Sunday, October 8, 2017

10 Things You Should Delete from Facebook Immediately


Facebook is the worst.

By now, everyone knows it's just a sophisticated platform to sell you stuff.

Advertisers pay because Facebook mines your data (and simply reads what you give it willingly) for your preferences. It can sell to you better because it knows who you are.

Noone's used it earnestly as a way to connect with people since 2009.

You just scroll through photos of people you don't like enough to message personally, and watch videos, or like memes.

It's a grief pit we're all lying in, making excuses about why we haven't left yet.

So here's a few steps you can take to reduce its hold on you:



1. Delete the mobile app

Why do you need it on your phone? Seriously.

Think of all the hours you've spent scrolling. Think about the books you could have read, the people you could have met, the things you could've done in that time.

Also, Facebook grabs your location data. Which seems pointless.

The app also drains your battery massively, just by being on your phone.

Also it's got stories now.

Make the smart decision.



2. Your phone number

Firstly, why are you advertising that to your friendslist?

Secondly, Facebook just wants to be the front page of the internet, or better yet the entire internet.

Why help it along the way by supplying your personal contact information? Especially, when Facebook has made it clear it doesn't care about the welfare of your data?



3. Friends that aren't your friends

Researchers theorise that we can maintain roughly 150 stable relationships.

The odds are strong that you don't speak to most of your friendslist.

If you wouldn't stop in the street to chat, why are you keeping up the mirage online?



4. Everything Facebook knows about you for advertising

As the New Statesman covered, it's a lot.

Click this link and you'll be taken to a page which reveals your advertising preferences.

Delete everything and revoke all permissions you can.



5. Delete facial recognition

Click this link.

Go to "Who sees tag suggestions when photos that look like you are uploaded?" and revoke permissions.



6. Your location on photo tags

If you tag your location at home, people can see where you live.

This is bad for obvious reasons.



7. Your relationship status

It's a humblebrag you'll regret if and when you change to single.



8. Your status from the airport

If you post a holiday plan on social media you may not get an insurance claim accepted if you're burgled.

You told people you were away - what did you expect?



9. Your credit card details

Why would you ever do this? It seems obvious, but don't.



10. Your birthday

It can be part of a puzzle of information that is used in identity theft tests.

So why volunteer it? The birthday messages aren't worth it.



11. Your account

Honestly, burn it all down.


Wednesday, September 20, 2017

What Is “Capture The Flag” in Hacking Terms?

Learning how to defend what is yours online is one of the most important things in today’s society. The amount of cyber-attacks plaguing the world is terrifying. It’s no surprise that more individuals are relentlessly trying to further their knowledge on cyber security related tactics via training and conferences.

One of the more popular training techniques is a game dubbed “CTF” or “Capture The Flag”. CTF is a competition between security professionals and/or individuals with a passion to learn more in the cyber security world.

CTF Time defines the three most common types of Capture The Flag:
  • Jeopardy-style CTFs has a couple of questions (tasks) in range of categories. For example, Web, Forensic, Crypto, Binary or something else. Team can gain some points for every solved task. More points for more complicated tasks usually. The next task in chain can be opened only after some team solve previous task. Then the game time is over sum of points shows you a CTF winner. Famous example of such CTF is Defcon CTF quals.
  • Attack-defense CTFs is another interesting kind of competitions. Here every team has own network (or only one host) with vulnerable services. Your team has time for patching your services and developing exploits usually. So, then organizers connects participants of competition and the wargame starts! You should protect own services for defense points and hack opponents for attack points. Historically this is a first type of CTFs, everybody knows about DEF CON CTF – something like a World Cup of all other competitions.
  • Mixed Competition CTFs may vary possible formats. It may be something like wargame with special time for task-based elements (like UCSB iCTF).

While hacking conferences that are constantly being held offer CTF competitions, it is more common to find CTF competitions online. With access to a training platform 24/7, CTF websites are definitely the wave of the future. Everyone with an interest in protecting their online identity and belongings should consider training with CTF.

What have you got to lose? (Besides virtually everything if you don’t learn how to protect yourself.)

Tuesday, September 19, 2017

The Top 10 Wifi Hacking Tools in Kali Linux


How to hack WiFi is second popular search after how to hack a Facebook. Most of the routers are not correctly configured and are susceptible to various kinds of attacks.

