A Blog About Cyber Technology news updates, Tricks, Tips and Ethical Hacking Tutorials, Gadget Reviews and many more.

Showing posts with label Hacking Tutorial. Show all posts
Showing posts with label Hacking Tutorial. Show all posts

6/13/2021

How to stay Anonymous online in 2021: VPN, TOR, WHONIX & TAILS

 

In many applications including surfing the internet, chatting, sending confidential documents anonymity has become a necessary and legitimate desire. A piece of information can be encrypted by using many encryption techniques, but it will only give you the encrypted content and will not hide your identity because It is still possible to know the source and destination of the communicating end. Anonymity in a business network can be devastating as it can make an organization vulnerable to security risks, liability and potential litigation and it is very useful for your competitor to know your moves. Moreover many renowned big companies like Amazon, Microsoft, and Google have collected your personal information in order to serve up targeted ads.

There is nothing wrong to be anonymous and controlling your own personal privacy if you are doing the legitimate business. Several ways are present to ensure your privacy while browsing the internet.

VPN

VPN is the acronym for the Virtual Private Network, a technology that allows you to connect to one or more computers by using a private network from public internet connection. Your IP (internet protocol) address is the prime identity number that Internet provider assigns your computer to let you go anywhere on the Internet. It’s exactly like the house number on your home. It masks an IP address so all online activities are virtually untraceable from any one. User’s initial IP address is replaced with one from the Virtual Private Network provider so that a communication take place without being tracked, monitored, and identified.

Why VPN is called a network because you’re using a special network of VPN servers that covers the entire globe.

How does VPN Work?

VPN works in a way to bypass censorship by creating a pathway within a client and server ends with different control points through which data packets travel. When using a VPN an encryption and authentication layer is applied to that pathway in order to protect the traffic and data packets travel. Data packets travel through virtual, private and secure channel. This technique is called VPN Tunneling which creates a secure communication channel within network of computers.

How does VPN work

Drawbacks of VPN

For end-device users, VPN might be an easy set up since you just need to download your VPN application and install it on your device but it has the drawback of being monitored from VPN service providers as they allow you to use their private servers in exchange for your data. There have been cases where VPN service providers are monitoring the data from their users for their own benefits in that way your communication is not all private but be monitored by service providers.

What is TOR?

The Onion Router (TOR) is a free and open-source software for enabling anonymous communication. It is designed to stop people tracking your browsing habits including government agencies and corporations. The name (The Onion Router) refers to the way that Tor protects your data by wrapping it in multiple layers of encryption like an onion.

How does TOR work?

TOR Browser routes all web traffic through the TOR network, making it anonymous. As the image below shows, TOR consists of a three-layer proxy, like layers of an onion. At first, TOR Browser connects at random to one of the publicly listed entry guards, bounces that traffic through a randomly selected middle relay, and finally directed the traffic through the third and final exit relay.

how does tor work

Drawbacks of TOR

One of the drawbacks of TOR browser is that your ISP can see that you’re connected to TOR hence it can draw attention to you. Although, your ISP can’t see your activities but it will raise suspicion about what you’re doing.

Another drawback of using TOR browser is that it only hides traffic going through TOR network and won’t anonymize other apps on your computer hence not completely giving the concept of anonymity.

WHONIX OS

Whonix is a Debian based Linux operating system used to provide anonymity, privacy and security on browsing the Internet. It consists of two main components i.e. Whonix workstation and Whonix gateway.

Both components are VirtualBox virtual machine appliances, so as to run it on any operating system that has VirtualBox.

How Does Whonix Work?

At first the Whonix workstation and gateway are configured on host machine. Workstation consists of the desktop application, routes all of its traffic to the gateway which is connected to the workstation. The gateway is further connected to the TOR network for accessing the internet. Whonix gateway is the only way for the workstation to transmit the information through internet because the workstation is an isolated machine and it has no idea about its own host IP and configuration.

From the image we can see that all the traffic that is directed through the gateway is TORrified while the traffic from the host machine in non TORified.The host machine does not participate in the Whonix private network and that is why continues to use its normal internet connection.

how does whonix work

It is a huge advantage of isolating the workstation from a network to keep an IP address private even if any application in a Whonix workstation is compromised, it is almost impossible to reveal your IP because it does not know your IP.

