Sunday, July 7, 2013

Lets develop a source code from executable : Reverse engineering approach

Why mobile security is important ?

Now a days world is becoming tiny with the latest inventions in gadgets. Hardwares are becoming smaller and smaller and their efficiency and usability is increasing rapidly.

There is a drastic growth in mobile application development in past 3 years.

Average 500% people are using mobiles for day 2 day transaction. From all those people 60% of people are not installing anti virus in their phone and 50% of mobile users jailbreak their phones. Number of chances are very high that mobile applications can be used in a wrong manner to harm other people.

Saturday, July 6, 2013

REMOTE SHELL - Penetration Testing



Introduction: SSH secure shell is used to establish a remote connection to a Linux box where SSH service is running. SSH runs on port 22 and applications like Open SSH v2.0 provide SSH utilities.  SSH can protect a network from attacks like IP spoofing, IP source routing etc,. However, we will study some vulnerabilities associated with SSH and provide necessary counter measures.

Monday, July 1, 2013

MITM ATTACK - Configuration To Exploitation

DO YOU KNOW WHAT IS THE ADVANCE WEB ATTACK NOW A DAYS?
Can I ask you something?
Is there anyone who refuses to accept that you have used or you are using a public WI-FI for internet access in your mobile, laptop or an IPAD. I am sure, no one will refuse to accept this. Let me ask you another question.
Do you know your ID and Password are open to all ? Do you know anyone can see your ID password?

Yes, this is true, you might not aware of this but it is fact. When we use public or open Wi-Fi and we login into our Facebook, Twitter or email account, our credentials can be hijacked by an attacker via MITM attack which stands for Man-in-the-Middle attack.

How I fixed Metasploit Database Connectivity Problem

While working on windows exploit last night when I tried to run metasploit it was not able to connect with the database. But metasploit was running fine. When I searching for particular exploit, it wasn't able to give me the result and was giving me below error.

Thursday, June 27, 2013

Email Encryption With RSA Algorithm & 4096 Keysize

In this video demonstration I am explaining why we need email encryption.

There are couple of reason behind this like
1. Many countries spy on telecommunication and web communications in order to find some suspicious activity. No one can say no as we have already many informers who have leaked government secret data in which government's polices are clearly visible to everyone.

Tuesday, June 25, 2013

Owning OS by XSS vulnerability

In this demonstration , I am going to show you that from even a very common XSS attach, how a we can gain access to whole system. For these I am using 2 Operating system one is Kali Linux and another is XP machine which will work as a client. For exploitation I will be using Metasploit Framework(console). For particular this exploitation there is one exploit named "ms10_046_shortcut_icon_dlllloader". Basically it is able to start the local server. That server will be serving the exploits to the victim. Once victim opens that URL, he will be hacked.

Track Geo-Location via NMAP

Hello guys,

In this tutorial, I am going to show you how to use NMAP to track the Geo location of particular IP address.


This Geo Ip Location service (IP Address Map lookup service) is provided for FREE by Geobytes, inc to assist you in locating the geographical location of an IP Address. Click here to  checkout our other FREE localization services.

Monday, June 24, 2013

Nefilter extensions using xtables-addons on ubuntu 9.04

I wanted to use IPP2P extensions and TARPIT target on my Linux box running Ubuntu 9.04. IPP2P allows me to block some common peer to peer applications while Tarpit target slows down the tcp connections by setting the tcp window size to 0 after a successful TCP handshake is completed .