Tools Involved in Sniffing - Ethical Hacking

December 14, 2018
By Gtime Trix
0 Comments

There are so many tools available to perform sniffing over a network, and they all have their own features to help a hacker analyze traffic and dissect the information. Sniffing tools are extremely common applications. We have listed here some of the interesting ones −

BetterCAP − BetterCAP is a powerful, flexible and portable tool created to perform various types of MITM attacks against a network, manipulate HTTP, HTTPS and TCP traffic in real-time, sniff for credentials, and much more.
Ettercap − Ettercap is a comprehensive suite for man-in-the-middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols and includes many features for network and host analysis.
Wireshark − It is one of the most widely known and used packet sniffers. It offers a tremendous number of features designed to assist in the dissection and analysis of traffic.
Tcpdump − It is a well-known command-line packet analyzer. It provides the ability to intercept and observe TCP/IP and other packets during transmission over the network. Available at www.tcpdump.org.
WinDump − A Windows port of the popular Linux packet sniffer tcpdump, which is a command-line tool that is perfect for displaying header information.
OmniPeek − Manufactured by WildPackets, OmniPeek is a commercial product that is the evolution of the product EtherPeek.
Dsniff − A suite of tools designed to perform sniffing with different protocols with the intent of intercepting and revealing passwords. Dsniff is designed for Unix and Linux platforms and does not have a full equivalent on the Windows platform.
EtherApe − It is a Linux/Unix tool designed to display graphically a system's incoming and outgoing connections.
MSN Sniffer − It is a sniffing utility specifically designed for sniffing traffic generated by the MSN Messenger application.
NetWitness NextGen − It includes a hardware-based sniffer, along with other features, designed to monitor and analyze all traffic on a network. This tool is used by the FBI and other law enforcement agencies.

A potential hacker can use any of these sniffing tools to analyze traffic on a network and dissect information.

Educational

Footprinting Explained - Ethical Hacking

December 03, 2018
By Gtime Trix
0 Comments

Footprinting is a part of reconnaissance process which is used for gathering possible information about a target computer system or network. Footprinting could be both passive andactive. Reviewing a company’s website is an example of passive footprinting, whereas attempting to gain access to sensitive information through social engineering is an example of active information gathering.

Footprinting is basically the first step where hacker gathers as much information as possible to find ways to intrude into a target system or at least decide what type of attacks will be more suitable for the target.

During this phase, a hacker can collect the following information −

Domain nameIP AddressesNamespacesEmployee informationPhone numbersE-mailsJob Information

In the following section, we will discuss how to extract the basic and easily accessible information about any computer system or network that is linked to the Internet.

Domain Name Information

You can use http://www.whois.com/whois website to get detailed information about a domain name information including its owner, its registrar, date of registration, expiry, name server, owner's contact information, etc.

Here is a sample record ofwww.tutorialspoint.com extracted from WHOIS Lookup −

Quick Fix

It's always recommended to keep your domain name profile a private one which should hide the above-mentioned information from potential hackers.

Finding IP Address

You can use ping command at your prompt. This command is available on Windows as well as on Linux OS. Following is the example to find out the IP address of tutorialspoint.com

$ping tutorialspoint.com

It will produce the following result −

PING tutorialspoint.com (66.135.33.172) 56(84) bytes of data.64 bytes from 66.135.33.172: icmp_seq = 1 ttl = 64 time = 0.028 ms64 bytes from 66.135.33.172: icmp_seq = 2 ttl = 64 time = 0.021 ms64 bytes from 66.135.33.172: icmp_seq = 3 ttl = 64 time = 0.021 ms64 bytes from 66.135.33.172: icmp_seq = 4 ttl = 64 time = 0.021 ms

Finding Hosting Company

Once you have the website address, you can get further detail by using ip2location.com website. Following is the example to find out the details of an IP address −

Here the ISP row gives you the detail about the hosting company because IP addresses are usually provided by hosting companies only.

Quick Fix

If a computer system or network is linked with the Internet directly, then you cannot hide the IP address and the related information such as the hosting company, its location, ISP, etc. If you have a server containing very sensitive data, then it is recommended to keep it behind a secure proxy so that hackers cannot get the exact details of your actual server. This way, it will be difficult for any potential hacker to reach your server directly.

Another effective way of hiding your system IP and ultimately all the associated information is to go through a Virtual Private Network (VPN). If you configure a VPN, then the whole traffic routes through the VPN network, so your true IP address assigned by your ISP is always hidden.

IP Address Ranges

Small sites may have a single IP address associated with them, but larger websites usually have multiple IP addresses serving different domains and sub-domains.

You can obtain a range of IP addresses assigned to a particular company usingAmerican Registry for Internet Numbers (ARIN).

You can enter company name in the highlighted search box to find out a list of all the assigned IP addresses to that company.

History of the Website

It is very easy to get a complete history of any website using www.archive.org.

You can enter a domain name in the search box to find out how the website was looking at a given point of time and what were the pages available on the website on different dates.

Quick Fix

Though there are some advantages of keeping your website in an archive database, but if you do not like anybody to see how your website progressed through different stages, then you can request archive.org to delete the history of your website.

Educational

Reconnaissance Explained - Ethical Hacking

December 01, 2018
By Gtime Trix
0 Comments

Educational

Processes Involved in Hacking

December 01, 2018
By Gtime Trix
0 Comments

Educational

Hacking Skills, Courses & Certification.