Drawbacks of Whonix

Although Whonix provides transparency of your IP address, it has a notable disadvantage in terms of physical security. If your host machine is ever compromised, all the stored personal information and your internet browsing activity could be discovered easily.

TAILS Linux OS

If your goal is to leave no trace of every activity you did on the host machine then choose Tails. Tails or The Amnesic Incognito Live System is a live Debian based linux operating system that aims to provide privacy and anonymity. You can start TailsOS on almost any computer from a USB stick or a DVD. Tails sends its traffic by using TOR network, leaving no trace on the system you are using.

Live means it runs on the medium typically a USB, immediately upon starting the system. The entire operating system lives on that USB. All you have to do is first download the live operating system, write it on a USB, insert it to the system, after turning it on you will get a live operating system simply boots from a USB device.

tails OS linux

The portability of TailsOS solves the problem of physical security as if your USB device ever gets lost or compromised, there will be no personal information present on that USB as well as the system on which you have inserted that USB and nothing can be learned about your specific usage.

And The Winner Is?

As we have seen there are many techniques and tools available to hide a person’s identity while browsing the internet. The above mentioned techniques provide anonymity at some point and has some notable drawbacks which can lessen the degree of anonymity so by comparing VPN, TOR, WHONIX and TAILS, the technique that is said to be the best practice for providing complete anonymity as well as safe and secure communication is TAILS as it gives you complete security for traffic transmission, privacy of identity and the physical security.

Subscribe Us On Youtube : Subscribe

So we hope you’ve learned something new today. So stay on safe side and use this information just for educational purpose. Join Our Telegram Channel for More Hacking Tutorials. 

6/16/2020

10 Most Common Sources of Computer Viruses Infection in India 2020

9 types of malware and how to recognize them | CSO Online


10 Most Common Sources of Computer Viruses Infection in India:

No one wants to infect system with viruses or malwares, isn’t it? However, to protect oneself effectively, one must know the probable sources of viruses and malwares. Therefore, in this write-up we list down the most common ways to attract viruses/ malwares. 

Source 1: Inserting or connecting an infected disc, pen-drive etc.
Inserting an infected pen-drive, disc is one of the most common sources of virus in devices. As long as something is writable, a virus can move from a computer to that disc, disk, drive etc. The same rule applies to any networked drive or computer. If another computer has write access to your computer or a drive is accessible by your computer, a virus can move between computers on a network. 

Source 2: Opening attachment or links from unknown sources. 
In these cases, the messages are tailored to make it “click bait”. As soon as you click it, instead of performing benign functions, it impacts the system adversely. Further, emails can be spoofed to make it appear legitimate, to make even professionals fall for it. Make sure, you don’t click on any link or open any attachment sent by strangers. 
As a general rule, don’t open emails you were not expecting to receive in your inbox. Even if the message is from known ones, always use caution before opening a link or downloading an attachment, as emails can be spoofed easily. 

Source 3: Downloading soft-wares from malicious sites.
Viruses are prevalent all over the internet, and can be sourced even when downloading software from trusted sources. However, in general, downloading questionable files, or from inappropriate website can lead you to trouble. 
A malicious website may also have the capability to read files on the computer, transfer malicious files to device, or access sensitive personal information.  

Source 4: File Sharing.
Using BitTorrent, users download media via peer-to-peer file sharing. However, these files tend to travel across multiple devices, which may not have security softwares, so can be laden with viruses. Also, hackers tend to setup fake files on these networks, which are actually malware in disguise.  

Source 5: Phishing.
The emails are disguised to fool the user into taking an action not in their best interest like clicking a link that installs malware. A tactic commonly used in phishing is to make a link appear legitimate, but redirect the user to a different page whose URL closely resembles the URL of the legitimate website. 

Source 6: Online Ads.
Malicious online ads also known as Malvertising, is another source to infect your device with malwares. In fact, it hardly leaves any trace or realization. Criminals often place clean ads on trusted website and leave them, to gain popularity. Thereafter, they insert malicious codes in the ads to infect devices, when clicked. 

