Hacking CCTV Camera System in 30 Seconds!

Security researcher Zayed Aljaberi, the founder of wesecure.ae has demonstrated the process to hack into the CCTV camera system in just 30 seconds. Here is what he has to say:

Recently, attacks on the CCTV Camera System are increasing. Hackers can easily spy into your camera system without your knowledge everywhere and everytime they want.

So, I decided to buy CCTV Camera System and try to hack it. Unfortunately, it was easy to bypass the login authentication. It took me less than 2 min two discover the vulnerability.

At the end of this presentation:-

• You will be able to hack CCTV Camera System of this product (PROLAB)
• Understand how to spy everywhere not only at same network locally.
• Increasing the security of the CCTV Camera System.

Presentation: https://docs.google.com/presentation/d/10cmvMBh_jBuebClGNgqYbOily8G0RojM7osS88xNllA/edit?usp=sharing



POC:

His original post

Read more

by Malik korrich ~ jeudi 18 août 2016 0 commentaires

Secured! Think Again About That Printer in the Corner

In many organizations the printers are used too often and in some it is collecting dust, apparently, it’s the best target that can be used as an attacking surface. There are countless companies who don’t bother about updating the firmware of their printers, leaving their documents open to attackers. The inventories like printers and others are not even discussed in annual security audits and are assumed to be useless in security aspects.

As printers are seemingly harmless, that’s the exact reason it poses a serious threat. Sometimes, the best attack vector for an attacker is the one to which no one bothers to think about. However, a recent IDC survey found that 35 percent of all security breaches in offices were traced back to an unsecured printer or multi-function device, costing companies $133,800 each year.

Why Companies Should Consider Printer as a Security Threat?

As printers are the essential inventories to business from small organizations to huge corporate level organizations and are ignored when it comes to vulnerability management and assessment. Enterprise security tools are only to protect computers and network; they often do not block or monitor access from the printers. That makes the printer a trouble-free approach to the attacker.

Chris Vickery, a white hat hacker and Security Researcher at MacKeeper said: “Getting control of a printer within an organization can provide a foothold for further attacks and a position to ‘pivot’ out of into networks”.

There are some serious effects if the printer gets compromised and used by attacker, like attackers can capture every document sent to the printer. It could be serious business intelligence comprise that no organization can tolerate.

Preventing Data Loss from Printers

It’s too easy to suggest one ultimate security tip to prevent such threat that includes the replacement of outdated printers with newer models that have some latest security features. Furthermore, Data encryption should be introduced to all latest printers to prevent data exposure if compromised. Although it has been adopted by Xerox in March 2016, other companies should also consider this feature to introduce with their products.

In the end, as IT administrators are responsible to configure printer and other multipurpose device in an organization, they should be aware of the threats associated with those devices so some serious countermeasures can be taken prior to the transmission of data.

Read more

by Malik korrich ~ mercredi 10 août 2016 0 commentaires

DMitry: Deepmagic Information Gathering Tool

DMitry (Deepmagic Information Gathering Tool) is a UNIX/(GNU)Linux Command Line Application coded in C language.

DMitry has the ability to gather as much information as possible about a host. Base functionality is able to gather possible subdomains, email addresses, uptime information, tcp port scan, whois lookups, and more. The information are gathered with following methods:

• Perform an Internet Number whois lookup.
• Retrieve possible uptime data, system and server data.
• Perform a SubDomain search on a target host.
• Perform an E-Mail address search on a target host.
• Perform a TCP Portscan on the host target.
• A Modular program allowing user specified modules

Download and installation

DMitry can be downloaded by issuing following commands:

$ cd /data/src/
$ wget http://mor-pah.net/code/DMitry-1.3a.tar.gz

For installation, issue following commands:

$ tar xzvf DMitry-1.3a.tar.gz
$ cd DMitry-1.3a/
$ ./configure
$ make
$ sudo make install

Then optionally create a symbolic link to your /pentest/ directory:

$ mkdir -p /pentest/enumeration/dmitry/
$ ln -s /usr/local/bin/dmitry /pentest/enumeration/dmitry/dmitry

Use

help

DMitry help can be displayed by issuing:

$ dmitry --help

or, for a more complete documentation:

$ man dmitry

Read more

by Malik korrich ~ vendredi 22 juillet 2016 0 commentaires

Become a PRO Hacker – Python for Hackers

Python, the known scripting language has already changed the cyber landscape. Hackers are using Python as a weapon to hack into the servers and other electronic devices. To fight against the black hat hackers, the good guys have to take this weapon as well. Infosec professionals are now using python during the pentesting process, it is an effective way to test the overall security of a network / web application.