November 29, 2018
By Gtime Trix
0 Comments

Skills

As an ethical hacker, you will need to understand various hacking techniques such as −

Password guessing and crackingSession hijackingSession spoofingNetwork traffic sniffingDenial of Service attacksExploiting buffer overflow vulnerabilitiesSQL injection

In this article, we will discuss some of the skills that you would require to become an expert in Ethical Hacking.

Basic Skills

Computer Hacking is a Science as well as an Art. Like any other expertise, you need to put a lot of effort in order to acquire knowledge and become an expert hacker. Once you are on the track, you would need more effort to keep up-to-date with latest technologies, new vulnerabilities and exploitation techniques.

An ethical hacker must be a computer systems expert and needs to have very strong programming and computer networking skills.

An ethical hacker needs to have a lot of patience, persistence, and perseverance to try again and again and wait for the required result.

Additionally, an ethical hacker should be smart enough to understand the situation and other users’ mind-set in order to apply social engineering exploits. A good ethical hacker has great problem-solving skills too.

Courses & Certifications

This tutorial provides the basic guidelines to become a successful Ethical Hacker. If you want to excel in this field, then you might choose to pursue the following courses and certifications −

Obtain a bachelor’s degree in Computer Science or A+ Certificate to gain an understanding of the most common hardware and software technologies.

Get into a programmer’s role for a few years and then switch to get a tech support position.

Proceed to get network certifications like Network+ or CCNA and then security certifications like Security+, CISSP, or TICSA.

It is recommended that you get some work experience as a Network Engineer and System Administrator to understand networks and systems inside out.

Keep going through various books, tutorials and papers to understand various computer security aspects and take them as a challenge to secure your network and computer systems as network security engineer.

Study courses which cover creating Trojan horses, backdoors, viruses, and worms, denial of service (DoS) attacks, SQL injection, buffer overflow, session hijacking, and system hacking.

Master the art of penetration testing, footprinting and reconnaissance, and social engineering.

Finally go for a Certified Ethical Hacker (CEH) Certification.

GIAC (Global Information Assurance Certification) and Offensive Security Certified Professional (OSCP) are additional IT security certifications which will add a lot of value to your profile.

Final Note

You need to stay as a White Hat Hacker which means you need to work within given boundaries. Never intrude or attack any computer or network without a required permission from the authorities.

As a final note, it is highly recommended that you refrain from engaging yourself in black hat hacking which may spoil your entire career.

Educational

Sniffing - Types, What can be sniffed & How it Works.

November 29, 2018
By Gtime Trix
0 Comments

Sniffing is the process of monitoring and capturing all the packets passing through a given network using sniffing tools. It is a form of “tapping phone wires” and get to know about the conversation. It is also calledwiretapping applied to the computer networks.

There is so much possibility that if a set of enterprise switch ports is open, then one of their employees can sniff the whole traffic of the network. Anyone in the same physical location can plug into the network using Ethernet cable or connect wirelessly to that network and sniff the total traffic.

In other words, Sniffing allows you to see all sorts of traffic, both protected and unprotected. In the right conditions and with the right protocols in place, an attacking party may be able to gather information that can be used for further attacks or to cause other issues for the network or system owner.

What can be sniffed?

One can sniff the following sensitive information from a network −

Email trafficFTP passwordsWeb trafficsTelnet passwordsRouter configurationChat sessionsDNS traffic

How it works

A sniffer normally turns the NIC of the system to the promiscuous mode so that it listens to all the data transmitted on its segment.

Promiscuous mode refers to the unique way of Ethernet hardware, in particular, network interface cards (NICs), that allows an NIC to receive all traffic on the network, even if it is not addressed to this NIC. By default, a NIC ignores all traffic that is not addressed to it, which is done by comparing the destination address of the Ethernet packet with the hardware address (a.k.a. MAC) of the device. While this makes perfect sense for networking, non-promiscuous mode makes it difficult to use network monitoring and analysis software for diagnosing connectivity issues or traffic accounting.

A sniffer can continuously monitor all the traffic to a computer through the NIC by decoding the information encapsulated in the data packets.

Types of Sniffing

Sniffing can be either Active or Passive in nature.

Passive Sniffing

In passive sniffing, the traffic is locked but it is not altered in any way. Passive sniffing allows listening only. It works with Hub devices. On a hub device, the traffic is sent to all the ports. In a network that uses hubs to connect systems, all hosts on the network can see the traffic. Therefore, an attacker can easily capture traffic going through.

The good news is that hubs are almost obsolete nowadays. Most modern networks use switches. Hence, passive sniffing is no more effective.

Active Sniffing

In active sniffing, the traffic is not only locked and monitored, but it may also be altered in some way as determined by the attack. Active sniffing is used to sniff a switch-based network. It involves injecting address resolution packets (ARP) into a target network to flood on the switch content addressable memory (CAM) table. CAM keeps track of which host is connected to which port.

