.:: Dark Site ::.: Anti Hacking

Tabnabbing Attack with social Engineering toolkit on Backtrack | kali

Hi everyone here is the post that basically explain about very fundamental attack known to be tab nabbing attack.the attack is very simple again you sent an link to the victim he/she click on it and redirected to your desired login page which looks like original and the after putting his/her credentials you get that in no time . 
so lets do this with social engineering toolkit as here more social engineering trick is very necessary . 
So before doing all do check your own BT/Kali System IP address by typing ifconfig command. 
then Open Your Backtrack terminal and Type cd /pentest/exploits/set 
Now Open Social Engineering Toolkit (SET) ./set 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8mOCeh6T49bOGwtiZujht1oA12Rg7bDtIoMh2sHliLfnJO-2NfErxGQPetMnjX0w-kJTbsfdIkiqXtEgNATLykrZxlYkROjNvyRF9dvNAMSmqpYl37FhoWuzWP146-RLb03JvtFsOgJhw/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8mOCeh6T49bOGwtiZujht1oA12Rg7bDtIoMh2sHliLfnJO-2NfErxGQPetMnjX0w-kJTbsfdIkiqXtEgNATLykrZxlYkROjNvyRF9dvNAMSmqpYl37FhoWuzWP146-RLb03JvtFsOgJhw/s720/1.png" /></a></div>after that choose social engineering attack that is option 1 and then choose option 2, “Website Attack Vectors”. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXXnvQM1rOT8QcacsgxOq08vMrzbiVjdLmvby4Ebwj_f_hrh24i5oDySrfTWUQsBmOhaMvrJvZ1Bb_zBsl-hmcrFi1RKYzQHPTgg1w2QT5CRTUUqMThZW2RageZa0DiEAlbXOAZ-tYunLS/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhXXnvQM1rOT8QcacsgxOq08vMrzbiVjdLmvby4Ebwj_f_hrh24i5oDySrfTWUQsBmOhaMvrJvZ1Bb_zBsl-hmcrFi1RKYzQHPTgg1w2QT5CRTUUqMThZW2RageZa0DiEAlbXOAZ-tYunLS/s520/2.png" /></a></div>a list of options will be populated you have to select option 4 “Tabnabbing Attack Method”. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyynYd_9GCyeMDOl0b0hf-IMfWMlMn45py7x8ORMFu510M7kKTjL9yedvj7vEcbnk4urT99hMRHwDYxoT9JJn_iOB0x4NOXQKD3Q4Yj6lHSOm4uW33FVtmUFT2iV5OsN7Pm3prYhJgB1zM/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhyynYd_9GCyeMDOl0b0hf-IMfWMlMn45py7x8ORMFu510M7kKTjL9yedvj7vEcbnk4urT99hMRHwDYxoT9JJn_iOB0x4NOXQKD3Q4Yj6lHSOm4uW33FVtmUFT2iV5OsN7Pm3prYhJgB1zM/s520/3.png" /></a></div>next choose option 2 “Site Cloner”. 
it will ask for your system ip which you can give that you got from ifconfig (your backtrack machine ip) 
Then Enter the URL of the site you want to clone. In this case http://www.facebook.com and hit enter. SET will clone up the web site. And press return to continue. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPr-T2k0wOCGp2LOn9_tSipWfdFyGWfk6M7Iam6Zt1Tq7Hi1kixJATeqMG3wz75m77kjVjou5d5kcmykAZk6kGCRB-M95AP7_zUZ4cbtkk2eDgS5Dvdr_dy08FrNYvZSx9LJ5kSsAweP6u/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhPr-T2k0wOCGp2LOn9_tSipWfdFyGWfk6M7Iam6Zt1Tq7Hi1kixJATeqMG3wz75m77kjVjou5d5kcmykAZk6kGCRB-M95AP7_zUZ4cbtkk2eDgS5Dvdr_dy08FrNYvZSx9LJ5kSsAweP6u/s520/5.png" /></a></div>Now convert your URL into Google URL using goo.gl and send this link address to your victim via Email or Chat or any other social way you can make it reach to victim. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHX5huRp5OrW-sQ3bCw9pqvykPX2ACAXGrr9YyJoEwn7QcvgZzEM6HVjcgvbODu5hmaCQHJobjcU6t0b48a0YF6N_63GnJ46wZtbddX_prk0qPvjhS_TeLqCyzWcV81MqAA_nC59fm5wND/s1600/7.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjHX5huRp5OrW-sQ3bCw9pqvykPX2ACAXGrr9YyJoEwn7QcvgZzEM6HVjcgvbODu5hmaCQHJobjcU6t0b48a0YF6N_63GnJ46wZtbddX_prk0qPvjhS_TeLqCyzWcV81MqAA_nC59fm5wND/s520/7.png" /></a></div>When victim open in their browser it should be a message that the page is still loading. so victim start to open another tab. As soon as victim open new tab, our fake website start working. That script will redirect the victim to the phishing page your derived. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnMlmpIRhfnDnHM7CGWvWsmMY3IehCgTqzLAX_U6ki3w6T54pbokySoARQdGXaxbs90Y8VjEY7WdbpES-gGROYCn-tIwtDLjPX1XkJsXLmAH8_224xCdb67VylB3rOg52aAn4TYSgy3XRb/s1600/8.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhnMlmpIRhfnDnHM7CGWvWsmMY3IehCgTqzLAX_U6ki3w6T54pbokySoARQdGXaxbs90Y8VjEY7WdbpES-gGROYCn-tIwtDLjPX1XkJsXLmAH8_224xCdb67VylB3rOg52aAn4TYSgy3XRb/s520/8.png" /></a></div><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv47HfRzZX5REPWkHXVb_cpMVSGCu-bCrUUHDCMDWxXHn-m-a5oK4sNS7Q-vPLcNCOip_pKKVHN39WQNevX2peYFfQRHkJapN9oVMnJtSLx2PV5eXG3ASqgOZjDzbU01L9-gOEhIqUpwly/s1600/9.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhv47HfRzZX5REPWkHXVb_cpMVSGCu-bCrUUHDCMDWxXHn-m-a5oK4sNS7Q-vPLcNCOip_pKKVHN39WQNevX2peYFfQRHkJapN9oVMnJtSLx2PV5eXG3ASqgOZjDzbU01L9-gOEhIqUpwly/s320/9.png" /></a></div>here yyou goes these are the user id and password of the victim :D. 
be safe keep hacking :).