The simple phenomena say, writing your own scripts is more effective than using the standard expensive hacking tools. The bundle course introduces by EH Academy teaches the same, it says “Hack Like a PRO using Python”. This training program is a bundle of two known trainings:

•          Android hacking using Python
•          Python for Offensive penetration testing

And, luckily the academy has announced discount for the new users. The enrollment can be taken place by just paying $39 (original price is $139).

Coupon code: HLPP39T

Learn python, learn to write your own scripts in the difficult situations because tools are designed / created to solve a particular situation that faces the known issues. But, hacking tools fail whenever it has to face a challenge. Some important things to learn that the discussed course teaches:

·         Coding reverse TCP shell on Python

·         Create Anti-virus free keylogger using python

·         Password phishing – DNS poisoning

·         Facrbook password phishing

·         Backdooring legitimate windows services

·         Bypassing IPS and hand-made XOR encryption

·         Bypass reputation filtering in next generation firewalls

·         Building a botnet

·         Decoding whatsapp messages (contacts, calls, phone logs and etc.)

·         Build a semi Android shell

·         Build reverse SSH tunnel

·         And many more….

Get the weapon of python in fighting the cyber war; it is not coming, but it is already here. Enhancing the skills and learning the new language always help to defend the computer system; it also helps to strengthen the overall security before the bad guys attack.

Get ready for the future.

Read more

by Malik korrich ~ mercredi 13 juillet 2016 0 commentaires

Hack any Android Device using Python Scripts

Ever wonder how bad guys hack Android devices? Or how they simply manage to steal the data from remote locations? Well, there are many ways to get in on any android or iOS mobile. But, the easiest and most effective way is to use a backdoor (Trojan, malware) that opens the channel of stealing personal information, taking control of the mobile, ad frauds, stealing financial information and other potential harm.

Who help the hackers? Hacking tools? But, sometimes or most of the time, the tools don’t work. This is where we differentiate a script kiddie and a pro; a pro hacker and cyber security professional writes his own code to bypass the facing issues and challenges, while script kiddies only follow what’s being created by a pro.  

Learn hacking like a pro using python scripts, learn to hack any android device using backdoor, write your own scripts to hack, don’t rely on anybody’s tools.

EH Academy offers a crash training program that teaches the art of writing python scripts that hack Android devices. The focus of the course is to create Trojan, spread Trojan to get access of many android devices at once, learn to create the backdoors and hack any Android phone. What you will learn:

• Code a simple Android GUI interface purely in Python
• Build a simple cross platform SSH botnet purely in Python
• Code an SSH Android Trojan
• Transfer / exfiltrate Data out of target device
• Run Python SSH reverse shell on Windows, Linux, Android
• Transfer and decode Decode Android calls, sms messages, Whatsapp chat Databases

Get access to the training program today. Enroll now!

Read more

by Malik korrich ~ lundi 11 juillet 2016 0 commentaires

OWTF: OWASP Offensive Web Testing Framework

OWTF is OWASP’s (Open Web Application Security Project) Offensive Web Testing Framework. This tool automates the manual and un-creative part of pen-testing. OWASP’s project OWTF is focused on penetration testing efficiency and alignment of security testing standards.

This framework will help pen-testers to:

1) View big picture and think out of the box.
2) More efficiently find and verify vulnerabilities.
3) Due to automation, gets more time to work on complex vulnerabilities.
4) Perform more fuzzing on apparently risky parts.

The tool is highly user friendly and can be used by anyone without developing skills. Although, understanding and experience will be required to further investigate and use the output.

Features

Resilience

It allows OWTF to store partial output when a tool crashes. It will store the output and allow pen-tester to monitor processes.

Flexibility 

It allows pausing the processes when network connection of host or victim goes down. You can resume them later, avoiding loosing data.