Following are the Active Sniffing Techniques −

MAC FloodingDHCP AttacksDNS

PoisoningSpoofing AttacksARP

Poisoning

Protocols which are affected
Protocols such as the tried and true TCP/IP were never designed with security in mind and therefore do not offer much resistance to potential intruders. Several rules lend themselves to easy sniffing −
HTTP − It is used to send information in the clear text without any encryption and thus a real target.
SMTP (Simple Mail Transfer Protocol) − SMTP is basically utilized in the transfer of emails. This protocol is efficient, but it does not include any protection against sniffing.
NNTP (Network News Transfer Protocol)− It is used for all types of communications, but its main drawback is that data and even passwords are sent over the network as clear text.
POP (Post Office Protocol) − POP is strictly used to receive emails from the servers. This protocol does not include protection against sniffing because it can be trapped.
FTP (File Transfer Protocol) − FTP is used to send and receive files, but it does not offer any security features. All the data is sent as clear text that can be easily sniffed.
IMAP (Internet Message Access Protocol) − IMAP is same as SMTP in its functions, but it is highly vulnerable to sniffing.
Telnet − Telnet sends everything (usernames, passwords, keystrokes) over the network as clear text and hence, it can be easily sniffed.
Sniffers are not the dumb utilities that allow you to view only live traffic. If you really want to analyze each packet, save the capture and review it whenever time allows.
Hardware Protocol Analyzers
Before we go into further details of sniffers, it is important that we discuss about hardware protocol analyzers. These devices plug into the network at the hardware level and can monitor traffic without manipulating it.
Hardware protocol analyzers are used to monitor and identify malicious network traffic generated by hacking software installed in the system.
They capture a data packet, decode it, and analyze its content according to certain rules.
Hardware protocol analyzers allow attackers to see individual data bytes of each packet passing through the cable.
These hardware devices are not readily available to most ethical hackers due to their enormous cost in many cases.
Lawful Interception
Lawful Interception (LI) is defined as legally sanctioned access to communications network data such as telephone calls or email messages. LI must always be in pursuance of a lawful authority for the purpose of analysis or evidence. Therefore, LI is a security process in which a network operator or service provider gives law enforcement officials permission to access private communications of individuals or organizations.
Almost all countries have drafted and enacted legislation to regulate lawful interception procedures; standardization groups are creating LI technology specifications. Usually, LI activities are taken for the purpose of infrastructure protection and cyber security. However, operators of private network infrastructures can maintain LI capabilities within their own networks as an inherent right, unless otherwise prohibited.
LI was formerly known as wiretappingand has existed since the inception of electronic communications.

Educational

Hacking/Hackers Tools

November 28, 2018
By Gtime Trix
0 Comments

Tools

In this chapter, we will discuss in brief some of famous tools that are widely used to prevent hacking and getting unauthorized access to a computer or network system.

NMAP

Nmap stands for Network Mapper. It is an open source tool that is used widely for network discovery and security auditing. Nmap was originally designed to scan large networks, but it can work equally well for single hosts. Network administrators also find it useful for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime.

Nmap uses raw IP packets to determine −

what hosts are available on the network,

what services those hosts are offering,

what operating systems they are running on,

what type of firewalls are in use, and other such characteristics.

Nmap runs on all major computer operating systems such as Windows, Mac OS X, and Linux.

Metasploit

Metasploit is one of the most powerful exploit tools. It’s a product of Rapid7 and most of its resources can be found at: www.metasploit.com. It comes in two versions − commercial and free edition. Matasploit can be used with command prompt or with Web UI.

With Metasploit, you can perform the following operations −

Conduct basic penetration tests on small networks

Run spot checks on the exploitability of vulnerabilities

Discover the network or import scan data

Browse exploit modules and run individual exploits on hosts

Burp Suit

Burp Suite is a popular platform that is widely used for performing security testing of web applications. It has various tools that work in collaboration to support the entire testing process, from initial mapping and analysis of an application's attack surface, through to finding and exploiting security vulnerabilities.

Burp is easy to use and provides the administrators full control to combine advanced manual techniques with automation for efficient testing. Burp can be easily configured and it contains features to assist even the most experienced testers with their work.

Angry IP Scanner

Angry IP scanner is a lightweight, cross-platform IP address and port scanner. It can scan IP addresses in any range. It can be freely copied and used anywhere. In order to increase the scanning speed, it uses multithreaded approach, wherein a separate scanning thread is created for each scanned IP address.

Angry IP Scanner simply pings each IP address to check if it’s alive, and then, it resolves its hostname, determines the MAC address, scans ports, etc. The amount of gathered data about each host can be saved to TXT, XML, CSV, or IP-Port list files. With help of plugins, Angry IP Scanner can gather any information about scanned IPs.

Cain & Abel

Cain & Abel is a password recovery tool for Microsoft Operating Systems. It helps in easy recovery of various kinds of passwords by employing any of the following methods −

sniffing the network,

cracking encrypted passwords using Dictionary, Brute-Force and Cryptanalysis attacks,

recording VoIP conversations,

decoding scrambled passwords,

recovering wireless network keys,

revealing password boxes,

uncovering cached passwords and analyzing routing protocols.

Cain & Abel is a useful tool for security consultants, professional penetration testers and everyone else who plans to use it for ethical reasons.

Ettercap

Ettercap stands for Ethernet Capture. It is a network security tool for Man-in-the-Middle attacks. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. Ettercap has inbuilt features for network and host analysis. It supports active and passive dissection of many protocols.

You can run Ettercap on all the popular operating systems such as Windows, Linux, and Mac OS X.

EtherPeek

EtherPeek is a wonderful tool that simplifies network analysis in a multiprotocol heterogeneous network environment. EtherPeek is a small tool (less than 2 MB) that can be easily installed in a matter of few minutes.

EtherPeek proactively sniffs traffic packets on a network. By default, EtherPeek supports protocols such as AppleTalk, IP, IP Address Resolution Protocol (ARP), NetWare, TCP, UDP, NetBEUI, and NBT packets.

SuperScan

SuperScan is a powerful tool for network administrators to scan TCP ports and resolve hostnames. It has a user friendly interface that you can use to −

Perform ping scans and port scans using any IP range.

Scan any port range from a built-in list or any given range.

View responses from connected hosts.

Modify the port list and port descriptions using the built in editor.