Tabnabbing Attack with social Engineering toolkit on Backtrack | kali

Hi everyone here is the post that basically explain about very fundamental attack known to be tab nabbing attack.the attack is very simple a...

Cyber Crime And Rules On Internet Be Safe

<div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhT3KrovZgUsRN7Kxw_RGh1R6EvjN1-Tw7rkwSzeLjiCG5XMbsXwMUxmbs6POXJBF9awMNAvzgIv7YW_IbsM2bzTW56zZ6dLRVqTYPmmJ92qNGVyQd7kmh5E01cts6BKa3cHPNJh95viDpr/s1600/cyber+.jpg"> 
<img alt="Cyber Crime And Rules" height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhT3KrovZgUsRN7Kxw_RGh1R6EvjN1-Tw7rkwSzeLjiCG5XMbsXwMUxmbs6POXJBF9awMNAvzgIv7YW_IbsM2bzTW56zZ6dLRVqTYPmmJ92qNGVyQd7kmh5E01cts6BKa3cHPNJh95viDpr/s1600/cyber+.jpg" width="520" /> 
</a> 
Cyber Crime And Rules That You Should Know 
</div>As The Days Progresses use of computers and the internet has increased rapidly among people.with the gaining popularity of internet or world wide web there also growth in crime specific to cyber world.people are getting smart enough to steal some one credential and perform various action on that may be consider bank account transaction or hacking into social network. 
Everyone who uses the internet is a potential victim. In the enforcement of these criminal offenses, it is imperative to incarcerate the small percentage who are criminal users and to protect the majority of users who are innocent. There is a broad spectrum of computer and internet crimes and they are often covered by both state and federal laws. 
 
Computer offences can be defined as a crime in which a computer, or a network of computers, are used in the commission of the crime. If an individual takes advantage of the internet in the commission of a crime, this is sometimes called a net-crime. 
 
The direct victim of a computer crime can either be the computer, or network, itself. These crimes can victimize something independent of the network such as a consumer by simply using a computer during the crime. 
 
Crimes that target computers specifically include things such as the implementation of computer viruses. Another type of this crime is sometimes referred to as a denial-of-service attack which is aimed at bringing down a particular network. The introduction of malware to a network is also a direct attack on a computer. Examples of malware are trojan horses and spyware. These are forms of unwanted software which infect a computer and are also referred to as a computer contaminant. 
Cyber terrorism is a form of this type of crime in which the perpetrator attempts to bring down a large scale computer network to interrupt its users and create panic. 
 
