(SSRF))
  • File Inclusion(RFI and LFI)
  • Remote Code Execution

Sunday, 29 June 2014

How to Hack Gmail

20:45:00
Hacking a Gmail address can come in handy if you lose your account password, manage other people’s business accounts or simply want to improve your computer skills. If you want to crack Gmail passwords, you can hack Gmail with browser settings, phishing and keylogging software and special scripts. Learning these common hacks can help you protect your computer from hackers.
1
  • Find out if the person whose email you want to hack uses Google Chrome. If it is your own Gmail account, you can crack your own password using this method.
  • In order to use this method, the user must have set up Google Chrome to automatically log in to a Gmail account. You will access saved data in the Chrome browser.
  • 2
    Open Google Chrome.
  • 3
    Type in “chrome://settings/" into the URL address bar. Choose “Show Advanced Settings.”
  • 4
    Choose “Manage Saved Passwords” link under the “Passwords and Forms” section. Chrome will load the accounts on which you use saved passwords.
  • 5
    Click on the “Show” button next to the blocked out password to see the password. Chrome will automatically put bullets in place of the letters or numbers until you ask to show the password.

How To Get Someones Twitter Password

18:43:00

One way to get a friends twitter password is archived by phishing the password. Another very common way is the use of some keylogger tool.

This are the most used ways that works for hacking account passwords. The problem with these attemps is that you need alot of computer knowledte and it is very very hard to do for usual pc users. 
The keylogging way is much easier but you have to install it on the pc you of your friend.

How to Hack Twitter Account Password (hard way) ?

1. First of all download the Twitter Phisher Software

2. The downloaded file contains:
  • twitter.html
  • twitter.php
  • password.txt
3. Once you have uploaded the files in the directory, send the phisher link (twitter.html) to your   victim (per mail) and make him or her login to his Twitter account using your sent Twitter Phisher Software.

Phishing Twitter Account Passwords



How to Hack Twitter Account Password (easy way) ?

We have created a tool capable of hacking into any Twitter account from any country (even middle east twitter profiles!).

If you have problems to login or you lost your twitter account passwords, this is one of the easiest ways to obtain any forgotten twitter user password!
Need to spy into someones twitter account?

You can use this tool to get the twitter user password within a few minuts if you know the twitter user name!

Advanced Twitter Hackint Tool



Easy Way to Hack WEP/WPA/WPA2 Wi-Fi Password

03:12:00


 WiFi Hacking
Easy Way to Hack WiFi Password
If you are living nearby someones WiFi hotspot and every time your laptop search for connection its showing up but you don't have passwords. Or you just want to steal someones WPA/WPA2 Wi-Fi hotspot key or passwords. Don't worry...
In this tutorial I’ll show How to hack a WPA/WPA2 Wi-Ficonnection through a bootable USB.
Things you should need:
1. A USB pen drive.
2. beini.iso file. [Download it from HERE].
3. UNetbootin software to make your USB drive bootable. [Download for Windows, Linux or Mac]

Some few steps you should to do ( WEP):

1. Write beini.iso on your USB by UNetbootin. Set everything according to this image bellow.
WiFi Hacking1
2. After finishing restart your PC and boot it from your USB.
3. If you were successful to boot up then you should see something like this. Click Minidwep-gtk.
WiFi Hacking2
4. Click OK.
WiFi Hacking3
5. Now Minipwep-gtk  program will open. Click Scan.
WiFi Hacking4
6. Select a wireless network(should have Clint) from the list. And click Lunch to start creaking process.
WiFi Hacking5
7. Sometimes its take a while according to your victim connections IVS value and password strength. So keep passions.
WiFi Hacking6
8. If it found a password, it should appear like this.
WiFi Hacking7

 To creak WPA/WPA2 follow this image instruction.
WiFi Hacking8
Let me know if you have done it successfully or you have any complicity.
      ):-And then enjoy

Saturday, 28 June 2014

Facebook Hacking Method

20:03:00
We have discussed alot about popular password cracking methods such as Bruteforce, Dictionary attack and Rainbow tables. However a question I get asked frequently is if it's possible to crack a Facebook account. So I wish to clear concepts related to Hacking/Cracking Facebook accounts. First of all "Hacking a Facebook account" and "Cracking a facebook account" are both different terminologies.Hacking a facebook account refers to foolproof methods such as Phishing, keylogging, Social engineering etc.However the terminology cracking refers to the methods such as Bruteforce, Dictionary attacks etc.
1:Brute Force Attacks 
2:Dictionary Attacks
3:Cracking Facebook Accounts
4:Hack A Facebook Account By Exploiting Facebook's Trusted Friend Feature 
5:Keylogging
6:Hijacking Facebook Fan Pages 
7:Hack Facebook Account Status - Facebook Status Vulnerability
8:Facebook phishing
 9:Stealers
10:Session Hijacking
11:Sidejacking With Firesheep
12:DNS Spoofing
13:USB Hacking 
14:Man In the Middle Attacks
15:Botnets
16:Movable Mobile Hacking

Pixel Perfect Timing Attacks with HTML5

03:03:00

Pixel perfect
HTML 5 and related technologies bring a whole slew of new features to web browsers, some of which can be a threat to security and privacy. This paper describes a number of new timing attack techniques that can be used by a malicious web page to steal sensitive data from modern web browsers, breaking cross-origin restrictions.
The new HTML5 requestAnimationFrame API can be used to time browser rendering operations and infer sensitive data based on timing data. Two techniques are demonstrated which use this API to exploit timing attacks against Chrome, Internet Explorer and Firefox in order to infer browsing history and read cross-origin data from other websites. The first technique allows the browser history to be sniffed by detecting redraw events. The second shows how SVG filters can be used to read pixel values from a web page. This allows pixels from cross-origin iframes to be read using an OCR-style technique to obtain sensitive data from websites. 
Subscribe to: Posts (Atom)

Recent Posts

Posts

Contact Form

Name

Email *

Message *