A lot of the router manufacturers and ISPs are still turning on WPS by default on their routers which makes the wireless security and penetration testing an even more important. Using the below Top 10 Wifi Hacking Tools you will be able to test your own wireless networks to find potential security issues.

1 Aircrack-ng
Aircrack is one of the very popular tools for WPA/WPA2/WEP cracking. The Aircrack-ng suite contains tools that help to capture packets and handshakes, de-authenticate connected clients and generate traffic and also tools to perform brute force and dictionary attacks. Aicrack-ng is an all-in-one suite that contains the following tools and many others:
– Aireplay-ng to generate traffic and client de-authentication

– Aircrack-ng for wireless password cracking

– Airbase-ng to configure fake access points

– Airodump-ng for packet capturing

If you wish to use this tool, make sure your Wifi card is capable of packet injection.

2 Reaver
Reaver is definitely second one in the top 10 Wifi hacking tools. Reaver is a very popular tool for hacking wireless networks. Reaver targets specifically the WPS vulnerabilities. The Reaver performs brute force attacks on WPS (Wifi Protected Setup) registrar PINs to recover the WPA2/WPS passphrase. Since there are many router manufacturers who turn on the ISPs by default, a lot of routers are vulnerable to this  attack out of the box.

3 Pixiewps
PixieWPS is a new tool included in Kali Linux. Pixiewps also targets a WPS vulnerability. PixieWPS is written in C and it is used to brute force WPS PINs offline and exploits the low or non-existing entropy of vulnerable access points. This is also called a pixie dust attack. PixieWPS needs a modified version of Wifite or Reaver to work with. Considering the recent growth of this tool, itstood 3rd in our list.

4 Wifite
Wifite is an automated tool and expects a very little work form the user. When start-up it asks a few parameters to work with and then it will  do all the hard work. Wifite attacks multiple wireless networks that use encryptions like with WEP/WPA/WPA2 and WPS. It captures the WPA handshakes, spoof your MAC address and safe the cracked passwords, automatically de-authenticate connected clients.

5 Wireshark
Wireshark is one of the top network security analyzing tools available online. Using Wireshark you can analyse a network to with a great detail and see what’s happening inside.

6 oclHashcat
oclHashcat is not a dedicated Wifi hacking tool and it also does  not come with  Kali Linux. But it can do brute force attacks and dictionary attacks on captured handshakes at a very high speeds  using the raw power of GPU. Comparing to other tools like Aircrack-ng suite, oclHashcat  is fast since it is using  a GPU instead of a CPU. An average GPU can do upto  50,000 combinations per second with oclHashcat.

7 Fern Wifi Cracker
Fern Wifi Cracker is a wireless security auditing and attack tool and it is written in Python. It is the first tool in this list to have a graphical user interface.

8 Wash
Wash is a tool to determine whether an access point has WPS enabled or not.

9 Crunch
Crunch is a great and easy to use tool for generating custom wordlists which can be used for dictionary attacks.

10 Macchanger
Last but not least in this top 10 Wifi Hacking Tools is Macchanger. Macchanger is a little utility which can be used to spoof your MAC address to a random MAC address or you can make up your own.

What is your favorite tool?

Would you agree with our list?

Share your thoughts and suggestions in the comments section below.

Kali linux Commands


1.Command: ls
The command “ls” stands for (List Directory Contents), List the contents of the folder, be it file or folder, from which it runs. The most common options are -a (all files) and -l (long or details)
Tab completion is supported and may be configured with .inputrc
When output to file the files are listed one per line.
By default, colour is not used to distinguish types of files. That is equivalent to using –color=none.
Using the –color option without the optional WHEN argument is equivalent to using –color=always.
With –color=auto, color codes are output only if standard output is connected to a terminal (tty).

A.Command “ls -a“, list the content of folder, including hidden files the hidden files is colored blueCommand: lsblkThe “lsblk” stands for (List Block Devices), print block devices by their assigned name (but not RAM) on the standard output in a tree-like fashion.
The “lsblk -l” command list block devices in ‘list‘ structure (not tree like fashion).
Note: lsblk is very useful and easiest way to know the name of New Usb Device you just plugged in, especially when you have to deal with disk/blocks in terminal.
3. Command: sudo
he “sudo” (super user do) command allows a permitted user to execute a command as the superuser or another user, as specified by the security policy in the sudoers list.

exp: root@Kali:~# sudo add-apt-repository ppa:tualatrix/ppa
Note: sudo allows user to borrow superuser privileged, while a similar command ‘su‘ allows user to actually log in as superuser. Sudo is safer than su.
It is not advised to use sudo or su for day-to-day normal use, as it can result in serious error if accidentally you did something wrong, that’s why a very popular saying in Linux community is:
“To err is human, but to really foul up everything, you need root password.”

