Posts

ByPass the Windows OS Logins

Image
Hello, guys !!! Today I'm bringing some interesting topic to you. That is bypass the passwords in windows OS. Let's talk about that. Bypass Windows Login Password with Command Prompt In my computer has one admin account and there is no password on that account. If it means Windows 7 built-in administrator has been enabled and its password has not been set, now we can bypass our Windows 7 login screen-free with using command prompt in safe mode. In windows 7 computer, there are 3 different types of safe modes to choose, safe mode, safe mode with networking and safe mode with command prompt. In order to make full use of command prompt to bypass Windows login password, we just could select the third one. Restart your Windows 7 computer and hold on pressing F8 to enter Advanced Boot Options. Choose safe mode with command prompt in the coming screen and press enter. In pop-up command prompt window, type net user and hit Enter. Then all Windows 7 user accounts wou...

Mobile Application Security

Image
Hello, guys !!! Today I'm bringing some interesting topic to you. That is Mobile Application security. Let's talk about the Mobile Application security. Mobile Application Security states to the enforcement of access and data protection measures for individual apps. For examples of such application security policies include data encryption, mobile app VPN, authentication, and data wipe. These security policies and others can be applied during application development, later with software development kits (SDKs), or after the app is compiled with application wrapping. Let's See what are the Mobile Application security policies in the industry. Corporate Authentication – Dynamically requires users to enter their corporate credentials before the application will open. This utilizes our enterprise integration for single sign-on (SSO). Data-at-Rest Encryption – Secures data stored by the application without having to encrypt the entire device. The entire application...

TOR Browser

What is Tor? Tor is free software for enabling anonymous communication. The name is derived from an acronym for the original software project name "The Onion Router". Tor directs Internet traffic through a free, worldwide, volunteer overlay network consisting of more than seven thousand relays to conceal a user's location and usage from anyone conducting network surveillance or traffic analysis. Using Tor makes it more difficult for Internet activity to be traced back to the user: this includes "visits to Web sites, online posts, instant messages, and other communication forms". Tor's use is intended to protect the personal privacy of users, as well as their freedom and ability to conduct confidential communication by keeping their Internet activities from being monitored. Tor does not prevent an online service from determining when it is being accessed through Tor. Tor protects a user's privacy but does not hide the fact that Tor is being used. So...

CySCA 2014 Web Penetration Testing Write-up

Image
Hellow Peeps !!! Today I bring some interesting hacking challenge walkthrough. Let's see what it is, CySCA2014 Web Penetration Testing Write-up We need to first setup the cysca2014 box in VM. When the VM configuring we can check connectivity is their using ping commands. Web Penetration Testing 1 – Club Status Turn on the intercept in the burp suit and go to the web site using cysca2014 IP address. Then you can see the GET request. There are two cookies called PHPSESSID and VIP. Then we have to edit the VIP cookie value from 0 to 1 and forward the request. Then we need to forward this packet in burp suite. Then we can get a website. Index.php Now we cannot access the blog. Now we need to change VIP 0 to 1 then we can access the blog.   Now we can access Blog. Web Penetration Testing 2 – Om nom nom nom After completing challenge 1, you can browse on the Blog page. There is...

Side Channel attack

What is Side Channel Attacks do? In cryptography, a side-channel attack is any attack based on information gained from the physical implementation of a cryptosystem, rather than brute force or theoretical weaknesses in the algorithms (compare cryptanalysis). For example, timing information, power consumption, electromagnetic leaks or even sound can provide an extra source of information, which can be exploited to break the system. Some side-channel attacks require technical knowledge of the internal operation of the system on which the cryptography is implemented, although others such as differential power analysis are effective as black-box attacks. How does side-channel analysis work? All attacks take advantage of the changes in processing behavior that will be exhibited at different times during algorithm execution. There are two broad classes of side-channel analysis: simple and differential. Within those classes, attackers can use a range of side-channel properties, such ...

Securing Your Linux System Bit by Bit

As daunting as securing your Linux system might seem, one thing to remember is that every extra step makes a difference. It's almost always better to make a modest stride than let uncertainty keep you from starting. Fortunately, there are a few basic techniques that greatly benefit users at all levels, and knowing how to securely wipe your hard drive in Linux is one of them. Because I adopted Linux primarily with security in mind, this is one of the first things I learned. Once you have absorbed this lesson, you will be able to part with your hard drives safely. As you might have deduced, the usual way of deleting doesn't always cut it. The most often-used processes for deleting files -- clicking "delete" in the operating system or using the "rm" command -- are not secure. When you use one of these methods, all your hard drive does is mark the area where the deleted file used to be as available for new data to be written there. In other words, the ori...

Bandit Wargame

Image
Hello, guys !!! Today I'm bringing some interesting topic to you. That is Bandit(War game). Let's talk about the Active Directory. What is war game? Wargame is a concept where you can learn about some commands and train your self. your mind can improve your knowledge on hacking as well as to learn and practice your knowledge of Linux commands. Mainly these include the concepts of capture the flag logic behind it.You can also improve your password cracking skills, pen testing skills and much more other hacking techniques. I have provided a walkthrough on a game called Bandit. Here you can proceed from one level to another. Login to  http://overthewire.org/wargames/   Here you will be able to select the wargame you want to play. Select Bandit. In this war game, there are 27 levels in which you have to complete one by one to proceed to the next level. Let's start with level zero. I'm going to play  Level 0 The goal of this level ...