Easy to Use API

OWTF uses PostgreSQl on back-end, enabling pen-testers to handle all functions and options through APIs. Pen-tester can add new feature with less efforts.

OWTF supports many popular pen testing standards making it considerable by pen-testers and ethical hackers. Its responsive interface enable user to easily work on it without developing skills.

Prerequisites

There are few packages which are mandatory before you proceed
• Git client: sudo apt-get install git
• Python 2.7, installed by default in most systems
• Wget: sudo apt-get install wget

Manual installation of OWTF is nothing but cloning the repository and running the install script
git clone https://github.com/owtf/owtf.git

Read more

by Malik korrich ~ samedi 18 juin 2016 0 commentaires

Top 10 Web Application Vulnerability Scanners

A web vulnerability scanner is a program which works on a web application in order to discover potential security vulnerabilities and architectural flaws. It performs a black-box test, no source code is reviewed.

As web applications are widely used now days, performing many businesses around the world. This is making it an easy target for many attackers to play around. In past few years, thousands of web applications are compromised due to its security vulnerabilities and loop holes in their architecture.

Today we are going to discuss about the top 10 web application scanners through which we can discover security flaws before being targeted.

Netsparker

Netsparker is the web security scanner which supports both exploitation and detection of vulnerabilities. It provides the result for only confirmed vulnerabilities after successful exploitation and testing.

Burp Suite

Burp suite is a Java base software for performing vulnerability scanning of web applications. It contains a variety of tools designed to facilitate the attack. The free version is available with limited features, but can be directly purchased with one year subscriptions for $299.

Nikto

Nikto is an open source web security scanner tool which performs comprehensive scanning of web servers. It can scan multiple items on servers, including files and versions specific problems for servers. It can also check server's configuration, making it a powerful tool to scan server's security and related flaws.

W3af

W3af is known as most powerful and flexible tool for finding web application’s vulnerability. It’s easy to use feature made it popular among the security professionals like ethical hackers. W3af contains many web assessment and exploitation plugins as well.

Arachni Vulnerability Scanner

Arachni is a feature-full, modular, high-performance Ruby framework aimed towards helping penetration testers and administrators evaluate the security of modern web applications.

It is free, with its source code public and available for review.

WebScarab

WebScarab is a tool, available for anyone who wants to expose or check the working of HTTP request on web application. It allows developer to debug program, and security specialist to identify vulnerabilities in the application or in application's design.

Vega

Vega is a free and open source scanner and testing platform to test the security of web applications. Vega can help you find and validate SQL Injection, Cross-Site Scripting (XSS), inadvertently disclosed sensitive information, and other vulnerabilities. It is written in Java, GUI based, and runs on Linux, OS X, and Windows.

Vega includes an automated scanner for quick tests and an intercepting proxy for tactical inspection. The Vega scanner finds XSS (cross-site scripting), SQL injection, and other vulnerabilities. Vega can be extended using a powerful API in the language of the web: Javascript.

Skipfish

It is the most popular tool that scans and prepares sitemap for the web application by recursively crawling into the application. The resulted sitemap is further can be used to exploit and discover different vulnerabilities.

Acunetix

Acunetix is known for its automated nature to find the vulnerabilities such as Sql injection, cross site scripting, weak password strength on authentication pages and others. Security professional uses this tool for preparing security audit reports and advance web penetration testing due to its interactive GUI.

AppScan

AppScan is the scanning tool that provides security testing throughout the development cycle of a web application. It scans the web application for the commonly known vulnerabilities and backdoors. Many professional and penetration testers use this tool to test the web application.


Web Vulnerability scanners are not limited to these defined tools only. There are many other tools that are used by cyber security professionals and pen-testers to scan the web application for any flaw.

Read more

by Malik korrich ~ vendredi 17 juin 2016 0 commentaires

10 Best and Most Popular Hacking Tools

Hacking can be used for harmful purposes as well as for finding flaws/vulnerabilities in a system and notify the authorities to help them secure their system better. However, the tools and scripts used for hacking are known to all hackers and available for use. Which help them greatly in their task, which can be of ethical or non-ethical genre. Today we have discussed some of them below.