4. Command: mkdir
The “mkdir” (Make directory) command create a new directory with name path. However is the directory already exists, it will return an error message “cannot create folder, folder already exists”.

exp: root@Kalitut:~# mkdir Kalitut
Note: Directory can only be created inside the folder, in which the user has write permission. mkdir: cannot create directory `Kalitut‘: File exists
(Don’t confuse with file in the above output, you might remember what i said at the beginning – In Linux every file, folder, drive, command, scripts are treated as file).

5.Command: chmod
The Linux “chmod” command stands for (change file mode bits). chmod changes the file mode (permission) of each given file, folder, script, etc.. according to mode asked for.
There exist 3 types of permission on a file (folder or anything but to keep things simple we will be using file).

Read (r)=4
Write(w)=2
Execute(x)=1

So if you want to give only read permission on a file it will be assigned a value of ‘4‘, for write permission only, a value of ‘2‘ and for execute permission only, a value of ‘1‘ is to be given. For read and write permission 4+2 = ‘6‘ is to be given, ans so on.
Now permission need to be set for 3 kinds of user and usergroup. The first is owner, then usergroup and finally world.

rwxr-x–x   abc.sh

Here the root’s permission is rwx (read, write and execute).
usergroup to which it belongs, is r-x (read and execute only, no write permission) and
for world is –x (only execute).
To change its permission and provide read, write and execute permission to owner, group and world.

root@Kali:~# chmod 777 abc.sh

only read and write permission to all three.

root@Kalitut:~# chmod 666 abc.sh

read, write and execute to owner and only execute to group and world.

root@Kalitut:~# chmod 711 abc.sh

Note: one of the most important command useful for sysadmin and user both. On a multi-user environment or on a server, this command comes to rescue, setting wrong permission will either makes a file inaccessible or provide unauthorized access to someone.

6.Command: tar
The “tar” command is a Tape Archive is useful in creation of archive, in a number of file format and their extraction.

root@Kali:~# tar -zxvf abc.tar.gz (Remember ‘z’ for .tar.gz)
root@Kali:~# tar -jxvf abc.tar.bz2 (Remember ‘j’ for .tar.bz2)
root@Kali:~# tar -cvf archieve.tar.gz(.bz2) /path/to/folder/abc

Note: A ‘tar.gz‘ means gzipped. ‘tar.bz2‘ is compressed with bzip which uses a better but slower compression method.

7. Command: cp
The “copy” stands for (Copy), it copies a file from one location to another location.

root@Kali:~# cp /home/user/Downloads abc.tar.gz /home/user/Desktop (Return 0 when sucess)

Note: cp is one of the most commonly used command in shell scripting and it can be used with wildcard characters (Describe in the above block), for customised and desired file copying.

8. Command: mv
The “mv” command moves a file from one location to another location.

root@Kali:~# mv /home/user/Downloads abc.tar.gz /home/user/Desktop (Return 0 when sucess)

Note: mv command can be used with wildcard characters. mv should be used with caution, as moving of system/unauthorised file may lead to security as well as breakdown of system.

9.Command: pwd
The command “pwd” (print working directory), prints the current working directory with full path name from terminal.

root@Kali:~# pwd
/home/user/Desktop

Note: This command won’t be much frequently used in scripting but it is an absolute life saver for newbie who gets lost in terminal in their early connection with nux. (Linux is most commonly referred as nux or nix).

10. Command: cd
Finally, the frequently used “cd” command stands for (change directory), it change the working directory to execute, copy, move write, read, etc. from terminal itself.

root@Kali:~# cd /home/user/Desktop
server@localhost:~$ pwd
/home/user/Desktop

Note: cd comes to rescue when switching between directories from terminal. “Cd ~” will change the working directory to user’s home directory, and is very useful if a user finds himself lost in terminal. “Cd ..” will change the working directory to parent directory (of current working directory).