Merge port lists to build new ones.

Connect to any discovered open port.

Assign a custom helper application to any port.

QualysGuard

QualysGuard is an integrated suite of tools that can be utilized to simplify security operations and lower the cost of compliance. It delivers critical security intelligence on demand and automates the full spectrum of auditing, compliance and protection for IT systems and web applications.

QualysGuard includes a set of tools that can monitor, detect, and protect your global network.

WebInspect

WebInspect is a web application security assessment tool that helps identify known and unknown vulnerabilities within the Web application layer.

It can also help check that a Web server is configured properly, and attempts common web attacks such as parameter injection, cross-site scripting, directory traversal, and more.

LC4

LC4 was formerly known asL0phtCrack. It is a password auditing and recovery application. It is used to test password strength and sometimes to recover lost Microsoft Windows passwords, by using dictionary, brute-force, and hybrid attacks.

LC4 recovers Windows user account passwords to streamline migration of users to another authentication system or to access accounts whose passwords are lost.

LANguard Network Security Scanner

LANguard Network Scanner monitors a network by scanning connected machines and providing information about each node. You can obtain information about each individual operating system.

It can also detect registry issues and have a report set up in HTML format. For each computer, you can list thenetbios name table, current logged-on user, and Mac address.

Network Stumbler

Network stumbler is a WiFi scanner and monitoring tool for Windows. It allows network professionals to detect WLANs. It is widely used by networking enthusiasts and hackers because it helps you find non-broadcasting wireless networks.

Network Stumbler can be used to verify if a network is well configured, its signal strength or coverage, and detect interference between one or more wireless networks. It can also be used to non-authorized connections.

ToneLoc

ToneLoc stands for Tone Locator. It was a popular war dialling computer program written for MS-DOS in the early 90’s. War dialling is a technique of using a modem to automatically scan a list of telephone numbers, usually dialling every number in a local area code.

Malicious hackers use the resulting lists in breaching computer security - for guessing user accounts, or locating modems that might provide an entry-point into computer or other electronic systems.

It can be used by security personnel to detect unauthorized devices on a company’s telephone network.

Educational

Types of Hackers

November 28, 2018
By Gtime Trix
0 Comments

Hacker Types

Hackers can be classified into different categories such as white hat, black hat, and grey hat, based on their intent of hacking a system. These different terms come from old Spaghetti Westerns, where the bad guy wears a black cowboy hat and the good guy wears a white hat.

White Hat Hackers

White Hat hackers are also known asEthical Hackers. They never intent to harm a system, rather they try to find out weaknesses in a computer or a network system as a part of penetration testing and vulnerability assessments.

Ethical hacking is not illegal and it is one of the demanding jobs available in the IT industry. There are numerous companies that hire ethical hackers for penetration testing and vulnerability assessments.

Black Hat Hackers

Black Hat hackers, also known ascrackers, are those who hack in order to gain unauthorized access to a system and harm its operations or steal sensitive information.

Black Hat hacking is always illegal because of its bad intent which includes stealing corporate data, violating privacy, damaging the system, blocking network communication, etc.

Grey Hat Hackers

Grey hat hackers are a blend of both black hat and white hat hackers. They act without malicious intent but for their fun, they exploit a security weakness in a computer system or network without the owner’s permission or knowledge.

Their intent is to bring the weakness to the attention of the owners and getting appreciation or a little bounty from the owners.

Miscellaneous Hackers

Apart from the above well-known classes of hackers, we have the following categories of hackers based on what they hack and how they do it −

Red Hat Hackers

Red hat hackers are again a blend of both black hat and white hat hackers. They are usually on the level of hacking government agencies, top-secret information hubs, and generally anything that falls under the category of sensitive information.

Blue Hat Hackers

A blue hat hacker is someone outside computer security consulting firms who is used to bug-test a system prior to its launch. They look for loopholes that can be exploited and try to close these gaps. Microsoft also uses the term BlueHatto represent a series of security briefing events.

Elite Hackers

This is a social status among hackers, which is used to describe the most skilled. Newly discovered exploits will circulate among these hackers.

Script Kiddie

A script kiddie is a non-expert who breaks into computer systems by using pre-packaged automated tools written by others, usually with little understanding of the underlying concept, hence the term Kiddie.

Neophyte

A neophyte, "n00b", or "newbie" or "Green Hat Hacker" is someone who is new to hacking or phreaking and has almost no knowledge or experience of the workings of technology and hacking.

Hacktivist

A hacktivist is a hacker who utilizes technology to announce a social, ideological, religious, or political message. In general, most hacktivism involves website defacement or denialof-service attacks.

Educational

Hacking Passwords & How To Create a Good One.

November 28, 2018
By Gtime Trix
0 Comments

We have passwords for emails, databases, computer systems, servers, bank accounts, and virtually everything that we want to protect. Passwords are in general the keys to get access into a system or an account.

In general, people tend to set passwords that are easy to remember, such as their date of birth, names of family members, mobile numbers, etc. This is what makes the passwords weak and prone to easy hacking.

One should always take care to have a strong password to defend their accounts from potential hackers.

A strong password has the following attributes −

Contains at least 8 characters.

A mix of letters, numbers, and special characters.

A combination of small and capital letters.

Dictionary Attack

In a dictionary attack, the hacker uses a predefined list of words from a dictionary to try and guess the password. If the set password is weak, then a dictionary attack can decode it quite fast.

Hydra is a popular tool that is widely used for dictionary attacks. Take a look at the following screenshot and observe how we have used Hydra to find out the password of an FTP service.