Source 7: Bundled Free Software Programs.
You might have heard the saying, “There are no free lunches”. 
Frequently, free software companies partner with other companies and bundle additional software within the download. The additional download can transfer data and information from the system, capture your behavior, steal sensitive data etc. 

Source 8: Scareware.
They are also known as rogueware. It’s a malware that masquerades itself as internet security software. The user is notified falsely with pop-ups that their system is infected with malwares. It then shows a link to “clean up” the malware. Once the gullible user clicks on it, the system gets compromised with malware/ viruses.  

Source 9: Adult Websites.
Much like Torrents sites, website serving adult material often contain malwares and viruses. The content can be in the form of material downloaded or served by just visiting in the form of “Malvertising”. 

Source 10: Accepting without reading.
Users accepting what they see on their screen without reading the prompt, is one of the most common ways to infect devices with malwares.
While installing a program, if you given the options between an automatic and custom install, select custom install to make sure nothing else is added or changed during the installation process.  

Conclusion:
Given the threat that malwares and viruses poses, you must change your browsing and internet behavior to remain safe and secure. For example, make sure that you download soft-wares only from reliable sources. Also, run your downloads through your anti-virus and anti-malware scanners upon completion. During the installation process, read all the prompts carefully. 

5/25/2020

How To Find Someone Phone Number On Facebook

Today in this tutorial am going to tell you how to find someone's phone number and email on Facebook

As you know, Facebook brings changes and people are hiding their Phone numbers and email from Facebook Profiles, so that we cannot see their phone numbers and email without asking them

But today I will tell you a trick to extract their phone number and email address information using Termux

how to find someone phone number on facebook

Firstly you must have basic knowledge of how to use Termux, if not then read our tutorial on how to use Termux for ethical hacking


Before we proceed, there are some things that you need to keep in mind in order to find phone number on facebook

  • By using this trick, you can see phone number and email address of your friends list
  • You can extract even if they hidden their phone & email from public profile
  • Only you have to know is make sure the person in your friends list whom info you're gonna extract

Now let's gets started,

Fbi Termux


you can use this tool in Windows, Mac and Kali Linux but this time we are using the tool Termux

Firstly Download and install Termux from Playstore

After installing

Now Type Below command

 apt update && apt upgrade

Then type

 pkg install python2

Then type

 pkg install git

Then type

 git clone https://github.com/xHak9x/fbi.git

Now type

 cd fbi

Then type

 pip2 install -r requirements.txt

Finally type

 Python2 fbi.py

Then type help to get the help menu
Now you have to create access token
For that type token

Then type your Facebook login ID and password then you will see a list of commands to dump your friends email, phone numbers list

Eg: how to find friends email on facebook use dump_mail

dump_phonelist for phone numbers on facebook

After executing the commands you will get the info in a txt file

To read the .txt file You can install nano in Termux by typing pkg install nano

Also you can use FacebookToolkit, Osif similar tool to fbi

Thanks for reading,

Note that this tutorial is only for educational purpose only, and we are not responsible for any misuse

5/24/2020

How To Hack WiFi Password In 2020 ( Ultimate Guide)

How to hack WiFi password 
Hey guys, Today in this tutorial am going to teach you how to hack WiFi Password.

The Exact Process I personally use to Hack my neighbours WiFi, college's WiFi and  many other password protected WiFi.

How to use Google Dorks

A Google dork query, sometimes just referred to as a dork, is a search string that uses advanced search operators to find information that is not readily available on a website.

Google dorking, also known as Google hacking, can return information that is difficult to locate through simple search queries. That description includes information that is not intended for public viewing but that has not been adequately protected. 