File Operations:
pwd                        Print Name Of Current/Working Directory
The pwd is an acronym for print working directory. The pwd command is considered as one of the most frequently used commands on Linux, AIX, HP-UX, *BSD, and other UNIX like operating systems along with the ls, and cd commands. It can be used for the following purposes under Apple OS X or UNIX or Linux operating systems:
=> Find the full path to the current directory.
=> Store the full path to the current directory in the shell variable.
=> Verify the absolute path.
=> Verify the physical path i.e exclude .

cd                            Changing The Working Directory
cp                            Copy Files Or Directory
rm                            Remove Files And Directory
ls                              List Of Directory Contents
mkdir                       Make Directory
cat                            Concatenate Files And Print On Standard Output
mv                            Move Files
chmod                      Change Files Permissions

Know Your System
uname                      Print System Information
who                         Show Who Is Logged On
cal                           Displays Calculator
date                         Print System Date And Time
df                            Report File System Disk Space Usage
du                            Estimate File Space Usage
ps                            Displays Information Of Current Active Processes
kill                          Allows To Kills Process
clear                        Clear The Terminal Screen
cat /proc/cpuinfo          Cpuinfo Display CPU Information
cat /proc/meminfo          Display Memory Information

Compression
tar                        Store and Extract Files From An Archive File
gzip                       Compress Or Decompress Named Files

Network
ifconfig                   To Config Network Interface
ping                       Check Other System are reachable from The Host System
wget                       Download Files From Network
ssh                        Remote Login Program
ftp                        Download/Upload Files From/To Remote System
last                       Displays List Of Last Logged In User
telnet                     Used To Communicate With Another Host Using THe Telnet Protocol

Searching Files
grep                       Search Files(s) For Specific Text
find                       Search For Files In A Directory Hierarchy
locate                     Find Files By Name

What is pretexting?

Pretexting is defined as the action of building a planned scenario to convince a targeted victim to disclose data or make some action. It is more than only creating a trick; in some situations, it can be generating a completely new identity and then using that identity to manipulate the receipt of data.

Social engineers can use pretexting to impersonate people in specific positions and roles that they never themselves have done. Pretexting is not a one-size-fits-all solution. A social engineer must improve many various pretexts over his or her career. All of them will have one thing in common: research. Good information gathering methods can create or break a good pretext. For example, simulating the perfect tech support rep is ineffective if your victim does not use external support.

Pretexting is also used in fields of life other than social engineering. Trades; public speaking; so-called fortune tellers; neurolinguistic programming (NLP) experts; and even professors, lawyers, therapists, and the like all have to use a form of pretexting. They all have to build a scenario where people are satisfied with revealing information they regularly would not. The difference in social engineers using pretexting and others are the purposes involved. A social engineer must live that persona for a time, not just play a part.

Wednesday, September 13, 2017

What is a VPN? How does it work?


Virtual Private Networks (VPN) are used today for many reasons, in the past, these type of connections were often used in business environments when a large employer wishes to allow employees access secured internal network over the internet while working from home or in the field, but it’s becoming more and more common now to see them used by even small businesses or even individuals who for a range of reasons wish to keep their activities online secure and private.

How does it work?

when your device is trying to connect to the internet, it connects to your Internet Service Provider (ISP), which then connects your device to any website or other internet services. Your internet traffic crosses through your ISP’s servers and can be inspected by your ISP.

But when your device is using VPN, you are connecting to the VPN provider server via an encrypted connection (VPN tunnel). Once connected, all internet traffic is encrypted and secured from eavesdropping, but the VPN server can see it.

Now the first step of the security process for a VPN involves creating a tunneling protocol which acts as well a tunnel or channel for the information packets being transferred to pass through, it creates a security layer which immediately terminate the connection whenever it detects an intrusion and reconnects the client back to the server using a different route avoiding the compromised points. All of the data you’re sending and receiving in this tunnel is encrypted and secured from prying eyes.

You should use a VPN when you work on an untrusted network, which mean using your device at the coffee shops and logging in to Paypal or using your phone’s Wi-Fi to check your inbox at the airport can all potentially put you at risk.


Most frequently asked interview questions on linux

Here are some of the linux interview questions and answers that would help you to crack some of the most important and difficult interviews as a beginner.