Hybrid Dictionary Attack

Hybrid dictionary attack uses a set of dictionary words combined with extensions. For example, we have the word “admin” and combine it with number extensions such as “admin123”, “admin147”, etc.

Crunch is a wordlist generator where you can specify a standard character set or a character set. Crunch can generate all possible combinations and permutations. This tool comes bundled with the Kali distribution of Linux.

Brute-Force Attack

In a brute-force attack, the hacker uses all possible combinations of letters, numbers, special characters, and small and capital letters to break the password. This type of attack has a high probability of success, but it requires an enormous amount of time to process all the combinations. A brute-force attack is slow and the hacker might require a system with high processing power to perform all those permutations and combinations faster.

John the Ripper or Johnny is one of the powerful tools to set a brute-force attack and it comes bundled with the Kali distribution of Linux.

Rainbow Tables

A rainbow table contains a set of predefined passwords that are hashed. It is a lookup table used especially in recovering plain passwords from a cipher text. During the process of password recovery, it just looks at the pre-calculated hash table to crack the password. The tables can be downloaded from http://project-rainbowcrack.com/table.htm

RainbowCrack 1.6.1 is the tool to use the rainbow tables. It is available again in Kali distribution.

Quick Tips

Don’t note down the passwords anywhere, just memorize them.

Set strong passwords that are difficult to crack.
Use a combination of alphabets, digits, symbols, and capital and small letters.

Don’t set passwords that are similar to their usernames.

Android

Best Hacking Apps For Android Phones in 2018

August 25, 2018
By Gtime Trix
0 Comments

Since Android has emerged as the top mobile operating system, we have seen a great rise in the Android hacking apps for rooted as well as non-rooted devices. For our readers, we have prepared the list of the best hacking apps for Android for 2018, which can be used by a technology enthusiast, an IT security administrator, or an ethical hacker. Our list includes popular Wi-Fi and phone hacking apps like Hackode, zANTI, Shark for Root, etc.
Based on the industry reviews and our own experience, here is a compilation of the top Android hacking applications that ethical hackers and security researchers can use. We also provided their description to help you get started instantly.

Best Hacking Apps For Android Phones

1. AndroRAT

AndroRAT stands for Android and RAT (Remote Administrative Tools). This top free hacking tool was released a long time ago as a client/server application. The app aims to give you the control of the Android system remotely and fetch the information from it. This Android app runs as a service right after the boot. So, a user doesn’t need to interact with the service. The app provides you the ability to trigger the server connection by a call or SMS.
The features in this useful Android hacking app include collecting information like contacts, call logs, messages, and location. The app also allows you to remotely monitor received message and state of the phone, making a phone call and sending texts, taking pictures from the camera, opening URL in the default browser etc.

2. Hackode

The second entry on our list of top hacking Android apps for 2018 is Hackode. It is an app which is basically a collection of multiple tools for ethical hackers, IT specialists, and penetration testers. In the app, there are three modules — Reconnaissance, Scanning, Security Feed — available in the application.
With this app, you get the functionalities like Google hacking, SQL Injection, MySQL Server, Whois, Scanning, DNS lookup, IP, MX Records, DNS Dif, Security RSS Feed, Exploits etc. It’s a great Android hacking app to start with and it doesn’t ask for your private information to operate.

3. zANTI

zANTI is a reputed Android hacking suite from Zimperium. This software suite comes with multiple tools that are widely used for penetration testing purposes. This mobile penetration testing toolkit allows the security researchers to scan a network easily. This toolkit allows the IT administrators to simulate an advanced hacking environment to detect multiple malicious techniques.
zANTI could be called an app that brings the power of Backtrack on your Android device. As soon as you login into zANTI, it maps the entire network and sniffs the websites being visited along with their cookies — thanks to ARP cache poisoning on devices.
The various modules in the app are network mapping, port discovery, sniffing, packet manipulation, DoS, MITM, and more.

4. cSploit

cSploit calls itself the most advanced and complete IT security toolkit for the Android operating system. It’s a tool that enumerates local hosts, finds vulnerabilities and their exploits, cracks Wi-Fi password, installs backdoors, etc.

5. FaceNiff

FaceNiff is a top Android hacking app that allows you to intercept and sniff your WiFi network traffic. This tool is widely used to snoop into people’s Facebook, Twitter and other social media websites using your Android device. This hacker-favorite tool steals cookies from WiFi network and gives an attacker an unauthorized access to victim’s account.
FaceNiff is developed by Bartosz Ponurkiewicz — the same developer who wrote Firesheep for Firefox hacking on the desktop.

6. Shark for Root

Shark for Root is an advanced tool for security experts and hackers. This tool works as a traffic snipper and works on Wi-Fi, 3G, and FroYo tethered mode. One can also use the tcpdump command for this free hacking app for rooted Android devices.

7. Droidsheep

Droidsheep is an effective hacking app developed for security analysts interested in playing with Wi-Fi networks. The app has the ability to hijack the web session profiles over a network and it works with almost all services and websites.
As you fire up the Droidsheep app, it acts a router that monitors and intercepts all the Wi-Fi network traffic and fetches the profiles of active sessions. With this app, one can sniff Facebook, LinkedIn, Twitter and other social media accounts.
DroidSheep Guard, another version of app, helps you to detect ARP-Snoofing on the networks i.e. the attacks by FaceNiff, Droidsheep, and other software.

8. DroidBox

DroidBox is an app that offers dynamic analysis of Android applications. Using the app, one can get a wide range of results about the hashes for the APK package, network traffic, SMS and phone calls, information leaks via different channels etc.
This top Android hacking application also gives you the ability to visualize the behavior of an Android app package.

