Tuesday, 5 September 2017

Points on hacking

Harry

So after a long time these are the  common terms used in the hacker community. These definitions are a must to a wanna be ethical hacker and helps a lot for a programming enthusiast.

Common Terms Of Hacking World:

1#DDoS: DDoS  means Distributed Denial of Service. This is a type of DOS attack in which multiple compromised systems are used and these systems are often infected with a Trojan. All these infected systems select a target and cause a Denial of Service (DoS) attack.

2# VPS: It stands for Virtual private server (VPS) . It is a virtual machine that is sold as a service by an Internet hosting service. A VPS generally runs its own copy of an operating system, and the customers have superuser-level access to that operating system instance, so they can install almost any software that runs on that OS.

3# SE: Social engineering is an attack vector that relies heavily on human interaction and often involves tricking people into breaking normal security procedures.

4# HTTP: The Hypertext Transfer Protocol (HTTP) is an application protocol for  collaborative, distributed, hypermedia information systems. HTTP is the basis of data communication for the World Wide Web. The part  Hypertext is a structured text that makes use of logical links (hyperlinks) between nodes containing text.

5# SSH: Secure Shell( SSH)  is a cryptographic i.e, encrypted network protocol that operates at layer 7 of the OSI Model. It allows remote login and other network services to operate in a secure way over an unsecured network. In simple words, SSH is used to connect with Virtual Private Servers.

6# FTP: The FTP or File Transfer Protocol is a standard network protocol that is used to transfer files between a client and server using a computer network.

7# XSS (CSS): Cross-site scripting or XSS is a type of computer security vulnerability usually found in web applications. This vulnerability allows hackers to inject client-side script into web pages which are viewed by other users.

8# Script Kiddie: A Skiddie or Script Kiddie is an unskilled individual who uses programs or scripts developed by other hackers to attack networks and computer systems even to deface websites.

8# VPN: A Virtual Private Network or VPN helps in extending a private network across a public network, such as Internet. It allows the users to send and receive data across public or shared networks just like their computing devices are directly connected to the private network. Hence this benefit from the security, functionality and management policies of the private network.

10# Nix: Nix is a very powerful package manager for Linux and other Unix based systems that make package management reproducible and reliable. It provides side-by-side installation of multiple versions of a package, atomic upgrades and rollbacks,  easy setup of build environments and multi-user package management.

11# SQL:  Structured Query Language or SQL is a special-purpose programming language designed for managing data contained in a relational database management system (RDBMS), or even for stream processing in a relational data stream management system or RDSMS.

12# FUD: Fully undetectable or FUD in short, can stand for data that had been encrypted, making it appear to be random noise. This term is used in hacker circles to refer something as a clean software to many anti-viruses but still contain some kind  of hacking tool inside it.

13# LOIC/HOIC: The Low Orbit /High Orbit Ion Cannon, often abbreviated to LOIC/HOIC. It is an open source denial-of-service attack and network stress testing application written in BASIC and is designed to attack as many as 256 URLs at a time.

14# Trojan: A Trojan or Trojan horse is a type of malware that disguises itself as a legitimate software. these Trojans can be employed by hackers and cyber-thieves trying to gain access to users’ systems. Users are typically tricked  into loading and executing Trojans on their systems.

15# Botnet: A botnet (also known as a zombie army) is a number of Internet computers that, although their owners are unaware of it, have been set up to forward transmissions (including spam or viruses) to other computers on the Internet.

16# SQL Injection: SQL injection is a famous code injection technique, commonly to attack data-driven applications.In this attack, malicious SQL statements are inserted into an entry field for execution.

17# Root: Root is the Highest permission level on a computer that allows the user to modify anything on the system without a  single restriction.

18# Warez: Warez is copyrighted works distributed without fees or royalties, and may be traded, in general, violation of copyright law. Warez are generally unauthorized releases by organized groups, as opposed to file sharing between friends or large groups of people with similar interest using a darknet. Warez are not usually commercial software counterfeiting.

19# White Hat Hacker: A white hat hacker is a computer security specialist ( ethical hacker ) who breaks into secured systems and networks to test and assess their level of security. These are the good guys in the hacking community and use their skills and knowledge to to improve security by exposing vulnerabilities before a malicious hacker (also known as black hat hackers) detects and exploits them.

20# Black Hat Hacker: A black hat hacker is an individual with very good computer knowledge and with a sole purpose to bypass or breach internet security for malicious reasons. Black hat hackers are also known as dark-side hackers or crackers. These are the guys with whom White hat hackers have to fight all the time.