Examples of computer crimes with independent victims are cyberstalking, identity theft, and phishing. 
 
Some other common examples that are often publicized in the media are the distribution of child pornography and hate propaganda. Cyber terrorism and those distributing hate propaganda are directly linked because they are often perpetrated by the same organization or organizations with similar goals. 
 
With such a variety of offenses related to the cyber world, many worry that they will be subject to prosecution if they wander into an inappropriate website or inadvertently spread malware. The truth of the matter is that in the majority of state and federal statutes regulating computer crimes, the laws are written specifically to target those who indicate that they "knowingly" and/or "willingly" perpetrated one of these offenses. 
 
The agents who investigate these crimes, along with the prosecutor, carry the burden of showing that a person had the intent to commit the computer crime. A knowledgeable criminal lawyer can provide the expertise to defend those who may find themselves prosecuted for something that they did not have the intent to commit. 
 
So Lets Make the Cyber world Crime Free and Better for ease of Use For Benefit.

Cyber Crime And Rules On Internet Be Safe

Cyber Crime And Rules That You Should Know As The Days Progresses use of computers and the internet has increased rapidly among people.w...

Free Learn Wifi Security With Vivek Ramachandran ( Books | Video Tutorials & Concepts )

Hi everyone it really Feel great that Vivek RamaChandran Sir has done an awesome video series of wifi security which makes you clear on most of the concept related to wifi security .past few days i have a great interest on learn wifi security so i found wifi security by vivek sir and let me tells you this video series some contain some quality training material with live practicals and clear cut understanding. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEix3ryC73Dtaype1CnlFnxSVKPruQfQlnBjSPDFCOH4J7gBQoavhrdXVvzpUu4OtNU9nJcviniS0Nwx2hFQQ5doLxEh3WVgpDNUPA1MjuYwmWPVgdDnHBg7-a2C_ETquuYu4f8z_dQyTw9Y/s1600/free+learn.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="free download wifi hacking videos and books" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEix3ryC73Dtaype1CnlFnxSVKPruQfQlnBjSPDFCOH4J7gBQoavhrdXVvzpUu4OtNU9nJcviniS0Nwx2hFQQ5doLxEh3WVgpDNUPA1MjuYwmWPVgdDnHBg7-a2C_ETquuYu4f8z_dQyTw9Y/s1600/free+learn.png" /></a></div>You must have seen our previous Post 
 
<a href="http://www.darksite.co.in/2013/05/free-download-backtrack-5-wireless.html">Free download BackTrack 5 Wireless Penetration Testing By Vivek Ramachandran</a> Which share free e book by vivek sir. 
 
let me tell you about some contents about the video series:- 
 
It Contain fully practical with explanation.it is best for penetration testers, security enthusiasts and network administrators. 
This video series will take you through a journey in wireless LAN (in)security and penetration testing.it will also teach you very basics of how WLANs work, graduate to packet sniffing and injection attacks, move on to audit infrastructure vulnerabilities, learn to break into WLAN clients and finally look at advanced hybrid attacks involving wireless and applications 
 
A non-exhaustive list of topics to be taught includes: 
 
<li>Bypassing WLAN Authentication – Shared Key, MAC Filtering, Hidden SSIDs 
<li>Cracking WLAN Encryption – WEP, WPA/WPA2 Personal and Enterprise, Understanding encryption based flaws (WEP,TKIP,CCMP) 
<li>Attacking the WLAN Infrastructure – Rogues Devices, Evil Twins, DoS Attacks, MITM, Wi-Fi Protected Setup 
<li>Advanced Enterprise Attacks – 802.1x, EAP, LEAP, PEAP, EAP-TTLS 
<li>Attacking the Wireless Client – Honeypots and Hotspot attacks, Caffe-Latte, Hirte, Ad-Hoc Networks and Viral SSIDs, WiFishing 
<li>Breaking into the Client – Metasploit, SET, Social Engineering 
<li>Enterprise Wi-Fi Worms, Backdoors and Botnets 
 
