sexta-feira, 26 de maio de 2023

DSploit

DSploit

After playing with the applications installed on the Pwn Pad, I found that the most important application (at least for me) was missing from the pre-installed apps. Namely, DSploit. Although DSploit has tons of features, I really liked the multiprotocol password sniffing (same as dsniff) and the session hijacking functionality.

The DSploit APK in the Play Store was not working for me, but the latest nightly on http://dsploit.net worked like a charm.

Most features require that you and your target uses the same WiFi network, and that's it. It can be Open, WEP, WPA/WPA2 Personal. On all of these networks, DSploit will sniff the passwords - because of the active attacks. E.g. a lot of email clients still use IMAP with clear text passwords, or some webmails, etc. 

First, DSploit lists the AP and the known devices on the network. In this case, I chose one victim client.


In the following submenu, there are tons of options, but the best features are in the MITM section. 


Stealthiness warning: in some cases, I received the following popup on the victim Windows:


This is what we have under the MITM submenu:


Password sniffing

For example, let's start with the Password Sniffer. It is the same as EvilAP and DSniff in my previous post. With the same results for the popular Hungarian webmail with the default secure login checkbox turned off. Don't forget, this is not an Open WiFi network, but one with WPA2 protection!


Session hijack

Now let's assume that the victim is very security-aware and he checks the secure login checkbox. Another cause can be that the victim already logged in, long before we started to attack. The session hijacking function is similar to the Firesheep tool, but it works with every website where the session cookies are sent in clear text, and there is no need for any additional support.

In a session hijacking attack (also called "sidejacking"), after the victim browser sends the authentication cookies in clear text, DSploit copies these cookies into its own browser, and opens the website with the same cookies, which results in successful login most of the time. Let's see session hijacking in action!

Here, we can see that the session cookies have been sniffed from the air:


Let's select that session, and be amazed that we logged into the user's webmail session.




Redirect traffic

This feature can be used both for fun or profit. For fun, you can redirect all the victim traffic to http://www.kittenwar.com/. For-profit, you can redirect your victim to phishing pages.


Replace images, videos

I think this is just for fun here. Endless Rick Rolling possibilities.


Script injection

This is mostly for profit. client-side injection, drive-by-exploits, endless possibilities.

Custom filter

If you are familiar with ettercap, this has similar functionalities (but dumber), with string or regex replacements. E.g. you can replace the news, stock prices, which pizza the victim ordered, etc. If you know more fun stuff here, please leave a comment (only HTTP scenario - e.g. attacking Facebook won't work).

Additional fun (not in DSploit) - SSLStrip 

From the MITM section of DSploit, I really miss the SSLStrip functionality. Luckily, it is built into the Pwn Pad. With the help of SSLStrip, we can remove the references to HTTPS links in the clear text HTTP traffic, and replace those with HTTP. So even if the user checks the secure login checkbox at freemail.hu, the password will be sent in clear text - thus it can be sniffed with DSniff.

HTML source on the client-side without SSLstrip:


HTML source on the client-side with SSL strip:


With EvilAP, SSLStrip, and DSniff, the password can be stolen. No hacking skillz needed.

Lessons learned here

If you are a website operator where you allow your users to login, always:
  1. Use HTTPS with a trusted certificate, and redirect all unencrypted traffic to HTTPS ASAP
  2. Mark the session cookies with the secure flag
  3. Use HSTS to prevent SSLStrip attacks
If you are a user:
  1. Don't trust sites with your confidential data if the above points are not fixed. Choose a more secure alternative
  2. Use HTTPS everywhere plugin
  3. For improved security, use VPN
Because hacking has never been so easy before.
And last but not least, if you like the DSploit project, don't forget to donate them!

More articles


Postado por às Nenhum comentário:

WHO IS ETHICAL HACKER

Who is hacker?
A hacker is a Creative person and a creative Programmer,who have knowledge about Networking,Operating system,hacking & a best creative social engineer who control anyone's mind he is also a knowledgeable person.
Hacker are the problem solver and tool builder.