21# Grey Hat Hacker: The term Grey Hat hacker refers to a computer hacker or computer security expert who sometimes violate laws or typical ethical standards, for personal purposes but don’t have the malicious intentions like a typical black hat hacker.

22# Rootkit: A rootkit is a clandestine computer program designed to provide continued privileged access to a computer while actively hiding its presence. The term rootkit is a connection of the two words “root” and “kit”. This kind of virus can be easily removed by booting the computer in safe mode.

23# Ring0: Very hard to remove and very rare in the wild, these can require you to format, it’s very hard to remove certain ring0 rootkits without safe mode.

24# IP Grabber: IP Grabber is a link that grabs victim’s IP when they visit it the particular web address.

25# Malware: ‘Malware’ is an umbrella term used to refer to a variety of forms of hostile or intrusive software, including computer viruses, worms, trojan horses, ransomware, spyware, adware, scareware, and other malicious programs. It can take the form of executable code, scripts, active content, and other software.

26# Phreak: Phreak is a slang term coined to describe the activity of a culture of people who  experiment with, explore, or study, telecommunication systems. Phreaker, phreak, or phone phreak are names commonly for and by individuals who participate in phreaking.

27# DOX: Doxing or doxxing, is the Internet-based practice of researching and broadcasting personally identifiable information about an individual. The methods employed to acquire this information include searching publicly available databases and social media websites (like Facebook), hacking, and social engineering. It is closely related to internet vigilantism and hacktivism. Doxing may be carried out for various reasons, including to aid law enforcement, business analysis, extortion, coercion, harassment, online shaming and vigilante justice.

28# Worm: A computer worm is a standalone malware computer program that replicates itself in order to spread to other computers. Often, it uses a computer network to spread itself, relying on security failures on the target computer to access it. Unlike a computer virus, it does not need to attach itself to an existing program.

29# Deface: A website deface is an attack on a site that changes the appearance of the site or a certain web page or technically when a hacker replaces the index file with their own one.

30# Keylogger: Keylogger is a computer program that records every keystroke made by a computer user, especially in order to gain fraudulent access to passwords and other confidential information.

31# RAT: A remote administration tool (RAT) is a piece of software that allows a remote “operator” to control a system as if he has physical access to that system. While desktop sharing and remote administration have many legal uses, “RAT” software is usually associated with criminal or malicious activity.

source: Hackagon.

Did you like the article on hacker terms ? Please share it with your friends and let them know this information.

If you happen to find any mistakes n the article, comment below. I will be happy to address them.

Sunday, 3 September 2017

Professional Pen-Testing For Web Application

Harry


DISCLAIMER: Following data/info/files are not owned/made/uploaded by latesttrickes On our last article about a lot of people asked about  Computer Hacking and this book is best for learning about Professional Pen testing For Web Application.

Index

Penetration Testing Web Applications
Web Applications—Some Basics
Discovery
Vulnerability Analysis
Attack Simulation Techniques and Tools—Web Server
Attack Simulation Techniques and Tools—Web Application
Attack Simulation Techniques and Tools—Known Exploits
Attack Simulation Techniques and Tools—Web Services
Documentation and Presentation
Remediation
Your Lab
Basic SQL
Basic LDAP
XPath and XQuery

Injection Attack 






About the Author

Andres Andreu, CISSP-ISSAP, GSEC currently operates neuroFuzz Application Security LLC (http://www.neurofuzz.com), and has a strong background with the U.S. government. He served the United States of America in Information Technology and Security capacities within a “3-Letter” federal law enforcement agency. The bulk of his time there was spent building the IT Infrastructure and working on numerous intelligence software programs for one of the largest Title III Interception Operations within the continental U.S. He worked there for a decade and during that time he was the recipient of numerous agency awards for outstanding performance.

He holds a bachelor’s degree in Computer Science, graduating Summa Cum Laude with a 3.9 GPA from the American College of Computer and Informational Sciences. Mr. Andreu specializes in software, application, and Web services security, working with XML security, TCP and HTTP(S) level proxying technology, and strong encryption. He has many years of experience with technologies like LDAP, Web services (SOA, SOAP, and so on), enterprise applications, and application integration.




DOWNLOAD NOW

Sunday, 27 August 2017

Auto Start wampserver On Windows 10 Startup Automatically

Harry

Before I show you how to auto start wampserver, I’ll talk about it a bit.

Wampserver is one of the best stacks for web development on the Windows platform. I prefer it over xampp because of the handy tray menu that lets me access any configuration.