Angry IP Scanner

A hacker can track people and sneak for their data using their IP address. Angry IP Scanner also known by the name of “ipscan” and helps hacker to scan IP addresses and ports which can be used as a doorway into a user’s system. It is an open source and cross-platform software and one of the most powerful hacking tools present in the market that is frequently being used by network administrators and system engineers.

Kali Linux

In August 2015 Kali Linux was released. It has a major release known as Kali Linux 2.0. This is a new form of BackTrack Linux. Kali Linux is an operating system which focused on security and supports a number of desktop applications. With its security toolkits you can do various penetration testing.

Cain & Abel

Cain and Abel is a password recovery and hacking tool. Mostly used for Microsoft systems. It decrypts the password for recovery purpose using brute force methods. It can also record VoIP conversations.

Burp Suite

Burp Suite is used to map and list out the different parameter and pages of website by examining cookies. Web vulnerabilities are easily be found by Burp Suite and many hackers uses this method to find an appropriate point of attack.

Ettercap

Ettercap is widely used and popular tool, which is used to help deploy a Man in the Middle attack. Attacker uses different attacking methods on a victim’s system if its functioning is flourishing.

John the Ripper

John the Ripper is a password cracking tool, uses dictionary attack. Where a different combination of words is matched against the encrypted string to find the match. It is a brute-force attack which depends on the strength of the password chosen by the user. It is a common tool used by hackers.

Metasploit

Metasploit is another hacking cryptographic tool widely used by hackers now a day, whether they are white hat or black hat. It helps them to find the known vulnerabilities present in the system.

Nmap

Nmap ("Network Mapper") is a free tool available for network and security auditing. Many system engineers and network administrators used it for tasks such as network inventory, managing service upgrade schedules, and monitoring host or service uptime. Nmap uses raw IP packets in a new ways to determine the available hosts on the network, services (application name and version) which are offered by the host, operating systems (and OS versions) details and other dozens of characteristics.

OWASP Zed Attack Proxy (ZAP)

The OWASP Zed Attack Proxy (ZAP) is world’s most popular free security tools. It helps you discover security vulnerabilities in your web applications in development and testing phase. It is also a great tool for pentesters for manual security testing.

Wireshark

Wireshark is the world's famous network protocol analyzer. It lets you observe what's happening on your network at a microscopic level. It’s the most powerful display filters in the industry to analyze hundreds of protocols deeply.

There are many more tools available in the market as well that are powerful though, but mentioned above are the most recommended and preferred tools used by professionals and beginners as well.

Read more

by Malik korrich ~ mardi 14 juin 2016 0 commentaires

Facebook Hack: How To Modify Chats

As we all are familiar with the popular social networking site Facebook, which is used by millions of people around the world every day. People share their pictures, send messages and share different things on their profile with their friends and families.

How to Hack Facebook? Is the highly searched expression on Google, we have discussed this before as well in our “Facebook Hacking Course”. Everyone is seeking to somehow take control to other’s social profile and their privacy by reading the chats and other stuffs.

The Researchers at Check Point Software Technologies have recently found vulnerability related to the Facebook chat that we have on our online account and mobile app as well. Researchers have stated that attackers now can modify the Facebook chat of the user. Not only can modify but also can send messages and easily can delete as well so that no one trace that what happened from his profile.

This recent vulnerability also allows an attacker to send malicious malware through chat without any trouble.

For modifying the chat, the main thing is to get the user chat ID. Which is given by the Facebook server to every user, and which is unique for all. To get the Facebook chat ID, all you required is the basic HTML knowledge:

1. Send legitimate message to someone. Example “Hi”
2. Right click into the chat and view Page Source and search for message “Hi”
3. Then search for the “message id” parameter from that block that contains the unique Id for the chat.
4. Once the Id is fetched then uses this Id to get access to the chat by using “Burp Suite” Toolkit.

Complete Video demonstration is given below:

This vulnerability can be used for many purposes. The Check Point team has already reported this vulnerability to the Facebook, and will be patched soon by the Facebook security team. So, users won’t have to worry about this vulnerability any more as Facebook is highly concerned and dedicated towards its user’s privacy and security.

Attackers are working hard on finding Facebook vulnerabilities, so we may encounter these types of vulnerabilities in future as well. The most appropriate way to protect Facebook chat is to adopt End-to-End encryption, so that an attacker won’t read the actual chat, if he somehow gets the chat.