About VivekRamachandran (Author of Book /Trainer):- 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglZMgJRuFn50SEPF0pR85W8ojzJf5PxM8J3mRYGgW6ZLuwEob7n1QayR7bh7YUHAO5SaLOOyn7ailMDyAwMUX6lv3L5yHcx2cbdoEopj5VY8_YG35WO9H2tCP1Be0fK6-YsDZWjb2NxNlJ/s1600/vivek+sir.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Vivek Ramachandran" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglZMgJRuFn50SEPF0pR85W8ojzJf5PxM8J3mRYGgW6ZLuwEob7n1QayR7bh7YUHAO5SaLOOyn7ailMDyAwMUX6lv3L5yHcx2cbdoEopj5VY8_YG35WO9H2tCP1Be0fK6-YsDZWjb2NxNlJ/s1600/vivek+sir.jpg" /></a></div>Vivek has been into Wireless security research since 2003 ,He was also one of the winners of Microsoft Security Shootout contest held in India among a reported 65,000 participants,his work on wireless security has been quoted in BBC online, InfoWorld, MacWorld, The Register, IT World Canada etc. places. He has spoken/trained at top conferences around the world including Blackhat USA and Abu Dhabi, Defcon, Hacktivity, Brucon, ClubHack, SecurityByte, SecurityZone, Nullcon, C0C0n etc.He is best known in the hacker community as the founder of SecurityTube.net where he routinely posts videos on Wi-Fi Security, Assembly Language, Exploitation Technique. 
 
i think you all security geeks knows him so no need to write more about him. 
 
<a href="http://securitytube.aircrack-ng.org/Wi-Fi-Security-Megaprimer/WLAN-Security-Megaprimer-v1.iso">Download All Free Video Tutorial</a> (iso File 4.2 GB) 
you can also see all video tutorial part wise <a href="http://www.securitytube.net/groups?operation=view&groupId=9">here</a> 
 
TO start up with you need ALFA NETWORK AWUS036NH 2W USB Wireless N Adapte You can easily purchase from<a href="http://www.ebay.com/itm/ALFA-NETWORK-AWUS036NH-2W-USB-Wireless-N-Adapter-WiFi-b-g-N-2000mW-/400611594109?pt=US_USB_Wi_Fi_Adapters_Dongles&hash=item5d464fcf7d"> ebay</a>/amazon .You also need to <a href="http://www.darksite.co.in/2012/05/how-to-install-backtrack-5-r1-in-your.html">set up backtrack</a> on your laptop/pc(<a href="http://www.darksite.co.in/2012/08/how-to-install-vmware-tools-in-backtrack.html">vmweare/virtual box</a>) which i think very easy and i know even a kid can do it. 
 
So Even i have Started to learn wifi security gone upto 22+ videos and the whole video series contain 45+ Videos so have fun and special thanks to vivek sir _/\_ for making these videos and sharing it for free.

Free Learn Wifi Security With Vivek Ramachandran ( Books | Video Tutorials & Concepts )

Hi everyone it really Feel great that Vivek RamaChandran Sir has done an awesome video series of wifi security which makes you clear on most...

Secure your Smart Phone ! Don't Let Your Smart Phone Be the next

Hi everyone after a long day here is one of my post on mobile security ...as the dayz progressing people are getting much friendly with doing things from their cell phone now every task is simulated into app and merged into smart phone now.starting from ticket booking ,banking transaction,online purchasing and selling ...many we are depending on our smart phone only.so as you know humans are weakest link of security you should observe following few tips to stay protected against these mobile phone based attack(Smart phone base attack as it is emerging day by day ) 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKCPUuROQS77Cu4SJJMHnTWd8Yr4h_kz1hjVNk-0Uu7aRMcUHEKucKxyeysCa_4HQC2_dtSDRtg-VuMsBx43lgjXHv7WCfZj1gJFXVatzb8NAGiSZXAXZ7twomMUmOl1cTdTHMwzuVcONc/s1600/darksite.png" imageanchor="1"><img alt="smart phone hacking" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgKCPUuROQS77Cu4SJJMHnTWd8Yr4h_kz1hjVNk-0Uu7aRMcUHEKucKxyeysCa_4HQC2_dtSDRtg-VuMsBx43lgjXHv7WCfZj1gJFXVatzb8NAGiSZXAXZ7twomMUmOl1cTdTHMwzuVcONc/s1600/darksite.png" width="560" /></a> 
Golden Tips to stay safe using Smart Phone 
<li>Always use lock (complicated Pattern is best)..you never know where your phone travel and reveal. 
<li>don't connect your smart phone to un-trusted Network (Thinking lets enjoy free internet) 
<li>Don't install app without verification. 
<li>don't disable data protection option that is there in your phone... 
<li>there are many key logger program available for smart device which can actually store all your key touched and logs and send to attacker so be safe on that. 
<li>always better to have install a security program /app. 
 