9. APKInspector

APKInspector is an app that allows you to perform reverse engineering tricks. With this app, you can get the graphic features and analysis functions for the users to get a deep insight. This powerful Android hacking tool helps you get the source code of any Android app and visualize the DEX code to erase the credits and license.

10. Nmap

One of the most popular network scanning apps for desktop can also be used on the Android operating system. Nmap works on both non-rooted and rooted phones. If you are a beginner Android hacker, this hacking app is a must-have.

11. SSHDroid

SSHDroid is an SSH server implementation developed for Android that allows you to connect your Android device to a PC and run commands like ‘terminal’ and ‘adb shell’ and edit files. It provides an extra security later when you are connecting to a remote machine.
The app provides features like shared-key authentication, WiFi autostart whitelist, extended notification control etc,

12. Wi-Fi Kill

Wi-Fi Kill is a great hacking tool for rooted Android devices. Using this tool, one can disable a device’s internet connection if it’s connected to your network. In reality, it blocks the packet data going to a device. Thanks to its simple interface, any novice user can use this Android hacking app.

13. Kali Linux NetHunter
Kali Linux NetHunter is the first open source penetration testing platform for Android-powered Nexus devices and OnePlus One. It supports Wireless 802.11 frame injection, HID keyboard, 1-click MANA Evil Access Point setups, BadUSB MITM attacks. etc.

14. Fing Network Scanner
This popular network scanner app for Android is used by hackers and security professionals to discover which devices are connected to the internet, map devices, locate security risks, find intruders, solve network problems, etc. It comes with more than a dozen free network tools for making your job easier.

15. USB Cleaver

USB Cleaver is a free Android hacking app that’s capable of stealing information from connected Windows PCs. It can access browser passwords, Wi-Fi password, network information, etc.

Disclaimer: Please note that this list is published for educational purposes only. We don’t support the use of any tool to indulge in unethical purposes.

Did you find these best hacking tools of 2018 helpful? Use them and share your reviews in the comments below.

Hacking

Russian Hackers Have Invaded Hundreds of US Utilities

August 09, 2018
By Gtime Trix
0 Comments

Hundreds of U.S. utilities were penetrated by Russian hackers who could have disrupted the nation's power grid.
The attacks were launched last year by threat actors belonging to a group known as "Dragonfly" or "Energetic Bear," which is sponsored by the Russian government, The Wall Street Journal reported Monday.
The hackers used Black Hat tools such as phishing and waterhole traps to obtain credentials from legitimate users and leverage them to gain access to the utilities, the Journal noted, citing federal government officials.
"We've seen phishing and spearphishing used against energy and utility companies by foreign actors for more than decade," said Rohyt Belani, CEO of Cofense, a maker of antiphishing solutions, based in Leesburg, Virginia.
Phishing emails are used to trick targets into exposing their credentials or other sensitive information. Spearphishing does the same thing but is aimed at a narrower target audience.
"So this is a lot more of the same, although it seems to be happening at greater frequency," Belani told TechNewsWorld.
"The underlying technique is still spearphishing," he continued, "although the attackers are constantly modifying those techniques to get by the latest and greatest defense mechanisms."
To Freak Out or Not
While these utility intruders could disrupt electrical power in the United States, Belani doesn't think they will.
"I don't think nations like Russia or China would go down that path given the potential ramifications," he said, "but hacking like this gives those countries some levers to pull should tensions build."
The cyberattacks on U.S. utilities should be a source of concern, but they aren't "something to necessarily freak out about," remarked Emily S. Miller, director of national security and critical infrastructure programs at Mocana , a San Francisco-based company that focuses on embedded system security for industrial control systems and the Internet of Things.
"The electric grid is highly resilient," she told TechNewsWorld.
Resilient or not, the threat from these hackers to the grid appears to be very serious, maintained Barak Perelman, CEO of Indegy, a New York-based maker of security solutions for industrial systems.
"Russia has its finger on a big red button," he told TechNewsWorld. "If someone decides it's time to press that button, they can shut off significant portions of the U.S. power grid."
Not Intended to Disrupt Power
The intrusions DHS reported were not intended to disrupt power sources, noted Joe Slowik, an adversary hunter for Dragos, a maker of security software for the critical infrastructure community, based in Hanover, Maryland.
"Throughout, the adversaries in question limited operations to information gathering, network survey and reconnaissance," he told TechNewsWorld.
"There is no evidence that the adversaries were in position or intended to cause a widespread disruption event," Slowik said. "Furthermore, based on the tradecraft exhibited and methods observed, any such action would need to be 'manual' in nature, meaning even if this access was translated into an attack, it would scale poorly and result in limited utility impacts."
All large nation-state adversaries have been hacking each other's power grids as a matter of routine to preposition assets, said Ross Rustici, senior director of intelligence services for
Cybereason, an endpoint protection, detection and response company based in Tel Aviv, Israel.
"There isn't going to be any bolt-out-of-the-blue attack," he told TechNewsWorld.
"The Russians aren't scheming to disrupt the power grid tomorrow," he continued, "but if tensions boil over, if there's a direct conflict between us and them, this is absolutely a tool that Russia knows how to use and has demonstrated its willingness to use it in hybrid warfare in the Ukraine."
Mutually Assured Destruction
It's unusual for the DHS to call out a nation-state attacker by name, said Mocana's Miller, who previously worked at DHS as chief of process management, measurement and exercise planning.
That suggests it had a high degree of certainty before fingering Russia.
DHS has not commented publicly on The Wall Street Journal's report.
"Based on the level of detail presented in the Mueller indictments of July 13, I would be hard-pressed to doubt the intelligence and law enforcement communities," Michael Magrath, director of global regulations and standards at
OneSpan, told TechNewsWorld.
OneSpan, a provider of security, authentication, fraud prevention and e-signature services, is based in Chicago.
Although the U.S. doesn't brag about it, there is a widespread assumption that it has hacked the critical infrastructure of nations that launched cyberattacks on America's infrastructure. Some believe this sets up a mutual-destruction stalemate reminiscent of the Cold War. That may not be the case, however.
"It's dangerous to assume that this fits the Cold War model of a balanced standoff because of 'mutually assured destruction,'" said Ray DeMeo, COO of Virsec , a San Jose, California-based provider of protection against memory-based cyberattacks.
"Many of these hacking groups have some nation-state sponsorship, but also pursue their own agendas," he told TechNewsWorld. "This is a very distributed threat, and relying on centralized control to keep things in check probably won't work."
What's more, neither side is concerned about the mutual destruction they will wreak on each other, maintained Chris Stoneff, vice president of security solutions at Bomgar , a secure remote support and privileged access management company, based in Johns Creek, Georgia.
"Both sides feel they could withstand some kind of power disruption, at least long enough to launch other cyberattacks or create a military response if they so desire," he told TechNewsWorld.
What Can Utilities Do?
Utilities can be more aggressive in assessing vulnerabilities, updating systems, and adding new security strategies, Virsec's DeMeo said.
"They need to assume that hackers already have a footprint somewhere within their networks and bypassed their legacy perimeter defenses," he explained. "The focus needs to shift from guarding the gate to proactively protecting critical applications and making sure they only do the right thing."
Critical national infrastructure should not be directly available to the Internet, Bomgar's Stoneff recommended.
A combination of rotating passwords and multifactor authentication also could help reduce the risks that these systems could be penetrated, he said.
"It may seem obvious, but greater diligence in educating staff and the public broadly about being vigilant regarding email, social media and the websites they visit and links they click has never been more important," said Sigfus Magnusson, vice president for product management at Men & Mice , a Kopavogur, Iceland-based maker of DNS, DHCP and IP Address management software.
That is particularly true "for critical system administrators or those who may control automated systems," he told TechNewsWorld.
Still, it remains to be seen if the tough decisions needed to secure U.S. infrastructure will be made.
"It's hard to imagine that we will be able to summon the courage to harden our critical infrastructure to anything like what it would take to stop the threat," said Jeff Williams, CTO of Contrast Security , a maker of self-protecting software solutions, based in Los Altos, California.
"We built our defenses for lone script-kiddies looking to have some fun," he told TechNewsWorld, "and we're being targeted by highly trained state-sponsored attack forces."