                                Google hacking (dorking) tutorial #1 - ITBlogSec.com

( Google Dorks ka simply mtlb hota h, Google main advance level ka search krna

 

eg. agar aap normal search krte ho "Movies" google pr toh vo websites dikhayega jinhone ranking kri hui h lekin Google Dorks se aap advance level ka search kr sakte ho

 

eg. vo search result apke hisaab se dikhayega, agar aap chahte ho ye dekhna

 

ki konsi website ke name main movie word aata h or konsi website ke title main sirf movie aata h, apke hisaab se he search result show krega Google isme ) 



Google Dorks live example ==>

intitle:
inurl:
intext:
define:
site:
phonebook:
maps:
book:
info:
movie:
weather:
related:
link:

 

Step #1 => go to Google.com

 

and Search

 

intitle:movies

 

and Google will only show search results which are having Movies keyword as Title on website 

eg. 

 

site:facebook.com +91

and similarly site: and other dorks you can use

eg. If you want to search anything inside a web


eg. 

 

site:facebook.com +91

 


sirf ye search krke dekho

aaj iss trah baaki sabh search krke dekho and ye sabh commands use kro


Best Hacking Apps For Android (2020 Update)

                              Best Hacking Apps For Android
 
Now Days Android Smart Phones Became Much Popular because of its Awesome features and also Cheaper than other Smart Phones,

As we know Android Is a Linux Based OS, and Its Hardware is Designed to Perform New Kind Of Tasks when We Root Our Device
Today Android Smart Phone became a Mini Hacking Device

We can Perform Several Hacking, Pentesting tasks From Our Smart Phone With the help of some Android Apps,

In this post am going to tell you the best hacking apps for android which you can use to do some basics of hacking through your smartphone, But some of the Apps requires Root Access,

Best Hacking Apps For Android

In this Article i have Presented some Of The Top Android Hacking Apps Used by Hackers, Pentesters, Security Researchers, and also by Script Kiddies and Noobs, that are for Root Users, still non Root Users can use some of the apps

The First one is Nmap


As we Know Nmap is a Popular Tool Designed for Network Mapping, though this app Is Not The Official App Of Nmap Still We can use it For Several Tasks

2. The second one is Zanti
                                                            New zANTI: Mobile Penetration & Security Analysis Toolkit


Zanti Is a WiFi Network Vulnerability Scanner ,it has So many Mitm Tools,
With this tool we can perform some MITM attacks over a WiFi network

3. The third one is Wps Wpa Tester


This Apps is Used To Test your Router's Weakness ,

With this App we can Connect to any WPS enabled WiFi Network within 2 minutes
Similarly WpsConnect is also used For The Same

How To Be A Computer Hacker | Beginner Guide

We can call this era as Cyber Era, Not Because of the Cyber Attacks, because of its advantages and massive growth of technology,


People showing more enthusiasm towards Hacking & Cyber Security, and there isn't any single reason behind it,


You might probably watch movies where Hackers are doing a lot of cool stuff like hacking into banks and stealing millions and tracking people, finding out their information


But Wait..!

Hackers usually different than you see in the Movies, Some people often judge Hackers as Real Hackers and Fake Hackers


That's isn't a big issue 😉


By the end of the post, you will get a clear picture of what is Hacking and how you can be a hacker


I came across many people, they often think to be a hacker, they think hacking is just like playing games with the PC but it's not like that


However people sometimes fall in confusion, they wanted to be a hacker but due to lack of knowledge they even ask where to start from and how


If you're too in the same situation, and you're too wondering how to be a computer hacker then this post may be good to go with, I will share the step by step guide along with my personal experience

how to be a computer hacker

Before we begin some key points you have to keep in mind,

  • What Does Hacking mean
  • Hackers
  • Types of Hackers


What is Hacking?


What is Hacking


When some people hear the term "Hacking" they usually think this matrix effects and blindly say this is Hacking,
While others think stealing bank account balance is Hacking, defacing websites is Hacking


Don't get confused, Hacking is not like that you see in the movies

In reality, it's quite different

There is no single definition for Hacking, you may find different definitions on the internet


Don't be confused, let me tell you what hacking is and how to be a computer hacker


In simple words, Computer hacking is a process of getting unauthorized access to any Computer by breaking its security

I mean breaking computer security is Hacking


It can be hacking into digital devices, spreading malware, stealing bank logs and so, it has no particular branch, it has several branches and several types of Hacking,