There are many such tips available which i will be updating if you know such feel free to comment.

Secure your Smart Phone ! Don't Let Your Smart Phone Be the next

Hi everyone after a long day here is one of my post on mobile security ...as the dayz progressing people are getting much friendly with doin...

Top 7 Hacker's Favorite AddOns In Mozilla Firefox

Hey Hackers/Security Professionals :)i am sure that most of you use Mozilla Firefox For security auditing So i am sharing which i use most of the time 
and they are very much helpful on finding bug or web vulnerability analysis. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigqSPiuoWwI22cM3IBQyOhQgB08xmpQqE7aP38AgV9HryMHqqiIZw6fqNCYMEaKaTe_7FrFONwxuPGCZX6Oi832z7ggatkiuBOFw6yKxR4JLR452qBVV0RoDsIeRfpRVYRiCxIWIkoRU9U/s1600/1410-missing-addons.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEigqSPiuoWwI22cM3IBQyOhQgB08xmpQqE7aP38AgV9HryMHqqiIZw6fqNCYMEaKaTe_7FrFONwxuPGCZX6Oi832z7ggatkiuBOFw6yKxR4JLR452qBVV0RoDsIeRfpRVYRiCxIWIkoRU9U/s400/1410-missing-addons.jpg" /></a></div> 
Top 7 Mozilla Addons That Hackers Love 
 
 
<li><a href="https://addons.mozilla.org/en-US/firefox/addon/greasemonkey/">Greasemonkey</a> 
 
Allows you to customize the way a web page displays or behaves, by using small bits of JavaScript.You can write your own scripts, too 
Which is a major advantage of using it. 
 
<li><a href="https://addons.mozilla.org/en-US/firefox/addon/hackbar/">Hack Bar</a> 
 
Again My favourite Hack Bar,This toolbar will help you in testing sql injections, XSS holes and site security. It is NOT a tool for executing standard exploits and it will NOT teach you how to hack a site. Its main purpose is to help a developer do security audits on his code. If you know what your doing, this toolbar will help you do it faster. If you want to learn to find security holes, you can also use this toolbar, but you will probably also need a book, a lot of Google and a brain :) 
 
<li><a href="https://addons.mozilla.org/en-US/firefox/addon/live-http-headers/">Live Header</a> 
 
View HTTP headers of a page and while browsing.Another plus point that makes things easier to detect also modify things live. 
 
<li><a href="https://addons.mozilla.org/en-us/firefox/addon/cookies-manager-plus/">Cookie Manager +</a> 
 
Cookies manager to view, edit and create new cookies. It also shows extra information about cookies, allows edit multiple cookies at once and backup/restore them.As you all know the importance of cookie so this can be dangerous if you are ignorance about cookie. 
 
<li><a href="https://addons.mozilla.org/en-US/firefox/addon/hide-my-ass-proxy-extension">Hide My ass Web Proxy</a> 
 
Hide My Ass! operates the most popular browser based web proxy online, this is our official extension that enables you to easily redirect your web traffic through our anonymous proxy network. 
 
<li><a href="https://addons.mozilla.org/en-us/firefox/addon/user-agent-switcher/">User Agent Switcher</a> 
 
Helpful in checking security issue independent of browser.The User Agent Switcher extension adds a menu and a toolbar button to switch the user agent of a browser. 
 
<li><a href="https://addons.mozilla.org/en-US/firefox/addon/fireshot/">Webpage Screenshot in Firefox</a> 
 
FireShot captures webpage screenshot in Firefox entirely,Very Helpful in making Proof of concept (POC) 
 
i Believe You will also love it Have Fun. 
 
DO Share Helps Others to Learn Comments+ Likes + Share.

Top 7 Hacker's Favorite AddOns In Mozilla Firefox

Hey Hackers/Security Professionals :)i am sure that most of you use Mozilla Firefox For security auditing So i am sharing which i use most o...

What is Intrusion Detection System? How it works ?