1. What is the basic difference between Linux and Unix?

Linux is an open source operating system while Unix is a proprietary operating system. Linux is therefore, available for free to download but Unix is a paid OS (most of the versions

2. How can you find the active connections through terminal?

Using the netstat command, it is possible to find the active internet connections with the current machine. It is a command line network utility tool.

3. What is the minimum partition requirement in Linux and enlist them.

There should be minimum two partitions that every Linux distribution should have and these are as follows:
Swap Partition
Root Directory

4. What is the SU command used for in Linux?

The SU command in Linux is used to switch from one user account to another user account. You just need to type sudo su and enter the password to switch to another user account in your Linux system.

5. Tell the command to shut down the system.

The command to shutdown the OS is shutdown -h time. In place of time, you can add a number representing the seconds after which you need to shutdown the system.

 6. What is fork()?

fork() is a system call primarily. It is sued to create a new process from an already active process in the system memory. Therefore, the primary process is called the parent process and the newly created process is called the child process.

7. How many run levels modes are available in Linux operating system?

There are a total of seven run level modes available in linux operating system.

8. What do you mean by Open Source System Softwares?

Open Source Softwares are the ones that are freely available for use. They generally come under the GPL License which enables us to view the source code, manipulate it and use it. However, we cannot resell them.

9. How can you list all the running programs in your Linux system?

The TOP Command can be used to enlist all the running processes in your Linux system. You can types TOP in Linux terminal and you’ll get the details of the current processes in your system.

10. What is the difference between BASH and DOS?

BASH is a Unix shell and a command language. DOS is an abbreviated form for Disk Operating System. It is used in Microsoft systems for Command Line Interface. DOS commands are not case sensitive whereas BASH commands are case sensitive.

11. How can you view the current Swap and RAM memory in your Linux system?

There is a command that can be used in the terminal in Linux operating system. The command is FREE. It enables you to view the currently active RAM and Swap memory in the system.

12. Is it legally acceptable to edit the source code of Linux Ubuntu?

Definitely Yes. Linux Ubuntu currently has a large community who regularly edits the source code for modifications and send it to the Linux team. These changes are reviewed by the core team and implemented in the next version. So, it is possible to edit the source code as it comes under GNU GPL License.

13. Which command is used to enlist the files in a particular directory?

To view the existing files in the current directory, you can use the LS command. It is an abbreviated form for LIST.

14. What is Kernel in Linux?

A Kernel in Linux is an essential part of an OS. It is the core of Linux OS. The Kernel provides basic services and interacts with the User Commands. It is fetching your commands and then retrieving the results from the OS and again sending back to the User.

15. Enlist the types of Kernels.

There are various types of Kernels listed as follows:
Monolithic Kernel
Micro Kernel
Hybrid Kernel

16. Which Program is used to securely login in Linux Operating System?

Secure Shell is used to remotely login in Linux OS. It is also known as SSH. SSH is an encrypted or cyrtographic network protocol. SSH is a good replacement of Telnet, which was previously used in Linux OS for Login purpose.

17. Name the Partition that stores the system configuration files in Linux system.

The partition that stores the system configuration files in Linux OS is /etc.

18. Who is the creator of Linux Operating System?

Linus Torvalds has created the Linux Operating System.

19. Enlist the distributions of Linux.

The different types of Linux distributions are listed as follows:
Linux Mint
Ubuntu
Mandriva
Arch
Slackware
Debian
Fedora

20. Where is the user password stored in Linux Operating System?

The User passwords are stored in the directory /etc/passwd

21. In Linux OS, which Daemon controls the Printer Spooling process.

The Line Printing Daemon, also known as LPD controls the Printer Spooling Process.

22. Enlist the filesystems supported in Linux OS.

The filesystems supported by Linux are as follows:
XFS
EXT3
NFS
RAMFS
EXT4
AUTOFS
NTFS

23. What is GNU GPL License?

The GNU General Public License is a Free Software License. This License enables the Users to share, copy, manipulate the code of the software. Therefore, the software code is available for free.

24. Which command is used to delete the files in Linux through command line?

The command used to delete the files in linux is rm.

25. Name the command used to remove the directory.

The command used to remove the directory is rmdir.

26. What should be the size of Swap memory in Linux?

Usually, the size of the Swap memory in Linux Systems should be equal or more two times that of RAM.