Educational

Hacking Quotes and Hacker's Sayings

August 09, 2018
By Gtime Trix
0 Comments

So here is the collection of some of the most famous hacker quotes and sayings, these quotes are wise, inspirational and humorous enough to make up your mind, bookmark this page and check out every now and then..

If you really are Hacker ! then Give it a Try!

Famous Hacker Quotes and Sayings

Are you an aspiring Hacker like me? Well, To become a Hacker you need skills, a strong presence of mind and what not? But before that all you need is an inspiration with a pinch of motivation, there’s a long journey to go, these hacking quotes motivate you to reach the top.
I am adding some of the marvellous hacking quotes and saying here, I will keep updating this post as I will get more quotes, sayings and information about any other famous white hat as well as black hat hackers, stay in touch

Below you will find my collection of the black hat as well as white hat inspirational, wise, and humorous hacker quotes, hacker sayings, and hacker proverbs, collected over the years from a variety of sources. Check it out,…

One-Liner ‘Hacking Quotes and Sayings’

“Human Stupidity, that’s why Hackers always win.”
Med Amine Khelifi
“The quieter you become, the more you are able to hear…”
― Kali Linux
“Never tell everything you know…”
― Roger H. Lincoln
“It’s less about technology for me, and more about religion. [on hacking]”
― Adrian Lamo
“You’re allowed to want different things in bed than you do in your normal everyday life.”
― Meredith Wild, Hardwired
“Never underestimate the determination of a kid who is time-rich and cash-poor.”
― Cory Doctorow, Little Brother
“There are few sources of energy so powerful as a procrastinating college student.”
― Paul Graham, Hackers & Painters: Big Ideas from the Computer Age
Long ‘Hacking Quotes & Sayings’
“Out in the field, any connection with home just makes you weaker. It reminds you that you were once civilized, soft; and that can get you killed faster than a bullet through the head.”
― Henry Mosquera, Sleeper’s Run
“Most hackers are young because young people tend to be adaptable. As long as you remain adaptable, you can always be a good hacker.”
― Emmanuel Goldstein, Dear Hacker: Letters to the Editor of 2600
“You are a human being before any label, handicap, disease or disorder. You are entitled to dignity. This is the human race’s one religion that unites us, yet it is our hatred and lack of tolerance that distorts our faith to a place of justification. This justification will always be in the oppressor’s benefit.”
― Shannon L. Alder
Must Read: What Is Denial of Service (DoS) Attack?
“It is not the monsters we should be afraid of; it is the people that don’t recognize the same monsters inside of themselves.”
― Shannon L. Alder
“What hackers do is figure out technology and experiment with it in ways many people never imagined. They also have a strong desire to share this information with others and to explain it to people whose only qualification may be the desire to learn.”
― Emmanuel Goldstein, Dear Hacker: Letters to the Editor of 2600
“We worried for decades about WMDs – Weapons of Mass Destruction. Now it is time to worry about a new kind of WMDs – Weapons of Mass Disruption.”
― John Mariotti
“As a matter of fact, yeah, they were foolproof. The problem is that you don’t have to protect yourself against fools. You have to protect yourself against people like me.”
― Jeffery Deaver
“Be very careful. We suggest getting a book on HTML to avoid becoming a real legend in the hacker world. Putting up a web page before you know how to put up a web page is generally a very bad idea. The .gov sites are an exception.”
― Emmanuel Goldstein, Dear Hacker: Letters to the Editor of 2600
“My actions constituted pure hacking that resulted in relatively trivial expenses for the companies involved, despite
the government’s false claims – Harry Hariom Choudhary.”
― Harry Hariom Choudhary