This is a post which i stared learning recently so sharing my little knowledge so intrusion detection system (IDS) is basically used for monitoring the network, it detects intruders; that is, unexpected, unwanted or unauthorized people or programs on network. 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiip4z8KjUcYOUMdxiAE2IPMHoGkIeA3ssskcq01yn_Hh516gqKxGlYtdaYosm0vedikvqRxhHXAPX4g1a6TM4I9F9vBzJnQMg0OiPSTF6jRDYgLDZ5V9QUUPIk-rm638N6D771JXlc9v5h/s1600/Typical-locations-for-an-intrusion-detection-system.jpg" imageanchor="1"><img alt="What is Intrusion Detection System?" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiip4z8KjUcYOUMdxiAE2IPMHoGkIeA3ssskcq01yn_Hh516gqKxGlYtdaYosm0vedikvqRxhHXAPX4g1a6TM4I9F9vBzJnQMg0OiPSTF6jRDYgLDZ5V9QUUPIk-rm638N6D771JXlc9v5h/s720/Typical-locations-for-an-intrusion-detection-system.jpg" width="550" /></a> 
 
An intrusion detection system has a number of sensors that is used to detect unwanted or unexpected flow of network traffic, the major sensors as follows: 
 
<li>A sensor monitor log files 
 
<li>A sensor monitor TCP ingoing or outgoing connections 
<h2> 
How Intrusion Detection System Works? 
</h2>Intrusion detection system works by collecting information and then examining it.IDS collects data from it sensors and analyze this data to give notice to the system administrator about malicious activity on the network. 
 
<li> An intrusion detection system can be run manually but most IT administrators find it easier to automate the system checks to ensure that nothing is accidentally overlooked. 
 
<li> We can mainly categorize an IDS into two type: 
 
1. NIDS (Network Intrusion Detection Systems). 
2. HIDS (Host Intrusion Detection Systems) 
 
There is still a question, why we use IDS if there is firewall to perform these tasks, Firewall is used to stop unwanted traffic from entering or leaving the internal enterprise network, where as the IDS is deployed to monitor traffic in vital segments in the network, generating alerts when an intrusion is detected. 
 
A firewall has got holes to let things through, without it you wouldn't be able to access the Internet or send or receive emails, there are different ways to bypass or cheat a firewall. 
 
Snort is an excellent open source Network Intrusion Detection System, OSSEC is an Open Source Host-based Intrusion Detection System. 
 
Below is an an overview of the basic architecture as well as practical examples of how to customize Open Source Host-based Intrusion Detection System to manage logging from your infrastructure and applications. 
<h3>Video On Intrusion Detection System</h3><iframe width="560" height="315" src="http://www.youtube.com/embed/lUMs1uqwRX0" frameborder="0" allowfullscreen></iframe> 
I will be coming up with next tutorial on it soon ...

What is Intrusion Detection System? How it works ?

This is a post which i stared learning recently so sharing my little knowledge so intrusion detection system (IDS) is basically used for mon...

How To Find Admin Login Panel Of A Website | Online | Top 7 Ways

Hello Friends this is that post which you might be looking for today i am going to tell you how to find admin panel of a website that you want to hack into so are you interested to know so let me list down ways by which you can easily get the admin login panel. 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSU6PZX_hanpkR99cTJES24-TCMV3-emjrc__W_xjM9lAN45XtYSO4yTWr2qjhQI4ZzUJdLX0mF3ddq7-YtCEZ1XlCYiYKPUEyIobfUnrobfo9s-pi4-PfGIh6AkPRsB1YmjJERv3hXm_N/s1600/admin.jpg" imageanchor="1"><img alt="Admin Login Panel Finder" height="250" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjSU6PZX_hanpkR99cTJES24-TCMV3-emjrc__W_xjM9lAN45XtYSO4yTWr2qjhQI4ZzUJdLX0mF3ddq7-YtCEZ1XlCYiYKPUEyIobfUnrobfo9s-pi4-PfGIh6AkPRsB1YmjJERv3hXm_N/s320/admin.jpg" width="550" /></a> 
in various case i find some new born hacker able to get the user id and password by sql injection but still they give up as they unable to find the admin login panel so if you are in search of admin login panel of a website then this post will help you for sure. 
 
Method 1:Adding URL 
This is the first and easiest method to find admin login page. You can add some words 
after the URL.Like 
 
<li>www.site.com/admin 
<li>www.site.com/administrator 
<li>www.site.com/login 
<li>www.site.com/wp-login.php 
<li>www.site.com/admin.php 
 
Method 2:<a href="http://www.darksite.co.in/2012/06/online-admin-page-finder-perl-python.html">Using Various Script</a> 
You can use various scripts like various admin finder to get the admin page.Here I am 
showing you an useful scripts which will help you to get the admin page.(I will release my own admin finder script soon and upadte here) 
To run this script you first need to install Active Perl.get it from 
<a href="http://www.activestate.com/activeperl/downloads">http://www.activestate.com/activeperl/downloads</a> 
 
Now copy the code of <a href="http://pastebin.com/WWZszURW">http://pastebin.com/WWZszURW</a> and save it as anything.pl and 
run the script to get the login page of the desired site.(Remember its a python Script). 
 