27. Explain SE-Linux.

SE – Linux is an abbreviated form for Security Enhanced – Linux. It has been developed to prevent Illegal Daemons and Server Misconfigurations. It provides access control implementation. It implements access authorities to daemons, programs for the files that they can access. The Security Enhanced – Linux provides Security Policy formation.

28. Who is the inventor of Unix Operating System?

The Unix Operating System is created by Dennis Ritchie and Ken Thompson at Bell Labs in 1969.

29. What is the default text editor for Linux?

The default editor for text files in Linux operating system is VI Editor. It can be used to edit any ASCII Text.

30. Name the argument to extract the files from archives using Linux Terminal.

To extract the files from archives, there can be a combination of multiple commands. If you’re trying to extract using TAR Command, then you have to use -x argument with it.

31. What is a Package Manager?

A Package Manager in Linux is a collection of softwares which provides Upgradation, Modification, Removal, Installation and Deletion of programs from the Linux Operating System. It is also known as Package Management System. It is especially developed to automatically install and update the system softwares.

32. What is the name of the Boot Loader in Linux Ubuntu Operating System?

The Boot Loader in Linux Ubuntu OS is called as GRUB Boot Loader.

33. How do you move from one directory to another directory in Linux Operating System?

By using the CD command in Linux Terminal, the user can move from one directory to another one. CD is an abbreviated form of Change Directory.

34. What is Sudo Command?

Sudo command is used to provide highest level access authority to the users. If you use a command in the Linux terminal, you may get an Access Denied output. If you want to make the terminal process a command, you can use the prefix SUDO to get administrator rights for the same.

35. What is Shell?

The Shell is basically an interface between the User Commands and the Operating System. Whatever the user types in is interpreted by the Shell and is then sent to the Operating System Kernel for fetching the results. It converts them to the System Calls.

36. Enlist boot files in Linux Operating System.

The files that are loaded a boot time in Linux OS are as follows:
/etc/fstab
/etc/init.d/rc.d/rcN.d
/boot/grub/grub.conf
/etc/initab

37. How can you find the Run – Level of Linux Operating System?

By using the runlevel command from the Linux Terminal, you can find the Run Level of your Linux  system.

38. Enlist the command to install any software in Linux Ubuntu OS.

The command to install any software in Linux OS is as follows:
sudo apt install application-name

39. How can you terminate a currently executing process in Ubuntu terminal?

The key combination Ctrl + Z allows you to terminate a currently executing process in the Linux Ubuntu Terminal.

40. Which command can be used to monitor Linux ports?

The Nmap localhost command is used to monitor ports in Linux Operating Systems.

41. Enlist the Run Level Modes in Linux.

The Run Level Modes in Linux are as follows:
Halt
Reboot
Single User Mode
Undefined
Multi – User Mode
X11
Multi User Mode with Networking

42. What is the core of Linux OS?

The Linux Kernel is the core of Linux Operating System.

How to Turn Off Your PC Using Your Smartphone

Do you want to turn off your PC at your home and save some electricity. Or may be try to shutdown your PC from outside just because it looks cool. We got you covered.

If you ever walked away from your computer and remembered that you forgot to turn it off, you can actually do it from your smart phone!

To begin with, you need to download Unified Remote app on your smartphone (iOS, Android), and you then need to download it’s server to your computer from this website right here.

You can go through the installation process on your PC  and it is easy, straightforward and there is no spyware or any nonsense which comes with it. Once you are finished, make sure the server app is running on your computer, and then open the app on your mobile. It will scan for a server on your local network. Once it finds the server it will let you control your computer.

Now, the way the app works is with a bunch of different remotes. There are remotes that’ll let you control your PC as if it was a mouse and keyboard, but turning off the PC with that would be difficult if you aren’t in the room. The remote we want is called Power. Click that, and then click Shutdown or Restart to turn your PC off.


What is the deep Web?


Did you know that there’s a huge part of the internet that you can’t find simply by Googling it?
In fact, search engines can only account for about 10 % of the total internet. What is the other 90 % that’s out there?  That’s what’s known as the Deep Web.
Deep Web, also known as Deepnet or the Invisible Web, the definition is quite simple, it’s the stuff on the internet that for some reasons cannot be indexed and cannot be reached by traditional search engines. It’s just any page that you simply can’t reach to without having the actual URL and the permissions to access it.

