Latest Post

Hello, in this tutorial you will learn how to Create Password Stealer using VB Visual Studio.net that send the passwords of the victim to your email.

The recovery files + code.txt (which include the code written bellow) + the visual basic project.
DOWNLOAD HERE
REQUIREMENTS:
1) A mail.com account (their stmp is open and available for 3rd party apps)
2) Basic knowledge in vb.
3) Visual Studio 2008 or more (there is a free version however I will be using the ultimate version of 2013)
4) Nirsoft password recovery bins
5) A victim.

OVERVIEW:
We are going to create an exe file when opened it extracts 4 application which recover saved password on famous web browsers (chrome, Firefox ..Etc.) then launches them in command line mode , they will export the saved password into a text file which will be read by our app then sent to us by email.
We are using vb.net because it is a very easy programming language and it is common in malicious software.

Step by Step How to Create Password Stealer using VB Visual Studio.net:

1)    Open visual studio and create a new project like this
2)    You will get something like this , it is called the designer here you choose how your app looks like, but for our app we want it to be silent and not visible.

3)    Right click on this form and click “View Code <>”
You will get something like this, this is where we put out code.

This is called an event handler, whatever code you put between this and “End Sub” will be executed when the program first opens (before it appears).

4)    Now we need to add the nirsoft password recovery programs to our resources so on your right you need to click on the solution explorer

Then you need to click on My Project, this should appear

Click on resources -> add resource -> add existing file..
A dialog will appear choose the 4 files you downloaded (1.exe , 2.exe , 3.exe  ,3.exe)

5)    Now go back to the coding section and write this code (explained in the green text)

6)    Now we need to click Ctrl – Shift – B  to build our exe (it should show where it saved the exe like in the picture)

CONCLUSION:
You should not open any random exe files unless you are sure it is safe , a tip would be scanning it on virus total or similar sites , what I personally do is open said programs in Sandboxi

Notes: if you are having problems building the project turn off your anti-virus.

Level : Medium, Advanced
Hacking Facebook Using Man in the Middle Attack


In this tutorial Hacking Facebook Using Man in the Middle Attack I will demonstrate how to hacking Facebook using MITM(Man in the Middle). This attack usually happen inside a Local Area Network(LAN) in office, internet cafe, apartment, etc.
Below is the topology or infrastructure how MITM work, and how it can be happen to do hacking a Facebook account.

In the picture above, the attacker act as the third person attacker will manipulate the switch routing table so the victim will think that attacker is a Web server and vice versa, because the attacker has changed the routing table.
For this tutorial we need to prepare the tools to do Proof of Concept about this tutorial. Below you can download it.
1. XAMPP – APACHE+PHP+MySQL(We use XAMPP for our fake facebook web server)
2. Cain & Abel (We use it for Man in the Middle Attack)
3. Facebook Offline Page (I have nulled the code, so this script will not contacting Facebook when victim accessed fake Facebook page — only use this for learning)
Download Facebook Offline Page (mediafire.com):
Download
Update : replace your index.php and login.php using following files Download Here.

Step by step Hacking Facebook Using Man in the Middle Attack:

Attacker IP Address : 192.168.160.148

Victim IP Address : 192.168.160.82
Fake Web Server : 192.168.160.148
I assume you’re in a Local Area Network now.
1. Install the XAMPP and run the APACHE and MySQL service
Hacking Facebook Using Man in the Middle Attack

2. Extract the fb.rar and copy the content to C:\xampp\htdocs
Hacking Facebook Using Man in the Middle Attack
3. Check the fake web server by open it in a web browser and type http://localhost/
Hacking Facebook Using Man in the Middle Attack
4. Install Cain & Abel and do the APR(ARP Poisoning Routing), just see the step by step how to below
Hacking Facebook Using Man in the Middle Attack

Click the start/stop sniffer

Hacking Facebook Using Man in the Middle Attack

Choose your interface for sniffing and click OK. When it’s finish, click again the Start/Stop Sniffer to activate the sniffing interface.
Go to the Sniffer tab and then click the + (plus sign)

Hacking Facebook Using Man in the Middle Attack

Select "All hosts in my subnet" and Click OK.
Hacking Facebook Using Man in the Middle Attack

ou will see the other people in your network, but my target is 192.168.160.82 (MySelf…LoL :p)
Hacking Facebook Using Man in the Middle Attack