Read more

by Malik korrich ~ dimanche 12 juin 2016 0 commentaires

All about IMEI

What is IMEI ?

IMEI is the short term for International Mobile Equipment Identity . It is a unique 15 digit number which is unique for all devices which use cellular devices. This helps us to identify each device differently. We can use this number to block a mobile phone being used by another person if it is lost or stolen . Whenever anyone inserts SIM card ( or turns his cellular device on ) his IMSI number gets registered with his IMEI number.

How to Find IMEI Number ?

You can find IMEI number of your phone by simply pressing *#06# on your keypad . If you have a dual SIM device then 2 IMEI numbers will be displayed.

How to trace IMEI ?

As we saw in this article , whenever you turn your cellular device on , IMSI number of SIM card and IMEI number of the device is maintained by Cellular companies . This helps legal authorities , law enforcement and police departments to trace a phone. They can find the IMSI number of SIM from IMEI thus providing them with all SIM cards used by that device as well as IMEI number used by a particular phone but in any case they have to inform cellular departments to keep a track on a particular IMEI number for new IMSI number of new SIM cards inserted .

What are Non-Traceable Cellular Devices ?

There are devices which do not have IMEI numbers and which don't use SIM cards for connecting with the network providers. This devices use satellite and are known as satellite phones. But even this devices are traceable with high end equipment's.

Database / NVRam File ?

Android device store IMEI and other network information in a file called NVRam file . This contains all details provided by the manufacture and lets the user connect to cellular towers. Unfortunately this file is locked by manufacturer. But this file can be modified while flashing software on the phone ( permanently changing IMEI is possible ) . NVRam files are inside the database file of the phone software which is used while flashing . You can use the database file provided with the stock ROM ( Stock rom is the official flashing software provided by the manufacturer ) of the device .

How to change IMEI ?

Yes ! It is possible to change IMEI number while flashing stock rom ( this is how manufacturers write IMEI numbers in first place .) . You can find one article on How to change IMEI with video tutorials over here.

Read more

by Malik korrich ~ samedi 11 juin 2016 0 commentaires

TOR Mail Encrypted Server: OnionMail

The TOR network is a cluster of servers that allow people to advance their privacy and protection on the Internet. TOR's user makes use of this network by connecting through various virtual tunnels rather than building a direct connection, as a result allowing both organizations and individuals to share information over public networks without negotiating their security and privacy.

OnionMail is an encrypted mail server made to run anonymously on TOR network without losing the capability to communicate with the internet. All OnionMail servers are configured as TOR hidden services and uses SSL (via STARTTLS). OnionMail not only ensures greater privacy to the users but also protect against eavesdropping of the NSA and others. The OnionMail server uses asymmetric encryption. In case of any online attack, each inbox is encrypted with RSA asymmetric keys. By acquiring the server side keys nobody can read messages from the user’s inbox. All data are saved in encrypted form. In this way an attacker can't attain the reverse path to get information or metadata of any user and their activities.

 

Requirements:

To use OnionMail all you need is an email client connected to the TOR network. Example: Claws-Mail or Thunderbird.

Benefits of Using TOR:

While using TOR network nobody can see:
•    Who are you?
•    With whom you are communicating?
•    What are you reading or writing?
•    Where are you?
•    Where is the server?
•    What you are doing?

Some Basic OnionMail’s functions:

•    Multiple independent hidden services.
•    Native PGP integration for subscription and server’s message.
•    SSL cryptography by default (STARTTLS 2048 bits).
•    Support Unicode password (UTF-8 password and 2048 bits key files).
•    SMTP Compatibility.
•    Internet normal email compatibility.
•    Anti-Spam, blacklist and real-time filters.
•    Native mailing list support.
•    Garbage collector to remove automatically old messages.
•    Clock and time zone spoofing.
•    And much more…

Download and read more about OnionMail (TOR Mail encrypted server for Hidden Services).

Read more

by Malik korrich ~ mercredi 8 juin 2016 0 commentaires

wesecure FakeCMS a Honeypot to stop Hackers

This honeypot made to attract Hackers to your admin or login page. Mostly, they usually check website under "login" "admin" or "wp-admin". By using this method you will be able to let them trap into your honeypot and get attackers IP, Location, Use-agent and more. Our honeypot are modified to deny sort methods of spamming.