You can download wampserver from this website wampserver

The problem

Recently I’ve tried installing wampserver on Windows 10, and it went well but there was a little problem.

When I tried to auto start wampserver at Windows 10 startup, I put the wampserver shortcut in this path

C:\Users\YourUserName\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup

I found that wampserver did not autostart with Windows.

I searched the web for a solution for that problem and I found the following:

The first solution suggests putting the wampserver shortcut on the above-mentioned path and as I told you that does not auto start wampserver.

The second solution suggested enabling the wampapache service and wampmysqld services from Windows services.

Go to Control Panel and type services in the search box, and it will open the services like this:

wampserver services
wampserver services

Select wampapache and set the startup type to automatic and do the same for wampmysqld and hit OK. When you reboot your machine, you will notice that both apache and MySQL work.

wampserver-service-startup-type
wampserver-set-service-startup-type

So now I can auto start wampserver and everything is good.

Unfortunately, That solution does not show wampserver tray menu on the bottom.

wampserver-tray-menu
wampserver-tray-menu

Most of the wampserver users use it because they can quickly access everything from that tray menu including PHPMyAdmin, the www folder, PHP, Mysql and Apache configurations.

So I discovered the solution and I’d like to share it with you.

The Solution is to disable the UAC on Windows in order to make the program autostart with Windows.

If you go to Windows control panel and select user account control settings and change it to never notify that won’t work too.

disable-UAC

The Solution

The solution is a bit tricky but super easy.

Because what we have done to disable the UAC does not disable it completely and in order to disable UAC you have to disable it from the registry.

Just type regedit in the Windows menu search and go to this node:

regedit-to-disable-UAC

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

auto start wampserver
auto start wampserver

You will find a key named EnableLUA, set it’s value to zero and it will prompt you to restart the system.

You can save the following text as .reg file and run it as administrator and it will do the same job.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
“EnableLUA”=dword:00000000

Keep in mind that disabling the UAC (User Access Control) is not a good idea, you may harm the system, but I suppose that you know what you are doing.

 

Friday, 25 August 2017

Battlefield 1

Harry






Minimum System Requirements


OS: 64-bit Windows 7, Windows 8.1 and Windows 10
Processor (AMD): AMD FX-6350
Processor (Intel): Core i5 6600K
Memory: 8GB RAM
Graphics card (AMD): AMD Radeon HD 7850 2GB
Graphics card (Nvidia): Nvidia GeForce GTX 660 2GB
DirectX: 11.0 Compatible video card or equivalent
Hard-drive space: 50GB

Recommended System Requirements


OS: 64-bit Windows 10 or later
Processor (AMD): AMD FX 8350 Wraith
Processor (Intel): Intel Core i7 4790 or equivalent
Memory: 16GB RAM
Graphics card (AMD): AMD Radeon RX 480 4GB
Graphics card (Nvidia): Nvidia GeForce GTX 1060 3GB
DirectX: 11.1 Compatible video card or equivalent
Available Disk Space: 50GB

Download UTorrent


Download Winrar


Download Power ISO


Download Direct X 11


Download The Game Here

Thursday, 24 August 2017

How to install Krita 3.2.0 released on Ubuntu 16.04, 17.04

Harry
   Krita is a professional FREE and open source painting program. It is made by artists that want to see affordable art tools for everyone.

  •     concept art
  •     texture and matte painters
  •     illustrations and comics

Krita 3.2.0 Changelog:
  • Don’t reset the LUT docker when moving the Krita window between moitors
  • Correctly initialize the exposure display filter in the LUT docker
  • Add the missing pan tool a ction
  • Improve the “Normal” blending mode performance by 30% (first patch for Krita by Daria Scherbatyuk!)
  • Fix a crash when creating a second view on an image
  • Fix a possible crash when creating a second window
  • Improve finding the gmic-qt plugin: Krita now first looks whether there is one available in the same place as the Krita executable
  • Fix scroll wheel behaviour if Krita is built with Qt 5.7.1. or later
  • Fix panning in gmic-qt when applying gmic-qt to a non-RGBA image
  • Scale channel values correctly when using a non-RGBA image with gmic-qt
  • Fix the default setting for allowing multiple krita instances 

Installation instructions:

   
Add the PPA to your system, update the local repository index and install the Krita package:

$ sudo add-apt-repository ppa:kritalime/ppa

$ sudo apt-get update

$ sudo apt-get install krita
    Optional, to remove Krita, do:

 $ sudo apt-get install ppa-purge && sudo ppa-purge ppa:kritalime/ppa


refer original : https://howto-ubuntunew.blogspot.com/