Method 3:Crawling software 
You can use various crawling tool to crawl the website and get the login page. These 
website crawl all the pages of the website and show the list of all pages and 
directories. 
Method 4:<a href="http://www.darksite.co.in/2012/04/how-to-find-admin-panel-of-any-web-site.html">Crawling</a> 
By default various search engines crawl the entire site and by using robots.txt the site 
owner actually gives the list of links that are not to be crawled by the engine. 
Now most 
of the time the admin ask the engine not to crawl the admin page so if you view the 
robots.txt you can get the link to the login page. 
www.site.com/robots.txt 
Method 5:<a href="http://www.darksite.co.in/search/label/Google%20Dorks">Google Dorks</a> 
Google dorks are some time very useful if you know to use it properly.so here are some example of useful Google dorks that will definitely help you in finding admin login panle of a website. 
 
<li>Site:site.com “admin” 
<li>Site:site.com inurl:login 
<li>site:site.com intitle:"admin login" 
 
Method 6:<a href="http://www.darksite.co.in/2012/04/free-download-best-hackers-professional.html">Using Online Admin Finder/Scanner</a> 
There are many such online admin finder available but i am giving you the link for one of my favorite one This 
site <a href="http://sc0rpion.ir/af/">http://sc0rpion.ir/af/</a> will help you in finding admin login page online. 
 
Method 7: <a href="http://www.darksite.co.in/2012/04/best-of-sql-injection-tool-havij-v115.html">Havij Tool</a> 
At last you can use the all time popular Havij to find admin page.Click on the HAvij Link to know more i have already written a nice post on it. 
<h2>COUNTERMEASURES BY ADMIN</h2>From this post it becomes very clear that if You (site owners) have not changed the 
default URL of your site’s login page then it can easily be compromised if an attacked 
gets the User name and password or even he can brute it.So it is advised that you 
should change the default URL of yours login page to something uncommon which is 
hard to guess like for example: 
www.site.com/glass.php 
www.site.com/myway.php 
 
Thank You For Reading Please share This article if you like and stay tuned for many such tutorial.

How To Find Admin Login Panel Of A Website | Online | Top 7 Ways

Hello Friends this is that post which you might be looking for today i am going to tell you how to find admin panel of a website that you wa...

What is Secure Socket Layer And How hackers can use it ?

Some time back you must have heard about hackers hacking into credit card info,password via public computers.so this post is all about it the secured socket layer what is it actually and how it helps in real life or during money paying transaction time...etc. 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9kS7Ujz_4Jq0gLzCcpnTBL7Ek1LneOCB5CiJrinWGcWxRSSlwZgalnBetVfrcManrJ0UiCkfx5l04kKzuE_vZvc0ABNT3z89XEMh-BtyiTEf-g-4pTAHoZVEeretYJK3STHciaOfKQoyl/s1600/ssl_logo.png" imageanchor="1"><img align="left" alt="secured socket layer" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj9kS7Ujz_4Jq0gLzCcpnTBL7Ek1LneOCB5CiJrinWGcWxRSSlwZgalnBetVfrcManrJ0UiCkfx5l04kKzuE_vZvc0ABNT3z89XEMh-BtyiTEf-g-4pTAHoZVEeretYJK3STHciaOfKQoyl/s320/ssl_logo.png" /></a> 
A hacker can launch various types of attacks such as Packet sniffing(capturing) or ARP Poisoning to steal your sensitive information. 
 
Secure Sockets Layer (SSL) is the most widely used technology for creating a secure communication between the web client and the web server. You must be familiar with http:// protocol and https:// protocol, You might be wondering what they mean. HTTP protocol is used for standard communication between the Web server and the client. HTTPS is used for a secure communication. 
 