                                OR

A hacker is an individual who uses computer, networking and other skills to overcome a technical problem but it often refers to a person who uses his or her abilities to gain unauthorized access to system or networks in  order to commit crimes. 


Read more

Postado por às Nenhum comentário:

Top Process Related Commands In Linux Distributions


Commands in Linux are just the keys to explore and close the Linux. As you can do things manually by simple clicking over the programs just like windows to open an applications. But if you don't have any idea about commands of Linux and definitely you also don't know about the Linux terminal. You cannot explore Linux deeply. Because terminal is the brain of the Linux and you can do everything by using Linux terminal in any Linux distribution. So, if you wanna work over the Linux distro then you should know about the commands as well. In this blog you will exactly get the content about Linux processes commands which are are given below.

ps

The "ps" command is used in Linux to display your currently active processes over the Linux based system. It will give you all the detail of the processes which are active on the system.

ps aux|grep

The "ps aux|grep" command is used in Linux distributions to find all the process id of particular process like if you wanna know about all the process ids related to telnet process then you just have to type a simple command like "ps aux|grep 'telnet'". This command will give you the details about telnet processes.

pmap

The "pmap" command in Linux operating system will display the map of processes running over the memory in Linux based system.

top

The "top" command is used in Linux operating system to display all the running processes over the system's background. It will display all the processes with process id (pid) by which you can easily kill/end the process.

Kill pid

Basically the kill command is used to kill or end the process or processes by simply giving the process id to the kill command and it will end the process or processes. Just type kill and gave the particular process id or different process ids by putting the space in between all of them. kill 456 567 5673 etc.

killall proc

The "killall proc" is the command used in Linux operating system to kill all the processes named proc in the system. Killall command just require a parameter as name which is common in some of the processes in the system.

bg

The "bg" is the command used in Linux distributions to resume suspended jobs without bringing them to foreground.

fg

The "fg" command is used in Linux operating system to brings the most recent job to foreground. The fg command also requires parameters to do some actions like "fg n" n is as a parameter to fg command that brings job n to the foreground.Related word
Postado por às Nenhum comentário:

quinta-feira, 25 de maio de 2023

The Live HTML Editor


Download Now

The Live HTML Editor program lets you write your HTML pages while viewing dynamically what changes are happening to your HTML page. The main purpose of this tool is to help HTML learners learn HTML quickly and easily while keeping an eye on what they are doing with their HTML page. It also helps developers in writing quick HTML lines to see how it will affect their HTML page.

This program can also help you visualize your inline and embedded CSS styles on fly. You can apply CSS styles and see them dynamically change the look and feel of your HTML page. Developers can test different inline and embedded CSS styles to make sure what will look good on their website.

Some of the features of this program are:
  •          Live HTML preview of whatever HTML you type.
  •          Supports HTML Syntax Highlighting.
  •          Supports opening an HTML file and Live Preview editing of that file.
  •          Supports Saving files.
  •          Support for inline and embedded CSS.

However this program does not support Javascript and it also doesn't support separate CSS files. This program is still in development phase and we might see support for Javascript and separate CSS files in the future.

If you are a student and want to learn HTML without having to install a bulky software that takes a lot of time to open and function, then this is a good option.

 The Live HTML Editor is Free and Opensource project and has been written in Python with QT interface you can check out source from sourceforge.
Related links
Postado por às Nenhum comentário:

A Glowing Review

 I don't generally do game reviews, but every once in a while I come across a game that interests me in one way or another, and I spend some time thinking about it. Most recently this applies to a game I found on BoardGameArena.com -- 2021's Glow, by Cédrick Chaboussit.

Glow is a "stylish" looking game, with a unique theme, and bold, black and white cover art: 


To be frank, I don't care for the back-and-whiteness of the art. I saw this cover on BGA several times and sort of dismissed it. Then one day I was bored, and decided to check it out.