• Version: 1.0
• Update: Working in create mechanism that generate and analyze automatically.
• Demo: http://wesecure.ae/admin
• Official Site: http://wesecure.ae/weserv/honeypot_fakecms

You will have:

• information will be sent to your email.
• IP of unauthorized attacker that visit the admin portal.
• Anytime he attempt to sign in or try to bruteforce attack you will receive an email of his ip saying that he is trying to brute force with his public ip
• You will be able to know his location and country. Also, his user-agent information will be collected and sent to your email.

Markdown that these information is important and useful to know better about whom trying to attack your website.

Upcoming Version

• CMS to control the action of the attacker information
• Dashboard showing result of the information given
• Collect more information about the attacker
• Smart Analytics that knows the attack type

Downloads

• Download using the website
• Download using terminal

git clone https://github.com/zayedaljaberi/honeypot_fakecms

you will have to download two folders: "admin" and "Error"

Admin Folder will have:

• Index.php : This file is contain the interface and style of the fake admin portal login.
• portal.php - Here is where the action comes, when the user just visit the site it will automatically send you an email the ip of attacker. Then it will automatically redirect you to "Error" Folder.

After the attacker try to use username and password to login, automatically it will get redirect to Error Folder.

Error Folder will have:

• Index.php : This file is contain the interface and style of the fake admin portal login.
• portal.php - Here it will send you an email saying that the attacker try to attempt an bruteforce attack.

Download and read more about the project.

Read more

by Malik korrich ~ vendredi 20 mai 2016 0 commentaires

The most commonly used passwords on the internet - Research

The social networking site LinkedIn was the talking point of Infosec community this week because of the data breach of its 117 Million users. The site was initially hacked four years ago, but the results of hack are showing now. The data of its users is up for sales on dark web according to various sources.

This isn't the first time a major internet giant have fallen victim of data breach, which affected its millions of users all over the world. Last year Ashley Madison an online dating website was hacked which have led to the resignation of its CEO and destroyed the marriages of many people.

However, the question is how hackers are able to breach these highly secured websites and gain passwords of millions of users. Yes, mainly it's because of the lack of cyber security steps taken by those organizations, but the users are equally responsible for becoming a victim of these hacking attacks. 

EHacking researchers have seen that most of the passwords that are hacked previously are commonly used around the globe and most people doesn't care if their password isn't secure. The passwords leaked from the latest LinkedIn hack are similar to the hacks of past years. 

We have gathered the list of most commonly used passwords on the internet right now. List also includes the passwords leaked after the LinkedIn hack.  

Rank	Password	Frequency
1	123456	753,305
2	linkedin	172,523
3	password	144,458
4	123456789	94,314
5	12345678	63,769
6	111111	57,210
7	1234567	49,652
8	sunshine	39,118
9	qwerty	37,538
10	654321	33,854
11	000000	32,490
12	password1	30,981
13	abc123	30,398
14	charlie	28,049
15	linked	25,334
16	maggie	23,892
17	michael	23,075
18	666666	22,888
19	princess	22,122
20	123123	21,826
21	iloveyou	20,251
22	1234567890	19,575
23	Linkedin1	19,441
24	daniel	19,184
25	bailey	18,805
26	welcome	18,504
27	buster	18,395
28	Passw0rd	18,208
29	baseball	17,858
30	shadow	17,781
31	121212	17,134
32	hannah	17,040
33	monkey	16,958
34	thomas	16,789
35	summer	16,652
36	george	16,620
37	harley	16,275
38	222222	16,165
39	jessica	16,088
40	ginger	16,040
41	michelle	16,024
42	abcdef	15,938
43	sophie	15,884
44	jordan	15,839
45	freedom	15,793
46	555555	15,664
47	tigger	15,658
48	joshua	15,628
49	pepper	15,610

How to create a strong password

Creating a strong password needs the combination of alphabets, numbers, signs. Here are some examples: 

3Hghfwg-09;l or gTHncdsY93]ND 

Read more

by Malik korrich ~ jeudi 19 mai 2016 0 commentaires