We can discuss it later



Let's see who are the Hackers and what do they do

How to use Telegram Scraper in Termux

Hello guys,

Today in this post, am back with another Termux tutorial

In this post, I am going to tell you how to install and use Telegram Scraper Tool in Termux

As you know Telegram is a popular social messaging platform with millions of active users worldwide

5/18/2020

Top 10 SQL Injection Tools : A Hacker Must Try

Top 10 SQL injection tools
SQL injection is a type of code injection that an attacker can access the database by sending malicious SQL statements in the login fields or by requesting some sort of data in the GET and POST Methods

SQL injection is the most common web vulnerability that allows an attacker to enter into databases, this vulnerability allows the attacker to modifying and dumping the database,

This vulnerability is the most critical web vulnerability at all, it is listed in the Top 10 vulnerabilities by The OWASP,

According to the recently released report by Shodan there some large Organizations are vulnerable to this attack

Shodan report


Most of the Companies paying higher bug bounties for finding this vulnerability, if you're a Hacker, Pentester or a Security Researcher then you might probably know about What SQL injection is,

But the most challenging part as a Hacker or as a Bug Hunter is finding those Sql injection vulnerability in multiple targets in a certain time, sometimes we feel its a though part, for that we have to use sql injection testing tools

So today in this post we are presenting the top 10 SQL injection tools, which are the best tools for finding sql injection vulnerabilities

Top 10 SQL injection tools

Here is the best sql injection tools list
  • Sqlmap
  • Burp Suite
  • SQL Dumper
  • Owasp
  • Netsparker
  • Acunitex
  • Arachni
  • Hackbar Firefox Extension
  • Havij
  • Nesus

Most of the tools are available for Kali Linux, if you want to use them in windows then there is a possibility that you can

If you're completely newbies to these tools, then let me explain them one by one

Sqlmap:

Sqlmap is the most powerful sql injection tool for finding SQL injection and database takeover, the tool was written in Python 2.7, it is also a best automated sql injection tool with multi thread support
It's a Open Source Project available at github

Burp suite:

Burp Suite is one of the best automated sql injection tool, but its a Paid tool, its also available for Windows, Linux and Mac, if you're looking for a sql injection tools for windows than you can choose it

Recommended Reading: Burp Suite Tutorial For Beginners

SQL Dumper

SQL Dumper is also a powerful SQL injection tool, this tool is similar to havij, this tool also available for Windows 10, if you're looking for Windows tools then its a good choice.

OWASP ZAP

OWASP Zed Attack Proxy is one of the popular sql injection tools, it's a good tool for both Automatic Scanning and Manual Testing, Its a Open Source Project by OWASP, this a good tool to scan web application vulnerabilities

Netsparker

Netsparker is one of the best automated sql injection tool, its a good tool for finding web app vulnerabilities and automating scans

Acunitex

This tool is one of the most powerful sql injection tool, this tool is a all in one web vulnerability scanning tool, this tool is helpful for detecting different types of web vulnerability in any web apps

Arachni

Its a Powerful Web application Scanning Framework in Ruby, this tool is compatible for Windows, Linux and Mac

This is a Open Source Tool, you can Download it on their official site

Havij Tool:

Havij is one of the popular sql injection tools, it is a GUI tool, if you're looking for best sql injection tools for windows then this one is good for you, its a advanced tool and it is widely used by crackers

Hackbar Firefox Extension

This is one of the advanced sql injection tools, its a good tool for manual SQL injection testing, but its a Browser Extension that comes with handly tools such as string Encoding, Decoding, WAF Bypassing, and many other handly SQL injection exploits

Recently some people reported that this tool is not working properly for the Firefox version higher than 40
You can try this extension Hackbar Tool for SQL injection testing

Nessus

This tool is also a best automated sql injection tool for Windows, that supports modern technology web app, you can get a free demo of this tool on their website

Conclusion

Hope you guys found this article useful, we tried our best to present the best tools for finding sql injection vulnerabilities,

These are the most popular SQL injection tool, still there are lot of best tools, so don't limit yourself keep testing them,

If you think anything is missed then feel free to leave your feedback