Very simply, Glow is a card-and-dice drafting game which employs one of my latest favorite mechanisms: Entangled Decisions. You start with a character card, which provides some permanent dice, and has some ability printed on it. Each round you draft a companion card, which has some benefits, is worth some number of points, and has an ability printed on it, and depending on which card you choose, you also get some number (and some type) of dice for the turn. Those dice are basically randomly distributed. So when you draft, you're taking a pairing of a card and some dice, and you need to consider which card you want (based on all it's attributes), as well as how many (and which) dice you want for the turn. 

The dice are colored, and have 5 different resources on them. The resource matching the die color occurs twice on the die, making it more likely to come up. This can be important when choosing your dice, because it relates to the likelihood you'll get what you want or need when you roll.

After the draft, you'll roll all your dice, then get a chance to mitigate them. There are re-roll tokens you can collect, and each one can be spent to re-roll 1 or 2 dice. You can spend 3 re-roll tokens to set a die to any face. the neat thing about re-rolls is that you can "buy" them for victory points in a really elegant way. Some spaces on the score track contain a re-roll icon. If you want a re-roll, you may move your score marker backwards on the track until you encounter one of those icons. the icons are spaced very close together in the early game, when scores are low, but once you start generating points, it'll cost more and more points to buy re-rolls.

Once you're happy with your roll results (or at least, once you can no longer re-roll anything), you get to activate all of your cards. The cool thing to note here is that each die can be used once for each card - not just once total. So you can do well to get cards with overlapping color requirements, for example you might have a character that gives you 3 points and a re-roll for every Air-Water pair you roll, and you might pick up a companion that gives you 3 points per water, and another that gives you 6 points if you roll no Earth icons. In that case, a roll of 2 Air + 2 Water (and no Earth) would generate 18 points and 2 re-rolls! 

Another interesting thing about this part of the game is that you are required to activate all of your cards, and some of them have detrimental effects, from losing points, to killing off the companion.

Finally, after activating all the cards you can, you are able to move your pawn on a board by spending your dice. Path spaces each show one of the die icons, and you advance by using an icon of that type. There's another resource called Footprints that you can get which count as wild for that purpose. There are clearings on the map which require footprints to enter, have some type of reward for entering (like a re-roll token), and show a VP value. Ending your turn on a clearing, you're allowed to move your encampment piece to that clearing, which will now be worth that number of points at game end. Perhaps in a future turn you'll upgrade that bonus by moving to a higher value clearing and setting up camp again.

There are some more details, but that's generally how the game goes, and I've noted some of the aspects of each part of the turn that I find cool and interesting. At first glance, with the black and white art, and a bunch of die rolling, I didn't really think the game would be for me. But after a handful of plays, I can say that I'm actually enjoying it quite a bit! I appreciate a lot of the little design decisions that went into it, and it's actually rather clever. That said, I've found a number of things I'd have done differently, or tried to change if I were developing the game, I'll list them below.

So if you're browsing BGA looking for something to play, and have time for a short (8 turn) game, definitely give Glow a try! 

Here are my current thoughts about how I might change Glow:

  • It might be neat (though probably unrealistic) if the dice were d10s with 4 sides matching the die color, 2 sides each matching "adjacent" colors, and 1 side each matching "opposite" colors (like on a Magic color wheel)
  • I've always disliked paying a resource to re-roll a die and getting the same result, so maybe that could be disallowed somehow
  • For the map, I'd like to see some incentive to visit multiple villages, rather than just get to the 20vp one (or maybe the 15vp one) by the end. Currently setting up camp mid-game just insulates you from failing to reach the big ones. Like maybe a couple of points, or a reroll or something when you set up encampment
  • MAYBE have that black die in the game from the beginning, not just if that one bird comes into play (I don't know if I'd actually like that)
  • If you're at the bottom of the score track, the last (first?) re-roll icon could maybe just say "set all your dice exactly how you want them"
  • The spells from that one card: why are they random? let the player draw N, deal out 1 to each opponent (and discard the extra) or something
  • And I wonder about balance on some of the cards, though as a draft game maybe that doesn't matter
  • I'm not sure, but it seems like maybe the icons are treated as if, say, clouds are more common than the others... only they're not

Postado por às Nenhum comentário:
Assinar: Postagens (Atom)