When you look for something on Google, you are actually searching an index as much of the internet as Google has been able to find. Search engines use web crawler software sometimes known as spiders to find and index web pages. They start by finding a few pages at first, then they follow links on those web pages to other web pages and so on until they have a heavy catalogue of the internet. However, there are somethings that those spiders simply can’t reach, this is the Deep Web.

There are a small subsection anonymous networks in the deep web known as the Dark Net and it uses free services such as TOR to browse the web and host websites anonymously. They also provide services that run on the internet but can only be reached through the private network, some of the services have included internet black markets such as silk road where users have to access to drugs, weapons and even assassins.

Also, Dark Web sites go down from time to time, due to their dark nature. But if you want good service, stay out of the dark!



How to Hide Files Behind an Image

We all have secret files that we don’t want anyone to look at. Most common way of hiding important files was either creating a folder inside a folder or some people change the folder type to hidden. But both of these ways are not safe and anyone with little intelligent can easily find the folder you wish to hide.  Today I will show you how you can store a folder inside an image so that who ever wants to find your folder will have a really hard time finding it.

To do this a basic knowledge of command prompt is sufficient. Even if you don’t have it, I will make sure the path is easy for you to follow.

* First select an image beneath which you will hide the file you want.

* Now select the file you wish to hide and convert into .RAR formattd file using winRAR.

* Paste both of these files on the desktop.

* Now press windows key + ‘R’ and then enter cmd.

* CD stands for change directory.By typing the above mentioned command you redirect the directory to desktop.

Copy /b name.jpg + filename.rar image.jpg
Replace name.jpg with the name of image you want your file to be hidden behind. Don’t forget to add image format like  .jpg,.png,.gif etc.
Replace filename with the file of your choose that you choose to hide. It must be in .rar format.
Finally Replace image.jpg with the name of the final image with files inside.

* The newly created image just looks like an image from all sides. You need to follow the following steps to extract files from images.

Accessing the Hidden File ?

To extract the file out of the image, you should open the image in winrar, which can be done in either of these ways.

    * Open winrar

    * Now locate your image and open it or simply drag your image in winrar.

  * Extract the file and done.


Autopsy – A Digital Forensic Tool


The Autopsy is a forensic tool which is used by the military, law enforcement, and corporate examiners to investigate what had happened on a smartphone or a computer.

The Autopsy has a plug-in architecture which allows the user to find add-on modules or even develop custom modules written in Java or Python.

Main features of Autopsy are:

Multi-User Cases: Collaborate with your fellow examiners on large cases.

Keyword Search: Text extraction and the index searched modules allow you to find the files which mention specific terms and find the regular expression patterns.

Timeline Analysis: Displays system events in a graphical interface to help identify activity.

Web Artefacts: Extracts web activity from common browsers to help identify user activity.

LNK File Analysis: Identifies shortcuts and accessed documents.

Email Analysis: Parses MBOX format messages, such as Thunderbird.

Registry Analysis: Uses RegRipper to identify recently accessed documents and USB devices.

EXIF: Extracts geolocation and camera information from JPEG files.

File Type Sorting: Group files by their type to find all images or documents.

Media Playback: View videos and images in the application and not require an external viewer.

Thumbnail viewer: Displays thumbnail of images to help quick view pictures.

Robust File System Analysis: Support for common file systems, including NTFS, FAT12/FAT16/FAT32/ExFAT, HFS+, ISO9660 (CD-ROM), Ext2/Ext3/Ext4, Yaffs2, and UFS from The Sleuth Kit.

Hash Set Filtering: Filter knew good files using NSRL and flags known bad files using custom hash sets in HashKeeper, md5sum, and EnCase formats.

Tags: Tag files with arbitrary tag names, such as ‘bookmark’ or ‘suspicious’, and add comments.

Unicode Strings Extraction: Extracts strings from unallocated space and unknown file types in many languages (Arabic, Chinese, Japanese, etc.).

File Type Detection based on signatures and extension mismatch detection.

Interesting Files Module will flag files and folders based on name and path.

Android Support: Extracts data from SMS, call logs, contacts, Tango, Words with Friends, and more.

DOWNLOAD AUTOPSY


Get Unlimited Free Trials Using a "Real" Fake Credit Card Number

When I see the words "free trial," I know I'm probably going to have to whip out my credit card and enter in the number to ...