After we got all of the information, click at the bottom of application the APR tab.
Hacking Facebook Using Man in the Middle Attack
Click the + button, and follow the instruction below.
Hacking Facebook Using Man in the Middle Attack

When you finish, now the next step is preparing to redirect the facebook.com page to the fake web server.
Click "APR DNS" and click + to add the new redirecting rule.
Hacking Facebook Using Man in the Middle Attack
Hacking Facebook Using Man in the Middle Attack
When everything is finish, just click OK. Then the next step is to activate the APR by clicking the Start/Stop APRbutton.
Hacking Facebook Using Man in the Middle Attack

5. Now Hacking Facebook using MITM has been activated. This is how it looks like when victim opened http://www.facebook.com
Hacking Facebook Using Man in the Middle Attack
6. But if you ping the domain name, you can reveal that it’s fake, because the address is IP of the attacker
Hacking Facebook Using Man in the Middle Attack

Hope you found it useful 🙂



Computer security is improving and getting tough day by days, but most of technology leave the users behind about the importance of awareness of the user itself.

According to the website bettercap.org this tool is a powerful, flexible and portable tool created to perform various types of MITM attacks against a network, manipulate HTTPHTTPSand TCP traffic in realtime, sniff for credentials and much more.

Requirements:

1. Ruby interpreter ( >= 1.9 )
2. RubyGems environment installed.
3. Bettercap
4. Kali Linux 2016.2

3 Steps GMail MITM Hacking Using Bettercap:

1. TO install Bettercap in Kali Linux it’s more easy, just run apt-get update from terminal, and then run apt-get install bettercap.

2. To check the available options in Bettercap, we can run bettercap --help.

3. In this tutorial we’ve set the target is IP 192.168.1.111; but if you want to target the whole network, you can set the -T options without address. We’ve run this command
bettercap     -   T 192.168.1.111        --      proxy -     P POST


Conclusion how to avoid 3 Steps GMail MITM Hacking Using Bettercap:

1. Look the URL/address bar of your browser carefully. The log in page usually encrypted and started with https://
2. Type the destination URL  completely e.g: https://mail.google.com in your browser address bar.

Share if you found this post useful. 🙂

Some people who not too understand about computer networking they will get confused with this question "How to Know My Public IP Address".



 Actually this process was simple, but maybe some of you not get the clear information what is the real Public IP Address. Some of my friend (they have a little background about IT) when I ask "How to Know your Public IP Address"? they will answer "Ah I have an internet connection", or "I have a personal router and I can configure it by myself", or "I think yes I have a public IP Address" 😛
 When you have an internet connection, or you have personal router, doesn't guarantee that you also have a public IP address, because most of internet provider they will share and divide the bandwidth into some pieces (the internet provider will do the calculations, you can ask them about this 🙂 ). Usually you need to spent some money to get/rent this public IP address and the price is higher than usual/normal.

 Step by Step How to Know My Public IP Address:

Before start, if you have router, switch or other network mediator unplug it first. Make sure your computer connected directly to the internet source.

1.Public IP addres:  https://whatismyipaddress.com or   https://www.ip2location.com/
2. Open command prompt in Windows or Terminal in Linux and type ipconfig.
or you can use this code (in Windows):
ipconfig
pause();
copy and paste the code above into your notepad and save as ipconfig.bat.
Remember: when save as, make sure when notepad ask "Save as Type" you choose "All Files" 3. This is your computer current IP Address:
4. If your computer current IP address and the box in the 1st step have the same result, then you have a public IP address. If not, then you didn't have public IP address.
 Hope it useful 🙂

  We've heard whispers about a secret Microsoft project called Andromeda -- a handheld foldable Surface-branded device that blurred the lines between phone, tablet and PC. Although previous rumors claimed that Andromeda was coming out this year, reports are now saying the Andromeda project has been put on hold indefinitely.




 The updates come from known Microsoft reporters Tom Warren and Mary Jo Foley, who both say that Andromeda won't come out this year and that Microsoft has gone back to the drawing board. With both reporters independently reaching the same conclusion, it seems pretty likely that the fate Andromeda is up in the air.