<a href="http://www.darksite.co.in/2012/04/what-cryptography-and-steganography.html">Cryptography Click to Know 
</a> 
 
If two users want to have a secure communication they can also use cryptography to accomplish it 
 
Lets take an example: 
 
DARKSITE (Decrypt Text) EBSLTJUF (Encrypted Text) 
 
See the above example i have used simple encryption and decryption Algorithm=+ for the communication and the key is "1", What comes after D is E so as you can see that S is converted into T, What comes After E is F to letter E from the word secure if converted into F and so on, To help you understand this more better I am adding a Video. 
<iframe width="550" height="315" src="http://www.youtube.com/embed/5lD8d8scvWo" frameborder="0" allowfullscreen></iframe> 
So If the hacker starts sniffing from between he will get Encrypted text and as the Hacker does not know the keys so he cant decrypt it, but if the attacker or hacker is sniffing from the starting point so he will get the key and can easily Decrypt the data 
<h2> 
Standard Communication VS Secure communication</h2><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMHy9p87-_iYHwQZcpsDLGeCYWNOEyUQ4CaxFYzhfWv2CkCnPMvSGS7tosl9_eMcMOeghZv0pGz_sljfyiij1XNBgnuGWDjEGLuoCk-tvvTpIKS45ojnoBZJlAlZ-AMGx5D2mYwr4lU4zn/s1600/secure.jpg" imageanchor="1"><img alt="secured connection" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMHy9p87-_iYHwQZcpsDLGeCYWNOEyUQ4CaxFYzhfWv2CkCnPMvSGS7tosl9_eMcMOeghZv0pGz_sljfyiij1XNBgnuGWDjEGLuoCk-tvvTpIKS45ojnoBZJlAlZ-AMGx5D2mYwr4lU4zn/s320/secure.jpg" /></a> 
Suppose there exists two communication parties A (client) and B (server) 
Standard communication(HTTP) 
When A will send information to B it will be in unencrypted manner, this is acceptable if A is not sharing Confidential information, but if A is sending sensitive information say "Password" it will also be in unencrypted form, If a hacker starts sniffing the communication so he will get the password.This scenario is illustrated using the following figure 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjN6r_4pxbmbadQBFXZ44XHMEqrO_0n6VNEUMUSkn_i6jBnd1pmu_QzSjtr8QOUSzGHnI2BTJl-e5s_Oc1tJVxMkdB_EqHTA1zjwWCrE3xoy17524wtDWQEwUgG9ANe7GQp6Vh17eGoCIeC/s1600/http1.jpg" imageanchor="1"><img alt="http connection" height="320" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjN6r_4pxbmbadQBFXZ44XHMEqrO_0n6VNEUMUSkn_i6jBnd1pmu_QzSjtr8QOUSzGHnI2BTJl-e5s_Oc1tJVxMkdB_EqHTA1zjwWCrE3xoy17524wtDWQEwUgG9ANe7GQp6Vh17eGoCIeC/s320/http1.jpg" width="550" /></a> 
Secure communication(HTTPS) 
In a secure communication i.e. HTTPS the conversation between A and B happens to be in a safe tunnel, The information which a user A sends to B will be in encrypted form so even if a hacker gets unauthorized access to the conversion he will receive the encrypted password (“xz54p6kd“) and not the original password.This scenario is illustrated using the following figure 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvKqpVT-oGCIfIWhLIibt898kmaYCVF4NCX7Vykr6vhBfs1To0EH__llIsx8ij_7fwU_bGjaDyYR6f6FCw0NNy19Jh-xUbXeBaEyvJwLuS_6hV9ehLTurnjOc5MqqyN9MG2KWkP2qFkEH0/s1600/https1.jpg" imageanchor="1"><img alt="https connection" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhvKqpVT-oGCIfIWhLIibt898kmaYCVF4NCX7Vykr6vhBfs1To0EH__llIsx8ij_7fwU_bGjaDyYR6f6FCw0NNy19Jh-xUbXeBaEyvJwLuS_6hV9ehLTurnjOc5MqqyN9MG2KWkP2qFkEH0/s320/https1.jpg" width="550" /></a> 
How is HTTPS implemented? 
 
A HTTPS protocol can be implemented by using Secure Sockets Layer (SSL), A website can implement HTTPS by purchasing SSL certificate. 
Which websites need SSL Certificate? 
The websites where a private conversation is occurred, Websites related to online transactions or other sensitive information needs to be protected needs to SSL Certificate 
 
How to identify a Secure Connection? 
 
In Internet Explorer and google chrome, you will see a lock icon in the Security Status bar. The Security Status bar is located on the right side of the Address bar. You can click the lock to view the identity of the website. 
 
If you are making an online transaction through Credit card or any other means you should check if https:// secured communication is enabled.

What is Secure Socket Layer And How hackers can use it ?

Some time back you must have heard about hackers hacking into credit card info,password via public computers.so this post is all about it th...