Final Words:
Hacking Quotes from movies are also inspired by these real-life hackers and their sayings.
I hope you like these hacking quotes by famous cyber hackers.

If you have something interesting to add then please do comment and let me know. You can also share your favourite quote and I will add it to the list.
Do share with your friends and fellows, support and motivate me to write more kinds of stuff by sharing this article and don’t forget to subscribe to the mailing list and the bell icon to get latest updates every now and then.

Hacking

How to hack into someone's facebook account and how to protect yourself from it.

June 26, 2018
By Gtime Trix
0 Comments

Despite the security concerns that have plagued Facebook for years, most people are sticking around and new members keep on joining. This has led Facebook to break records numbers with over 1.94 billion monthly active users , as of March 2017 — and around 1.28 billion daily active users.
We share our lives on Facebook. We share our birthdays and our anniversaries. We share our vacation plans and locations. We share the births of our sons and the deaths of our fathers. We share our most cherished moments and our most painful thoughts. We divulge every aspect of our lives. Clinical psychologists have written entire books detailing the surprisingly extensive impact Facebook has on our emotions and relationships.
But we sometimes forget who's watching.
We use Facebook as a tool to connect, but there are those people who use that connectivity for malicious purposes. We reveal what others can use against us. They know when we're not home and for how long we're gone. They know the answers to our security questions. People can practically steal our identities — and that's just with the visible information we purposely give away through our public Facebook profile.
The scariest part is that as we get more comfortable with advances in technology, we actually become more susceptible to hacking. As if we haven't already done enough to aid hackers in their quest for our data by sharing publicly, those in the know can get into our emails and Facebook accounts to steal every other part of our lives that we intended to keep away from prying eyes.
In fact, you don't even have to be a
professional hacker to get into someone's Facebook account.
It can be as easy as running Firesheep on your computer for a few minutes. In fact, Facebook actually allows people to get into someone else's Facebook account without knowing their password. All you have to do is choose three friends to send a code to. You type in the three codes, and voilà — you're into the account. It's as easy as that.
In this article I'll show you how hackers (and even regular folks) can hack into someone's Facebook account. But don't worry, I'll also show you how to prevent it from happening to you.

How To Hack Into Someone's Facebook Account.

The easiest way to "hack" into someone's Facebook is through resetting the password. This could be easier done by people who are friends with the person they're trying to hack.
The first step would be to get your friend's Facebook email login. If you don't already know it, try looking on their Facebook page in the Contact Info section. Still stuck? Hackers use scraping tools like TheHarvester to mine for email addresses.
Next, click on Forgotten your password? and type in the victim's email address. Their account should come up. Click This is my account .
It will ask if you would like to reset the password via the victim's emails. This doesn't help, so press
No longer have access to these?
It will now ask How can we reach you? Type in an email that you have that also isn't linked to any other Facebook account.
It will now ask you a question. If you're close friends with the victim, that's great. If you don't know too much about them, make an educated guess. If you figure it out, you can change the password. Now you have to wait 24 hours to login to their account.
If you don't figure out the question, you can click on
Recover your account with help from friends. This allows you to choose between three and five friends.
It will send them passwords, which you may ask them for, and then type into the next page. You can either create three to five fake Facebook accounts and add your friend (especially if they just add anyone), or you can choose three to five close friends of yours that would be willing to give you the password.

Once you get the password you can now login.

How To Protect Yourself From It.

Use an email address specifically for your Facebook and don't put that email address on your profile.
When choosing a security question and answer, make it difficult. Make it so that no one can figure it out by simply going through your Facebook. No pet names, no anniversaries — not even third grade teacher's names. It's as easy as looking through a yearbook.
Learn about recovering your account from friends. You can select the three friends you want the password sent to. That way you can protect yourself from a friend and other mutual friends ganging up on you to get into your account.

I hope that helps if you have any questions you can drop it in the comments section below.

Pages

About Me

Search This Blog

Food

Music

Nature

Fashion

Subscribe Us

Sports

Technology

Technology

Popular Posts

Photography

Business

Follow Us

Menu Footer Widget

Social Plugin

What can be sniffed?

How it works

Types of Sniffing

Passive Sniffing

Active Sniffing

Following are the Active Sniffing Techniques −

Protocols which are affected

Hardware Protocol Analyzers

Lawful Interception

Dictionary Attack

Hybrid Dictionary Attack

Brute-Force Attack

Rainbow Tables

Quick Tips

Best Hacking Apps For Android Phones

1. AndroRAT

2. Hackode

3. zANTI

4. cSploit

About me

Popular Posts

Find us on Facebook

Pinterest

Labels

recent posts

Blog Archive

Instagram

Follow me

Socialize!