So like @maryjofoley I'm hearing Andromeda is definitely not coming in 2018. OEM devices may come, but not with Andromeda OS as it's not ready. The entire project is now under review because there's no app ecosystem to support it

 Warren previously reported on Andromeda in detail, and claims to have seen internal Microsoft documents about the device. Now he's saying that the Andromeda OS isn't ready and it's "definitely not coming in 2018."
  Meanwhile, Foley cites a recent Microsoft executive shake-up as the potential reason for Andromeda's death. Her sources say Microsoft officials were deciding whether or not to include bits of the Andromeda OS in the next Windows 10 feature release, but ultimately decided against it.
By taking Andromeda out of the next Windows 10 release, Microsoft may be suggesting that dual-screen devices aren't quite ready yet. Had Andromeda arrived this year it could've led the new wave of dual-screen laptops.
  And due to Andromeda's handheld nature, it could've been among the first folding phones and tablets. While we've seen plenty of patents and heard rumors about folding devices, they haven't really hit the market yet (besides the wacky ZTE Axon M).

  Now that the word is out that Andromeda is on hold, Microsoft fans have put together a Change.org petition to show their interest in the device. As of right now it has over 700 signatures.

 Things aren't getting any better for HTC. The Taiwanese smartphone maker on Friday said sales last month plunged 68 percent to NT$2.23 billion (US $72 million) compared with NT$6.9 billion in June 2017. It's the company's biggest slump in more than two years, reported Reuters.




The sales are just one more data point in a string of bad news for the beleaguered company that, despite posting a profit in its first quarter of 2018, had suffered 11 consecutive quarters of financial loss.
HTC on Monday said it will lay off 1,500 employees, or about 22 percent of its workforce, to cut costs and help it return to profitability, according to a tweet from Bloomberg's Taipei bureau chief, Samson Ellis. HTC confirmed the layoffs, but declined to give specific numbers.




June 26: @htc says it will return to profitability this year
July 2: @htc says it will cut its Taiwan workforce by 1,500 people (about 22% of total employees)

In 2012, HTC, which generates nearly all of its revenue from smartphones, was the No. 4 smartphone maker in the world, according to IDC. In 2014, it had dropped below Samsung, Apple, Xiaomi, Lenovo and LG. The company -- known for making beautiful devices with big, bright screens and top-tier specs, is hoping early adopters will be drawn to its newest flagship, the HTC U12 Plus, which became available last month.
HTC didn't immediately respond to a request for comment.
Blockchain Decoded: CNET looks at the tech powering bitcoin -- and soon, too, a myriad of services that will change your life.

Follow the Money: This is how digital cash is changing the way we save, shop and work.

 Twitter is reportedly stepping up its fight against fake accounts by suspending more than 1 million accounts a day in recent months. 




 That's more than twice the number of account suspensions in October, when the social media company was under pressure from lawmakers to fight Russian meddling, The Washington Post reported Friday. Data obtained by the Post shows more than 70 million Twitter accounts were suspended in May and June, and the company has continued to crack down at that rate into July. 
  In response to a request for comment, Twitter directed CNET to a blog post from last week that says, in part, that Twitter is "now removing 214 percent more accounts for violating our spam policies on a year-on-year basis." The company also said the average number of spam reports it's received dropped from around 25,000 a day in March to around 17,000 a day in May. New protections "have already helped us prevent more than 50,000 spammy sign-ups per day," the post reads.
Removing accounts at this scale could lead to a drop in the number of monthly active users in the second quarter, a person familiar with the matter told the Post. A Twitter representative told CNET that the company's Q1 shareholder letter acknowledges that its "ongoing information quality efforts," along with other factors, were impacting the number of monthly active users (MAU). 
 "MAU may continue to be negatively impacted in future periods due to our ongoing information quality efforts, GDPR, and other operational decisions," the letter reads. 
 Twitter's effort to combat abusive bots and trolls comes as the company deals with revelations that Russian-linked social media troll accounts might have impacted the outcome of the 2016 US presidential election. Russian bots shared Donald Trump's tweets almost 470,000 times between Sept. 1 and Nov. 15, 2016, and retweeted candidate Hillary Clinton less than 50,000 times, Twitter told congressional investigators in January.

Author Name

Biểu mẫu liên hệ

Tên

Email *

Thông báo *

Được tạo bởi Blogger.